Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa
File:                     AS64089.roa (raw, json)
Hash identifier:          LQ8rP2Lz8TN0snYTBGTkXXB23J/upF7UfUUcQsMtlQw=
Subject key identifier:   2F:C6:50:E7:C1:A0:82:DE:34:EF:93:31:C6:CF:9D:11:BE:04:C6:30
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       0A1E6AA1A3264FE702DFE8FEDB7566A62A7DD5B7
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa
Signing time:             Fri 29 Dec 2023 12:31:02 +0000
ROA not before:           Fri 29 Dec 2023 12:26:02 +0000
ROA not after:            Fri 27 Dec 2024 12:31:02 +0000
asID:                     64089
IP address blocks:        45.54.28.0/24 maxlen: 24
                          45.54.84.0/24 maxlen: 24
                          45.54.85.0/24 maxlen: 24
                          2607:f740:e005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1e:6a:a1:a3:26:4f:e7:02:df:e8:fe:db:75:66:a6:2a:7d:d5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Dec 29 12:26:02 2023 GMT
            Not After : Dec 27 12:31:02 2024 GMT
        Subject: CN=2FC650E7C1A082DE34EF9331C6CF9D11BE04C630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:ae:c5:12:19:76:77:0a:2d:3a:af:c0:51:
                    3f:ab:cc:a5:dc:cf:0c:6b:1a:bc:4c:67:68:a2:e8:
                    73:b8:0c:7f:fc:08:da:56:40:6a:05:84:c7:f9:03:
                    8f:25:d2:26:bb:a3:d6:ee:46:8c:c6:91:4b:5a:87:
                    09:43:22:8d:f8:cb:10:de:b4:3a:45:db:27:bb:95:
                    51:32:da:20:da:8c:a1:cb:d3:d3:d4:8a:84:dd:1c:
                    c3:94:a6:a9:05:17:6d:48:c0:95:5a:cd:f0:09:ed:
                    ca:55:b3:30:8c:16:2a:41:bc:06:62:61:b7:3f:f4:
                    36:73:18:e0:ba:1f:c0:db:16:51:af:22:a8:e8:eb:
                    f7:24:93:d6:80:55:b6:68:bf:58:46:81:a7:80:87:
                    2c:b4:f2:50:b1:a2:70:db:a8:3d:96:42:9b:bb:17:
                    02:93:dd:4f:20:25:62:aa:44:f6:3d:b5:8a:ab:6e:
                    ba:d1:d2:0e:2f:7a:ec:56:fa:1a:82:c8:e8:54:00:
                    e3:cd:4d:5e:bd:41:39:13:56:09:8f:a7:f6:18:83:
                    08:e6:76:db:82:55:30:29:29:c4:77:70:26:a9:f0:
                    76:23:3a:43:12:42:a0:78:f4:f8:c2:c9:e2:e4:6a:
                    86:e0:2c:c0:f4:bb:de:57:3e:04:78:5d:aa:ae:32:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C6:50:E7:C1:A0:82:DE:34:EF:93:31:C6:CF:9D:11:BE:04:C6:30
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.28.0/24
                  45.54.84.0/23
                IPv6:
                  2607:f740:e005::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:06:f1:bc:09:37:83:41:d3:bf:12:55:3d:06:f0:ae:29:66:
         36:ce:72:7e:9e:2c:92:0d:86:98:cb:49:ea:d3:94:be:fc:92:
         01:2e:e4:64:c3:3a:9e:41:42:f9:de:8a:9f:f1:ee:f9:99:98:
         9d:7e:08:cc:18:fe:d8:45:4e:e7:2d:45:a6:28:d9:a4:71:58:
         2d:93:55:14:7e:e8:5d:02:50:f8:c3:77:5a:06:11:11:80:da:
         a1:f7:4d:4f:4a:45:5f:66:a4:a4:eb:14:e7:5f:28:5d:dc:39:
         1e:12:11:97:25:0f:e6:02:42:78:5b:73:36:15:d3:16:95:21:
         df:15:11:11:37:75:b4:7b:fd:85:07:c8:b1:17:12:09:80:97:
         0f:30:5b:8f:bf:89:bf:09:a0:70:dd:8f:6b:15:87:39:29:a9:
         eb:9e:5c:0d:bc:32:5e:0f:ae:9a:a7:78:6d:bb:ab:14:1d:20:
         e3:66:87:43:e7:c0:2c:09:48:0b:31:cd:4a:55:39:45:55:19:
         3a:be:b9:56:97:ee:e3:63:67:8a:2a:26:04:af:50:07:35:6d:
         ae:a7:86:e6:2e:44:e3:d0:bd:92:b8:a7:c6:5f:60:28:f4:6d:
         71:81:b7:da:40:d0:3f:69:24:f5:46:5d:ac:ec:b0:35:ab:26:
         6b:d9:d9:9d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUCh5qoaMmT+cC3+j+23Vmpip91bcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjMxMjI5MTIyNjAyWhcNMjQxMjI3MTIzMTAy
WjAzMTEwLwYDVQQDEygyRkM2NTBFN0MxQTA4MkRFMzRFRjkzMzFDNkNGOUQxMUJF
MDRDNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+muxRIZdncK
LTqvwFE/q8yl3M8Maxq8TGdoouhzuAx//AjaVkBqBYTH+QOPJdImu6PW7kaMxpFL
WocJQyKN+MsQ3rQ6Rdsnu5VRMtog2oyhy9PT1IqE3RzDlKapBRdtSMCVWs3wCe3K
VbMwjBYqQbwGYmG3P/Q2cxjguh/A2xZRryKo6Ov3JJPWgFW2aL9YRoGngIcstPJQ
saJw26g9lkKbuxcCk91PICViqkT2PbWKq2660dIOL3rsVvoagsjoVADjzU1evUE5
E1YJj6f2GIMI5nbbglUwKSnEd3AmqfB2IzpDEkKgePT4wsni5GqG4CzA9LveVz4E
eF2qrjL+9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFC/GUOfBoILeNO+TMcbPnRG+
BMYwMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzY0MDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYG
CCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALTYcAwQBLTZUMA8EAgACMAkDBwAm
B/dA4AUwDQYJKoZIhvcNAQELBQADggEBADEG8bwJN4NB078SVT0G8K4pZjbOcn6e
LJINhpjLSerTlL78kgEu5GTDOp5BQvneip/x7vmZmJ1+CMwY/thFTuctRaYo2aRx
WC2TVRR+6F0CUPjDd1oGERGA2qH3TU9KRV9mpKTrFOdfKF3cOR4SEZclD+YCQnhb
czYV0xaVId8VERE3dbR7/YUHyLEXEgmAlw8wW4+/ib8JoHDdj2sVhzkpqeueXA28
Ml4PrpqneG27qxQdIONmh0PnwCwJSAsxzUpVOUVVGTq+uVaX7uNjZ4oqJgSvUAc1
ba6nhuYuROPQvZK4p8ZfYCj0bXGBt9pA0D9pJPVGXazssDWrJmvZ2Z0=
-----END CERTIFICATE-----
Generated at Mon May 13 00:55:00 2024 by rpki-client on console-fra.rpki-client.org