Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
File:                     AS53847.roa (raw, json)
Hash identifier:          J1N/ZL3q8qjE15MHX3MGyS2UuAF2AChzbrUmG+Hs8JY=
Subject key identifier:   4A:F3:B4:6B:F1:5F:F3:90:3E:6F:B1:2A:D0:75:8F:27:62:27:9B:37
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       61CB48F0DE206E80FB93E079CBC29B01750D0616
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
Signing time:             Mon 02 Oct 2023 21:55:37 +0000
ROA not before:           Mon 02 Oct 2023 21:50:37 +0000
ROA not after:            Mon 30 Sep 2024 21:55:37 +0000
asID:                     53847
IP address blocks:        162.248.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:48:f0:de:20:6e:80:fb:93:e0:79:cb:c2:9b:01:75:0d:06:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct  2 21:50:37 2023 GMT
            Not After : Sep 30 21:55:37 2024 GMT
        Subject: CN=4AF3B46BF15FF3903E6FB12AD0758F2762279B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:fb:d3:75:8b:d0:df:1e:13:f8:d2:c0:d9:
                    b4:a6:62:26:38:13:76:d5:db:9d:bf:27:3c:4c:32:
                    34:37:ac:07:ef:e6:d8:8d:9e:b8:4b:ab:d8:1f:5e:
                    19:d9:ab:73:12:74:bb:e1:c3:e0:dd:b0:f2:28:fe:
                    76:55:89:f5:a2:97:98:92:66:13:e8:63:65:b6:09:
                    49:4c:5e:60:09:8d:15:df:c8:2b:0f:35:da:27:18:
                    67:f8:15:80:8a:0e:fd:d7:ea:42:73:33:de:02:59:
                    fb:37:81:22:ec:2b:86:b4:e4:3f:36:db:f1:22:71:
                    da:22:3c:1f:1d:7f:87:94:4d:bd:a6:2a:e9:c7:82:
                    fd:1c:7c:f5:19:7a:3a:93:3b:57:f1:ad:20:bb:53:
                    d0:85:5b:cb:d9:cd:b2:ea:97:0d:bb:5d:2f:de:63:
                    ee:d5:9d:13:b3:40:1a:85:4e:12:ea:de:ed:f0:5e:
                    b9:1c:fc:92:c9:69:24:17:1a:44:e6:05:51:58:5e:
                    2b:4d:0e:a8:b4:60:12:b4:f3:a8:6f:11:92:d9:b0:
                    6a:d7:f9:bf:f7:84:be:ff:4f:f3:c1:01:f6:cb:61:
                    d6:11:c0:80:c3:a2:47:f5:97:a9:ff:72:45:ed:b0:
                    16:8d:54:39:c4:05:8e:1f:1a:0c:fd:2e:19:8f:1d:
                    fd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:B4:6B:F1:5F:F3:90:3E:6F:B1:2A:D0:75:8F:27:62:27:9B:37
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:5d:b5:24:f4:1e:be:f3:dc:1e:f6:10:92:00:ff:32:04:
         cf:ed:01:bb:85:51:ae:dc:e5:92:d6:03:72:ba:60:32:81:9d:
         f3:55:c2:98:5f:25:8c:a4:a4:7c:01:1c:1b:37:66:1f:44:03:
         d0:7c:b7:d7:23:d1:5f:54:bf:57:91:f1:04:fc:5d:87:b9:f7:
         79:a3:92:2f:15:5a:3d:e7:5b:a5:5c:e2:77:ea:c3:dd:40:10:
         a0:3c:c3:91:8e:d6:e8:aa:b6:6b:b2:7c:fe:b3:5a:eb:6e:3a:
         3f:47:7b:65:be:03:0b:91:38:25:c9:2f:8c:92:eb:5b:a8:c6:
         72:4a:87:21:b5:52:ad:85:45:b5:87:9a:02:08:cd:f8:01:00:
         24:24:d9:64:1e:24:5a:bb:26:53:f5:16:7a:df:ab:8e:0e:38:
         b4:1b:bd:6e:e9:05:15:76:62:2e:59:1c:cb:17:12:13:a1:f8:
         1f:d8:83:aa:dd:36:63:2e:77:f5:da:08:50:66:d5:41:2e:c7:
         11:2d:97:6a:d1:8a:93:20:76:0b:ba:08:73:ac:c5:f1:37:46:
         08:09:4c:0e:8c:a9:d5:86:0d:71:c3:62:cf:b7:9a:4d:1e:76:
         95:89:28:f8:a6:51:9e:63:9a:00:eb:29:1e:82:69:f9:b7:cd:
         59:19:4f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:27:14 2024 by rpki-client on console-ams.rpki-client.org