Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397165.roa
File:                     AS397165.roa (raw, json)
Hash identifier:          apqH4yWYWfbzyvGmdtGPOVr2GWYqF3+Q/2s0kYVuzGM=
Subject key identifier:   AC:0D:ED:84:36:BF:79:58:D1:A6:75:F4:1F:E8:6F:AA:2D:4D:EF:BE
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       566A6366482E73DB86D9A78DB2BDA8BE8DDF7D12
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397165.roa
Signing time:             Tue 29 Aug 2023 17:33:24 +0000
ROA not before:           Tue 29 Aug 2023 17:28:24 +0000
ROA not after:            Tue 27 Aug 2024 17:33:24 +0000
asID:                     397165
IP address blocks:        23.161.224.0/24 maxlen: 24
                          2603:f000::/20 maxlen: 28
                          2603:f010::/28 maxlen: 28
                          2603:f050::/28 maxlen: 28
                          2603:f090::/28 maxlen: 28
                          2603:f0e0::/28 maxlen: 28
                          2603:f120::/28 maxlen: 28
                          2603:f160::/28 maxlen: 28
                          2603:f1b0::/28 maxlen: 28
                          2603:f1f0::/28 maxlen: 28
                          2603:f210::/28 maxlen: 28
                          2603:f250::/28 maxlen: 28
                          2603:f2a0::/28 maxlen: 28
                          2603:f2e0::/28 maxlen: 28
                          2603:f330::/28 maxlen: 28
                          2603:f380::/28 maxlen: 28
                          2603:f3a0::/28 maxlen: 28
                          2603:f3e0::/28 maxlen: 28
                          2603:f400::/28 maxlen: 28
                          2603:f420::/28 maxlen: 28
                          2603:f460::/28 maxlen: 28
                          2603:f4d0::/28 maxlen: 28
                          2603:f520::/28 maxlen: 28
                          2603:f540::/28 maxlen: 28
                          2603:f5d0::/28 maxlen: 28
                          2603:f5f0::/28 maxlen: 28
                          2603:f610::/28 maxlen: 28
                          2603:f630::/28 maxlen: 28
                          2603:f650::/28 maxlen: 28
                          2603:f6a0::/28 maxlen: 28
                          2603:f720::/28 maxlen: 28
                          2603:f780::/28 maxlen: 28
                          2603:f7b0::/28 maxlen: 28
                          2603:f7e0::/28 maxlen: 28
                          2603:f800::/28 maxlen: 28
                          2603:f830::/28 maxlen: 28
                          2603:f860::/28 maxlen: 28
                          2603:f8c0::/28 maxlen: 28
                          2603:f910::/28 maxlen: 28
                          2603:f940::/28 maxlen: 28
                          2603:f970::/28 maxlen: 28
                          2603:f9d0::/28 maxlen: 28
                          2603:fa00::/28 maxlen: 28
                          2603:fa20::/28 maxlen: 28
                          2603:fa80::/28 maxlen: 28
                          2603:fae0::/28 maxlen: 28
                          2603:fb30::/28 maxlen: 28
                          2603:fb60::/28 maxlen: 28
                          2603:fb90::/28 maxlen: 28
                          2603:fbc0::/28 maxlen: 28
                          2603:fc00::/28 maxlen: 28
                          2603:fc40::/28 maxlen: 28
                          2603:fca0::/28 maxlen: 28
                          2603:fcc0::/28 maxlen: 28
                          2603:fd20::/28 maxlen: 28
                          2603:fd40::/28 maxlen: 28
                          2603:fda0::/28 maxlen: 28
                          2603:fdc0::/28 maxlen: 28
                          2603:fe00::/28 maxlen: 28
                          2603:fe30::/28 maxlen: 28
                          2603:fe70::/28 maxlen: 28
                          2603:fee0::/28 maxlen: 28
                          2603:ff10::/28 maxlen: 28
                          2603:ff50::/28 maxlen: 28
                          2603:ff90::/28 maxlen: 28
                          2603:ffa0::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6a:63:66:48:2e:73:db:86:d9:a7:8d:b2:bd:a8:be:8d:df:7d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 29 17:28:24 2023 GMT
            Not After : Aug 27 17:33:24 2024 GMT
        Subject: CN=AC0DED8436BF7958D1A675F41FE86FAA2D4DEFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:89:1a:c9:e2:0f:5d:7d:d9:28:14:80:8b:
                    9a:bd:02:f6:e8:82:1d:79:fd:8d:c7:1c:8c:97:4d:
                    09:52:93:ed:23:f3:3e:07:92:24:5b:96:5d:1e:19:
                    41:4a:78:1b:32:e8:d4:f9:dc:19:f5:cf:26:04:90:
                    9f:8b:54:cd:d6:67:25:70:c3:e5:a1:c3:9c:4f:a4:
                    a7:e4:e9:90:c1:da:15:ca:34:c6:af:bb:87:96:36:
                    75:03:d7:ab:fb:75:63:8a:f3:2c:e0:bb:3a:ba:74:
                    fc:10:7f:c2:5f:4a:fb:d6:fb:be:4c:d6:95:00:04:
                    89:4c:b7:1d:99:f0:8e:b5:f6:6a:9d:93:7d:95:4e:
                    b3:bd:71:ed:99:ce:23:9e:8d:ca:cc:bd:ab:6d:34:
                    0c:7d:fe:8f:ec:9d:69:f7:af:bb:76:13:0c:8a:98:
                    f8:98:d4:35:d0:9a:4c:0a:ea:e8:9f:84:e1:fd:80:
                    dd:b6:21:8a:ee:92:11:31:90:7c:71:30:08:85:96:
                    09:7b:7f:dd:96:7e:95:6e:b1:a0:f8:59:ef:d2:b9:
                    37:56:f0:f1:5e:85:2b:75:f1:10:da:ad:95:64:af:
                    fc:20:2b:da:dd:98:6a:7a:4d:04:02:54:08:ae:b8:
                    bd:d4:f6:6c:a5:c2:80:88:13:fd:a9:b9:02:66:4c:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:ED:84:36:BF:79:58:D1:A6:75:F4:1F:E8:6F:AA:2D:4D:EF:BE
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397165.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.224.0/24
                IPv6:
                  2603:f000::/20

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:75:a4:99:cc:5a:af:ae:b4:d3:4a:76:0c:5f:6f:01:bb:
         1d:e3:ff:21:44:ac:8e:13:89:2f:80:3c:6d:b9:08:ed:2c:98:
         5b:8f:7b:5f:3c:0b:b2:eb:39:c1:c7:5e:0b:20:5f:28:c1:60:
         f5:ac:db:5b:5f:1e:12:5a:f2:9c:b8:9a:d1:6a:ee:2c:c6:7f:
         63:7a:bd:b0:0f:2d:49:69:0c:d0:5f:56:a2:bb:a8:b6:75:09:
         7d:9f:0c:06:98:fb:e8:c1:d4:df:db:56:5d:61:4c:21:d7:3e:
         37:94:60:ed:0a:ef:9b:ad:90:70:3b:7d:e5:49:67:e9:27:af:
         d6:ca:81:a3:a9:1a:8a:63:f9:80:92:b3:e3:d0:fc:08:b9:91:
         82:09:1b:75:1c:52:e8:0c:79:8c:f2:9d:fb:6d:ae:66:a0:90:
         ac:34:a9:40:ff:29:53:b5:61:fa:0c:37:64:55:d2:11:ff:fa:
         34:75:bb:b5:b6:cb:e3:66:fb:18:d9:50:76:4b:34:88:96:fe:
         24:e5:01:1b:5d:27:a0:47:4e:41:a4:4c:f0:b9:3f:07:63:bc:
         e8:ec:68:9a:1c:c3:31:43:32:b9:3b:91:be:40:d8:e9:ff:96:
         dc:3b:14:89:35:be:e4:cd:e4:bb:10:36:af:a9:40:76:53:76:
         c2:29:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:08:25 2024 by rpki-client on console-fra.rpki-client.org