Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa
File:                     AS65123.roa (raw, json)
Hash identifier:          byfsewP4QnCeHrDBgY7EDmD9EuK2fTsYg3c0eXi1s/s=
Subject key identifier:   9C:F2:F7:A2:D5:6C:EC:54:8B:ED:5A:DC:E1:FC:24:A2:82:B1:95:12
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       1E323B3275AE70C60B241A6390D695EA3B07BCB7
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa
Signing time:             Wed 14 Aug 2024 09:13:03 +0000
ROA not before:           Wed 14 Aug 2024 09:08:03 +0000
ROA not after:            Wed 13 Aug 2025 09:13:03 +0000
asID:                     65123
IP address blocks:        45.54.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:32:3b:32:75:ae:70:c6:0b:24:1a:63:90:d6:95:ea:3b:07:bc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Aug 14 09:08:03 2024 GMT
            Not After : Aug 13 09:13:03 2025 GMT
        Subject: CN=9CF2F7A2D56CEC548BED5ADCE1FC24A282B19512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:00:ff:19:04:2a:8c:30:6d:f5:a5:aa:99:
                    97:cd:bb:86:33:fb:5c:53:23:2e:dc:ca:19:98:1b:
                    a4:86:7d:c7:73:00:7f:b1:ff:58:69:95:1f:77:7e:
                    3d:94:f8:4f:ed:fd:44:b6:eb:72:ec:a2:a0:96:98:
                    41:6b:ab:8a:cd:7c:e5:5e:c9:c0:92:b7:82:47:8a:
                    43:e0:93:65:52:ec:37:38:9e:54:66:e5:83:60:4c:
                    ed:0b:2d:10:41:a4:99:16:3a:72:0d:3b:c6:b6:4e:
                    5f:2f:85:f2:89:c5:a4:fc:33:68:53:60:e2:f2:27:
                    90:9d:50:d4:68:dd:26:e9:db:df:c0:b4:54:b9:7b:
                    6d:0e:03:bf:e2:be:cc:61:4e:fd:92:ef:ea:9c:df:
                    75:29:76:bf:9c:36:78:dd:cf:7c:9f:6e:ae:05:62:
                    0f:e8:61:31:1a:cc:65:4e:51:57:49:16:1c:ea:59:
                    c2:49:b1:dd:fc:5b:75:9b:a8:fe:8b:dd:d3:00:54:
                    95:97:15:f8:1c:69:d5:79:c6:74:61:b1:fc:30:78:
                    fa:f2:f3:52:f9:44:da:7e:f3:8c:8f:9d:1b:34:44:
                    41:59:fd:2b:70:e1:8b:2f:a5:4b:b3:1e:98:88:b1:
                    16:e0:82:d8:79:c2:ea:32:75:36:27:3b:61:2a:7f:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F2:F7:A2:D5:6C:EC:54:8B:ED:5A:DC:E1:FC:24:A2:82:B1:95:12
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:12:73:01:88:15:0b:06:af:95:66:e7:f2:8e:9c:74:0e:e3:
         f9:57:44:10:27:4c:e7:67:fc:25:5b:8f:6d:48:4c:97:4f:41:
         60:98:5c:34:4b:3f:b3:fc:02:99:80:d4:88:1d:1f:9c:e6:de:
         23:36:a6:8b:14:9f:13:b6:75:82:f5:9b:5b:7a:ce:f4:06:aa:
         63:ef:21:e4:eb:19:06:96:23:63:b9:14:f1:d5:46:b6:34:f1:
         05:dd:4a:b5:0a:23:24:fa:9d:9d:55:23:8e:7b:cb:22:db:b1:
         12:c4:77:60:0a:d0:33:9d:86:ab:11:4e:6a:98:bd:c7:30:a1:
         74:81:00:6e:9c:a8:ae:39:cc:28:ae:4a:63:b9:f1:c2:a3:c2:
         ce:30:47:79:4d:d4:cf:c8:4b:2e:93:86:48:75:e4:c9:ea:4f:
         c8:1e:82:00:d3:84:e5:c5:af:78:5e:b5:ff:fe:95:e3:e6:40:
         78:a8:88:a3:c8:ce:88:eb:f1:77:55:d7:55:4b:2f:53:b3:76:
         cd:d3:c3:db:68:46:80:c0:28:57:c8:b8:c5:28:75:fa:9f:4d:
         51:7c:ca:dd:b3:f7:0a:8a:7c:f3:09:ef:8b:12:28:18:6e:fe:
         87:c3:7e:ce:7c:f6:be:f6:06:bc:b0:70:8c:8d:34:d7:49:38:
         2e:2f:78:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:04 2024 by rpki-client on console-fra.rpki-client.org