Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          Qu2s2ZK87v0wTPSVoLW9/vR33SzJ0i1mwzcFlEUN4Ms=
Subject key identifier:   3B:32:C1:AF:96:F4:9F:87:84:AD:9A:F5:F0:E2:25:78:06:34:B8:75
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       768D709D28E97CA0138A8850D7568576278E4DBD
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63023.roa
Signing time:             Fri 13 Oct 2023 00:00:06 +0000
ROA not before:           Thu 12 Oct 2023 23:55:06 +0000
ROA not after:            Fri 11 Oct 2024 00:00:06 +0000
asID:                     63023
IP address blocks:        140.99.83.0/24 maxlen: 24
                          140.99.101.0/24 maxlen: 24
                          140.99.252.0/24 maxlen: 24
                          140.99.254.0/24 maxlen: 24
                          140.99.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8d:70:9d:28:e9:7c:a0:13:8a:88:50:d7:56:85:76:27:8e:4d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct 12 23:55:06 2023 GMT
            Not After : Oct 11 00:00:06 2024 GMT
        Subject: CN=3B32C1AF96F49F8784AD9AF5F0E225780634B875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:ad:29:6b:40:71:a1:5f:b6:56:d2:3d:b3:
                    00:e0:2b:d5:c5:d6:b5:20:f7:6a:23:14:7b:a4:f6:
                    32:b2:a8:4a:fe:52:59:41:38:c0:54:09:a3:86:4d:
                    41:84:d1:90:74:fa:b6:e8:49:2a:77:35:b6:53:5f:
                    61:4c:48:b3:5b:b7:ca:08:8e:19:7b:fc:e7:36:e2:
                    42:0f:36:59:ab:b0:f6:6f:53:b9:51:d0:5c:9f:27:
                    32:cd:f3:2b:b0:40:e3:b6:97:d7:94:97:3f:48:6f:
                    be:c3:02:0b:b0:62:4f:57:0c:21:fa:14:d3:ae:dd:
                    2f:a3:19:4c:df:a0:54:ce:bb:f5:f6:ec:b4:67:df:
                    eb:52:e2:20:c4:2b:6d:9d:c3:4b:cf:e1:b1:0b:de:
                    33:e8:67:a8:a5:c1:0b:8c:ee:70:79:26:f4:a1:1a:
                    6c:03:e7:f0:af:86:0a:aa:1e:f4:27:0e:fd:8c:af:
                    f9:ac:e1:77:82:f6:67:2a:f4:76:84:27:2e:cc:ab:
                    54:94:5b:a2:fb:eb:c9:c3:20:9d:2e:d2:83:f2:5d:
                    dd:89:aa:a4:60:64:0a:5a:fe:79:2b:5f:80:46:76:
                    61:fc:45:6e:dc:25:7f:6d:4e:99:73:c2:04:3d:5a:
                    5b:31:68:30:3f:5b:9b:5f:48:d8:bc:55:51:86:da:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:C1:AF:96:F4:9F:87:84:AD:9A:F5:F0:E2:25:78:06:34:B8:75
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.83.0/24
                  140.99.101.0/24
                  140.99.252.0/24
                  140.99.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:86:4b:26:ad:78:78:74:3b:9d:8a:cd:a2:91:70:6f:44:
         06:8f:11:89:f6:f4:3e:38:38:ad:2d:76:5b:c3:c7:e3:d6:80:
         0d:58:d7:bc:25:c6:3a:af:f5:cc:e8:66:58:1e:38:15:7c:ec:
         bc:1c:0f:8a:8e:7c:af:e9:80:18:f1:e4:c4:b9:4f:5d:dd:06:
         6a:48:f8:b6:28:a9:69:0b:fb:2c:c3:b1:9c:e9:e0:95:82:5b:
         61:75:00:d8:90:9f:1d:76:89:a4:76:78:bf:8c:99:e5:ae:d7:
         d8:ce:e5:8c:4b:78:21:e0:90:1a:34:af:b5:b4:7f:36:8d:ea:
         28:d3:36:1a:3c:7f:7e:36:69:28:03:f0:79:9b:7d:63:a2:92:
         e6:06:39:3b:f6:8e:4a:74:cc:46:49:43:d7:de:ed:03:08:b8:
         f8:ca:09:b0:1c:5e:ba:60:04:93:f4:f8:05:fb:a4:0d:b3:35:
         e6:aa:c2:83:f1:df:78:2a:79:46:da:c4:ec:b6:a7:75:f2:96:
         4d:11:57:9f:d3:0a:e3:a8:08:60:75:d4:a8:46:2e:02:9c:56:
         05:df:d1:53:1d:51:03:cd:ab:b8:95:db:cd:66:ae:e0:4b:a4:
         85:84:b8:75:a5:56:37:00:4d:43:85:09:b5:08:6f:be:11:3b:
         fe:e9:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:24:12 2024 by rpki-client on console-ams.rpki-client.org