Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
File:                     AS53847.roa (raw, json)
Hash identifier:          5iG3PGQygzx7Kiu52BGFPiXhiaJ/SOxiTQcpW/f3+aQ=
Subject key identifier:   EE:82:C6:B4:37:9E:A1:15:49:D0:87:F1:CF:BD:50:0F:1B:37:3B:D2
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       4E2F6AB348725BE3FA3CD3BE2EB113E4C7135642
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
Signing time:             Mon 02 Sep 2024 22:13:10 +0000
ROA not before:           Mon 02 Sep 2024 22:08:10 +0000
ROA not after:            Mon 01 Sep 2025 22:13:10 +0000
asID:                     53847
IP address blocks:        162.248.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2f:6a:b3:48:72:5b:e3:fa:3c:d3:be:2e:b1:13:e4:c7:13:56:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Sep  2 22:08:10 2024 GMT
            Not After : Sep  1 22:13:10 2025 GMT
        Subject: CN=EE82C6B4379EA11549D087F1CFBD500F1B373BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:32:91:15:78:2e:ab:27:27:2d:40:70:41:
                    f0:7b:d7:6f:93:3a:a8:d3:ca:06:9f:58:d8:e7:b4:
                    c0:f4:ad:bf:e9:25:73:9a:f3:89:87:c4:c7:c6:4b:
                    59:92:0f:f3:28:a6:79:27:0f:f9:fa:f7:6f:31:78:
                    a0:af:16:40:56:17:d0:64:f1:7d:d9:f4:98:83:0f:
                    fb:5c:1e:cc:c1:21:b0:52:1f:1e:89:26:85:80:77:
                    3d:90:15:dc:69:da:54:10:46:03:19:6c:6c:da:ac:
                    43:9d:12:bd:65:3e:81:11:e7:87:0a:79:76:2e:b8:
                    ab:b4:41:76:7f:76:7f:db:9e:40:3e:ac:d8:2c:49:
                    75:32:19:09:85:0c:09:a0:5b:2b:57:3e:93:61:fb:
                    7d:1d:c6:95:7d:8f:2e:fd:5a:be:ae:6f:4e:a7:53:
                    8a:c7:a0:96:6d:3d:86:25:4d:f7:6f:99:34:06:5d:
                    30:87:49:dd:4c:d4:8c:d4:39:b7:99:ec:26:f8:db:
                    a3:06:33:c3:8d:ae:83:a6:19:2b:16:28:3d:21:b4:
                    41:13:13:9f:9f:5f:78:96:fe:e6:6b:82:f0:b8:03:
                    eb:1d:06:57:ea:de:96:d3:36:9d:44:ab:e5:02:9e:
                    cd:1d:75:b7:ee:c2:b3:b6:42:05:3a:8a:d8:a9:96:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:82:C6:B4:37:9E:A1:15:49:D0:87:F1:CF:BD:50:0F:1B:37:3B:D2
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7f:3f:3d:9e:a7:0e:ca:63:dd:51:7b:62:4f:14:05:a5:da:
         e5:d2:57:f4:89:f3:32:d5:4c:eb:3a:bd:5e:14:ce:54:ea:45:
         b7:14:df:08:98:4a:5f:b7:46:e2:5d:3d:43:9c:71:c3:b1:5a:
         20:ca:b8:ea:0a:38:de:a6:46:49:b0:fa:9c:32:25:ed:54:bc:
         97:73:8a:0a:28:d6:36:66:a2:20:44:cb:2a:d3:75:b6:af:01:
         2c:d7:ff:85:0d:48:aa:ba:4a:aa:a7:16:0f:5f:c5:bf:7c:a3:
         8b:cc:ec:f1:e5:3a:c9:f4:33:01:43:c6:7a:17:ca:b6:42:11:
         43:ec:6a:89:ce:0f:b0:99:43:fa:fc:cf:54:a8:c7:98:8a:96:
         24:aa:13:7b:1f:30:ed:63:6e:f5:ae:30:1a:f9:ff:a7:d3:d4:
         7b:a1:90:8a:56:42:c6:1d:a0:ac:58:dd:aa:7b:4a:18:c9:1c:
         7e:42:74:be:5e:06:70:79:34:19:c4:72:9f:cc:96:9e:29:bf:
         9c:a1:06:be:6c:03:e5:52:ca:e5:17:9a:40:63:1a:0c:fa:0a:
         0f:f4:e3:43:3f:1b:a6:5c:1e:e6:95:83:5f:36:40:a1:65:c2:
         06:2b:d7:66:ee:80:5b:b7:99:01:3c:9b:3e:63:fa:53:d8:3f:
         e0:6f:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org