Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa
File:                     AS63473.roa (raw, json)
Hash identifier:          lLABjKSBlhHbhG1XnCuvnRCJqmH6I249H+CkcRb4XTA=
Subject key identifier:   54:DF:BA:DC:DB:47:27:8D:61:76:0B:79:F0:35:74:CB:E6:BA:B9:D6
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2AA3A42DBF882010416067817D6562C907CC8010
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa
Signing time:             Tue 04 Mar 2025 20:28:26 +0000
ROA not before:           Tue 04 Mar 2025 20:23:26 +0000
ROA not after:            Tue 03 Mar 2026 20:28:26 +0000
asID:                     63473
IP address blocks:        140.99.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a3:a4:2d:bf:88:20:10:41:60:67:81:7d:65:62:c9:07:cc:80:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar  4 20:23:26 2025 GMT
            Not After : Mar  3 20:28:26 2026 GMT
        Subject: CN=54DFBADCDB47278D61760B79F03574CBE6BAB9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:92:14:ae:78:11:bc:8b:52:08:b4:13:b6:
                    87:db:df:88:a7:6b:f7:c3:b4:5c:8c:e8:eb:49:2f:
                    66:c1:67:08:e6:f3:5e:73:23:7d:67:b1:40:80:a4:
                    b1:e6:40:20:41:82:fd:c3:3d:c5:1a:51:1b:e6:b3:
                    2a:d0:1e:10:bc:4f:ff:5d:ef:4b:0d:d6:9c:93:d7:
                    56:dc:f9:1f:6e:c9:b0:20:fa:7a:51:9c:89:db:d3:
                    65:0e:60:d5:f2:ea:ec:2a:db:21:03:8e:85:fa:09:
                    39:ae:56:2f:e6:21:ef:11:89:5f:b5:ac:07:d3:db:
                    f6:d2:44:1b:ef:82:d0:95:a5:3a:78:2e:25:5f:f0:
                    87:35:50:23:39:b1:78:78:a9:56:79:3d:fc:38:b2:
                    8b:b8:f5:c8:72:e3:92:e7:4f:75:a9:1e:37:7c:42:
                    43:6a:64:28:06:4a:c0:a6:83:04:ff:25:7c:4c:09:
                    3e:96:dd:01:36:12:4b:17:7f:86:15:d6:31:9c:0f:
                    5f:3c:4c:eb:3b:43:31:52:15:48:87:d2:3c:a1:68:
                    a0:79:bf:89:c7:00:6c:d2:90:21:12:76:db:bd:62:
                    37:df:b9:fc:10:f7:57:5b:b8:66:5e:02:d8:9a:06:
                    9c:cb:d8:d9:2c:2e:e0:0c:b8:12:60:07:3f:1e:2f:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:BA:DC:DB:47:27:8D:61:76:0B:79:F0:35:74:CB:E6:BA:B9:D6
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:5c:fc:dd:1d:46:d5:ed:ba:c7:06:0f:a9:2a:7f:74:0b:
         e5:c8:f1:4b:f9:e2:5a:4a:91:bc:1f:c4:c7:0b:2d:7f:46:66:
         cc:3c:46:62:24:54:c1:7a:5f:62:d8:7f:f3:04:dd:e1:bf:75:
         48:55:63:80:02:74:af:6b:67:41:0e:ff:c1:21:c0:6a:c6:0c:
         89:a3:a2:43:f4:33:c9:6a:4b:67:30:fb:e4:c5:1b:7f:eb:3a:
         8d:4f:f4:74:91:7a:60:be:22:a7:d5:b9:60:88:73:71:0d:79:
         e3:5a:8d:26:11:e8:63:e4:14:1b:b1:ec:8a:09:d2:14:5e:b0:
         89:9f:8e:8e:08:a0:e8:4d:18:a8:0f:d7:49:ef:3c:cc:54:72:
         2b:aa:77:a2:fd:88:de:15:97:64:10:7a:8b:98:ae:40:5d:43:
         0d:33:cd:14:68:8e:00:b4:d5:44:96:41:d9:10:11:29:c2:ec:
         70:21:ef:a8:01:b6:9e:fd:1f:e6:7e:d5:26:b3:90:22:74:65:
         21:a0:c0:69:07:56:23:97:97:da:18:9b:f8:ec:43:68:05:e8:
         5e:1e:4e:04:d7:b7:16:4c:f2:87:54:02:f5:7f:83:a6:9d:3f:
         bb:40:b5:7b:f1:8c:13:cd:03:ba:43:7c:44:b2:1c:ff:4e:9a:
         f3:5d:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:53:21 2025 by rpki-client