Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62390.roa
File:                     AS62390.roa (raw, json)
Hash identifier:          TSRyHjTWX11uYL2dXfhVlXE++UkzlBdFx2Uc7g3iaoE=
Subject key identifier:   96:AC:05:CD:AF:46:CA:DD:04:8B:51:2A:E9:1A:4A:3A:CF:A9:2A:90
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       70811BABDCDE799631F0551D473A7D6BEABBB6CE
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62390.roa
Signing time:             Fri 16 Feb 2024 15:25:51 +0000
ROA not before:           Fri 16 Feb 2024 15:20:51 +0000
ROA not after:            Fri 14 Feb 2025 15:25:51 +0000
asID:                     62390
IP address blocks:        23.130.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:81:1b:ab:dc:de:79:96:31:f0:55:1d:47:3a:7d:6b:ea:bb:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 16 15:20:51 2024 GMT
            Not After : Feb 14 15:25:51 2025 GMT
        Subject: CN=96AC05CDAF46CADD048B512AE91A4A3ACFA92A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:04:44:56:7a:a0:94:e2:3b:ea:c2:c1:99:
                    cf:c4:65:39:55:28:11:b9:95:6d:49:87:c5:9e:b7:
                    ee:85:4a:55:f5:ff:04:1b:b2:94:03:c7:75:d6:7e:
                    40:fb:fd:d7:8f:03:67:cb:7c:6b:85:4e:90:da:61:
                    cc:d7:49:5f:d7:62:4d:90:cc:5b:9c:35:35:a9:66:
                    00:8d:d3:bb:bc:85:74:39:72:61:a9:9d:27:e3:c4:
                    ce:2e:d9:a5:99:d0:4b:e9:e5:b7:f3:ce:8d:14:4f:
                    2e:e5:ea:b1:12:01:7a:60:96:19:f3:89:27:e2:7a:
                    1f:77:e3:6e:5a:e3:75:b4:35:e1:73:92:47:cf:b9:
                    77:48:06:bf:92:89:16:68:b5:bb:c5:9c:5f:37:73:
                    2c:81:b2:a3:38:60:ee:8b:dc:35:62:ae:40:54:2c:
                    44:a3:e2:4d:08:db:95:81:b8:52:f4:5b:90:37:45:
                    49:e4:0a:d2:f3:00:36:4f:e1:8e:dd:d9:1e:6c:43:
                    19:27:e6:02:d9:67:d1:27:32:d3:e1:5f:4b:b3:f4:
                    b9:02:9d:b7:fc:2d:27:c2:4f:28:2a:6c:7d:57:a7:
                    4e:96:d6:1a:88:df:cd:ce:d9:30:ce:50:03:00:ae:
                    6b:7c:2f:09:50:ce:d9:a1:c8:1f:42:ae:d0:2b:79:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:05:CD:AF:46:CA:DD:04:8B:51:2A:E9:1A:4A:3A:CF:A9:2A:90
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:83:6f:e1:11:32:08:80:7a:c9:be:e9:9c:a7:17:ed:aa:4b:
         32:b7:d0:95:28:10:64:26:64:4a:fa:da:3f:28:f6:84:f0:67:
         49:96:50:e4:69:dc:f2:c6:c2:2d:25:a1:a7:f1:92:a8:fa:21:
         d3:f9:a9:bd:df:16:61:74:b5:23:c4:87:ed:68:13:8f:fb:83:
         d5:64:c1:be:7c:47:37:bd:d8:8c:e8:ed:70:16:7c:ed:43:0a:
         c1:c4:5e:fa:4f:1f:ea:7f:8c:d6:67:d2:8c:56:97:6f:e7:9d:
         83:8e:1a:57:6d:b6:dd:3e:e7:6e:7c:e9:e2:9e:20:d6:c3:cc:
         77:3e:9f:74:36:b1:89:5d:60:5b:18:ca:09:51:e6:4e:62:2d:
         fe:c2:a6:8f:e9:42:3a:d8:a4:68:9e:46:4e:56:71:89:da:33:
         2d:2e:76:c4:1d:e4:b0:52:5a:71:24:07:fe:d5:f0:c4:bf:21:
         c0:ac:3b:0e:e8:e1:42:6c:8a:5a:2d:70:8b:31:86:01:01:cd:
         93:c9:6e:91:98:93:fe:fd:ea:85:3d:9d:1a:59:4b:37:9f:a7:
         12:60:8e:b5:ad:0d:e1:47:e0:0e:96:ab:33:e7:fd:17:4c:95:
         d5:84:fc:36:2a:ee:19:1f:9c:5b:35:cb:82:af:fc:fb:21:8f:
         d8:2a:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:50:18 2024 by rpki-client on console-fra.rpki-client.org