Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa
File:                     AS39945.roa (raw, json)
Hash identifier:          HBKNSLuHUyXbzmmrUwZ8SFSon+sbYYJfqqvlzHvFHY8=
Subject key identifier:   C6:95:4A:41:BD:31:3C:FB:F0:6E:47:2F:F9:AD:C9:97:97:ED:A1:8D
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       559EAD0F6FD14E60A4F988CD67146C59D761D993
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa
Signing time:             Mon 22 Jan 2024 07:42:10 +0000
ROA not before:           Mon 22 Jan 2024 07:37:10 +0000
ROA not after:            Mon 20 Jan 2025 07:42:10 +0000
asID:                     39945
IP address blocks:        45.54.20.0/24 maxlen: 24
                          2607:f740:e620::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9e:ad:0f:6f:d1:4e:60:a4:f9:88:cd:67:14:6c:59:d7:61:d9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jan 22 07:37:10 2024 GMT
            Not After : Jan 20 07:42:10 2025 GMT
        Subject: CN=C6954A41BD313CFBF06E472FF9ADC99797EDA18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:94:2c:b9:7a:f8:02:27:25:a4:f2:b5:6c:
                    53:c6:c6:66:dc:95:8c:f3:43:c5:d5:7b:58:66:2c:
                    e5:21:a4:c2:9e:1b:7b:c7:20:5e:d3:72:70:de:64:
                    e4:90:b7:00:fa:45:97:55:48:3a:ff:da:78:98:de:
                    b8:95:4d:c2:4d:0d:01:ab:f5:6a:08:3e:d1:34:81:
                    d2:f8:2f:50:69:c1:d9:58:3b:75:79:b0:6c:82:33:
                    61:37:08:2f:46:c1:f4:b3:e5:5f:ab:3a:db:45:19:
                    a4:bb:7f:ad:d2:6e:ef:37:5a:cb:3b:79:07:9f:b3:
                    d5:95:76:6b:95:5c:d1:17:33:76:d0:60:f3:0b:90:
                    ff:e1:7e:d1:fc:18:41:b0:c4:50:8d:81:c4:ed:19:
                    26:5a:8b:f8:dd:57:88:23:a9:ec:1b:59:28:9c:5a:
                    07:ca:0d:df:b4:31:88:db:6a:a0:60:57:07:f1:a7:
                    11:09:88:3e:47:15:06:36:1e:7e:6a:7d:a3:ff:2d:
                    85:d7:a3:23:43:58:6d:03:fc:45:95:5d:85:9f:98:
                    ec:a6:5c:c5:49:8e:fb:62:19:a3:b4:f3:60:7b:50:
                    af:1c:25:ad:f3:44:42:31:b0:d6:3c:ed:87:44:14:
                    64:6d:7e:d5:97:c5:7e:19:81:e3:46:4b:db:d7:cd:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:95:4A:41:BD:31:3C:FB:F0:6E:47:2F:F9:AD:C9:97:97:ED:A1:8D
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.20.0/24
                IPv6:
                  2607:f740:e620::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:83:69:51:0f:82:61:b6:20:ce:48:84:6d:af:d8:8b:c3:
         40:d0:1e:34:37:3a:bd:40:c4:34:0e:45:96:11:17:a7:01:cf:
         52:05:4c:89:bc:48:3f:be:a5:84:4c:67:6f:e3:13:e4:e5:f7:
         86:26:59:01:44:97:e6:bb:ca:0e:83:f6:45:48:3a:65:e1:8d:
         05:93:ff:e4:69:05:56:61:b5:18:51:d2:8d:5d:27:67:7a:fd:
         ba:1e:9b:bc:b6:b6:53:6b:79:7f:5b:85:f8:59:9c:fc:cb:a9:
         2a:2a:d3:fb:6d:22:a7:8c:90:1c:ac:8a:9c:1d:86:6f:f7:37:
         c3:ba:75:c9:24:0c:cd:10:49:9e:67:2f:38:6f:f6:b7:43:31:
         a2:bc:c2:a0:56:cf:18:ea:b3:72:14:65:d7:6e:30:e8:65:7b:
         fd:ba:c6:a8:8c:0b:27:c3:8c:e4:9d:65:d5:18:f7:f6:6d:2a:
         d6:cc:73:64:50:f5:81:21:03:28:8b:35:68:b1:d0:30:b6:bf:
         86:5d:2b:21:55:37:8f:d4:8b:a8:c3:80:64:0d:a8:a6:5a:cb:
         c8:6e:c3:5b:81:5f:6a:f0:9e:2e:ac:62:c7:a6:1e:f5:6b:ea:
         4a:5b:8b:83:a3:b3:90:38:c7:a4:6a:7f:31:37:87:eb:43:76:
         66:03:2a:d7
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUVZ6tD2/RTmCk+YjNZxRsWddh2ZMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQwMTIyMDczNzEwWhcNMjUwMTIwMDc0MjEw
WjAzMTEwLwYDVQQDEyhDNjk1NEE0MUJEMzEzQ0ZCRjA2RTQ3MkZGOUFEQzk5Nzk3
RURBMThEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRqULLl6+AIn
JaTytWxTxsZm3JWM80PF1XtYZizlIaTCnht7xyBe03Jw3mTkkLcA+kWXVUg6/9p4
mN64lU3CTQ0Bq/VqCD7RNIHS+C9QacHZWDt1ebBsgjNhNwgvRsH0s+VfqzrbRRmk
u3+t0m7vN1rLO3kHn7PVlXZrlVzRFzN20GDzC5D/4X7R/BhBsMRQjYHE7RkmWov4
3VeII6nsG1konFoHyg3ftDGI22qgYFcH8acRCYg+RxUGNh5+an2j/y2F16MjQ1ht
A/xFlV2Fn5jsplzFSY77YhmjtPNge1CvHCWt80RCMbDWPO2HRBRkbX7Vl8V+GYHj
Rkvb183waQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFMaVSkG9MTz78G5HL/mtyZeX
7aGNMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM5OTQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTYUMA8EAgACMAkDBwAmB/dA5iAw
DQYJKoZIhvcNAQELBQADggEBAIdLg2lRD4JhtiDOSIRtr9iLw0DQHjQ3Or1AxDQO
RZYRF6cBz1IFTIm8SD++pYRMZ2/jE+Tl94YmWQFEl+a7yg6D9kVIOmXhjQWT/+Rp
BVZhtRhR0o1dJ2d6/boem7y2tlNreX9bhfhZnPzLqSoq0/ttIqeMkBysipwdhm/3
N8O6dckkDM0QSZ5nLzhv9rdDMaK8wqBWzxjqs3IUZdduMOhle/26xqiMCyfDjOSd
ZdUY9/ZtKtbMc2RQ9YEhAyiLNWix0DC2v4ZdKyFVN4/Ui6jDgGQNqKZay8huw1uB
X2rwni6sYsemHvVr6kpbi4Ojs5A4x6RqfzE3h+tDdmYDKtc=
-----END CERTIFICATE-----
Generated at Mon May 13 01:27:14 2024 by rpki-client on console-ams.rpki-client.org