Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa
File:                     AS63473.roa (raw, json)
Hash identifier:          vFnw1BMPUV3k+99RoiMvbZqd4eK5ikgqT2YkL/zoyI0=
Subject key identifier:   73:05:10:E2:0A:AB:1D:D6:63:4F:24:E8:DE:EB:40:05:28:EA:83:93
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       5A049AFEDAD4C6103EFE0F533977C85FBC1C75E8
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa
Signing time:             Tue 02 Apr 2024 20:01:15 +0000
ROA not before:           Tue 02 Apr 2024 19:56:15 +0000
ROA not after:            Tue 01 Apr 2025 20:01:15 +0000
asID:                     63473
IP address blocks:        140.99.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:04:9a:fe:da:d4:c6:10:3e:fe:0f:53:39:77:c8:5f:bc:1c:75:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr  2 19:56:15 2024 GMT
            Not After : Apr  1 20:01:15 2025 GMT
        Subject: CN=730510E20AAB1DD6634F24E8DEEB400528EA8393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1e:bb:b7:ea:4d:3b:6a:c8:13:b9:09:fb:10:
                    b8:f2:77:ce:52:96:3f:11:86:7f:f8:a3:0f:3e:81:
                    49:d3:42:0d:eb:42:ae:25:bd:3d:3f:5b:7c:63:87:
                    22:e5:56:ac:7c:4d:81:1b:6e:25:42:e1:03:98:ba:
                    00:89:21:c7:90:a1:cf:fc:cc:73:45:d0:0d:88:6e:
                    2e:1a:3b:d2:4f:b1:79:cd:52:ab:e5:8d:a5:a1:84:
                    48:7e:b3:42:77:bb:18:f2:56:b9:7b:52:1b:b0:08:
                    8e:43:76:f9:03:d8:ee:bb:3c:aa:50:6f:28:39:a2:
                    f8:b2:80:f0:46:9b:ce:cc:b8:73:fb:a6:8b:90:34:
                    9b:84:04:13:13:4e:99:76:71:55:b1:c3:42:05:19:
                    47:39:09:93:f0:c1:04:a3:70:10:5d:c1:85:b7:0b:
                    02:43:7e:cc:90:fe:29:d8:d4:7f:93:74:c7:57:53:
                    91:4f:2b:59:db:ed:54:2e:66:fc:c7:2f:2a:a5:f8:
                    cb:9d:6a:dc:af:23:6d:f9:a9:59:ab:32:91:c2:a1:
                    f2:82:42:03:ba:f5:60:f3:0c:b3:ac:f4:2e:34:9c:
                    76:e5:d7:40:f8:c8:8a:bc:c2:37:ac:c9:a5:ba:ac:
                    6c:60:e5:19:c6:f6:f8:7a:01:cf:48:d7:21:e5:06:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:05:10:E2:0A:AB:1D:D6:63:4F:24:E8:DE:EB:40:05:28:EA:83:93
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1d:ef:e3:03:cc:cc:49:49:cb:19:1e:7d:19:b6:66:c5:ed:
         d0:d4:aa:ba:12:36:41:22:31:9d:f0:0b:66:16:8b:a2:ae:cc:
         25:8e:3c:bc:e8:7e:97:d8:00:a4:7b:81:dd:5d:2e:43:26:f4:
         d1:a7:69:ae:38:8b:0c:cc:6b:b8:2d:40:07:af:58:cd:32:d9:
         b7:1a:93:c0:3c:c1:14:76:52:ac:8a:94:1f:43:31:d7:2c:ae:
         5a:17:59:8a:e4:4a:a4:e9:df:fe:08:94:a9:df:06:2b:e8:51:
         18:93:08:41:3c:aa:85:cf:56:04:8e:3e:20:eb:70:b5:96:95:
         51:1d:91:28:33:88:c5:29:dc:39:d1:15:21:c4:d8:97:ef:13:
         c5:a3:08:c4:2c:9b:99:d5:03:11:56:63:fd:e7:b1:88:b2:20:
         d5:ce:d2:fc:ea:45:30:92:07:88:c2:e5:3e:96:a1:ce:d2:d6:
         bb:9d:09:db:23:33:e4:78:22:51:74:ba:89:d0:e0:30:c0:54:
         6b:a4:45:f1:8a:59:f8:cb:fd:f7:7a:5a:f5:04:26:81:fc:d7:
         ca:da:f4:c4:6e:9e:96:ef:1d:ba:b8:04:80:d1:b7:d6:38:aa:
         2f:f2:f2:13:a6:83:24:df:f1:76:5f:4c:6c:24:7e:a7:6e:3d:
         5e:c6:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:49 2024 by rpki-client on console-fra.rpki-client.org