Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa
File:                     AS65123.roa (raw, json)
Hash identifier:          9sqtkYtqNm42HFwgmMjn7fBS2WmRJ9fXG/qydO6prZ8=
Subject key identifier:   37:29:4B:59:71:70:33:90:8D:E3:7A:E4:45:D0:8B:8A:16:B4:21:DC
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       6EA4C718B56B7E3186DC9A865A9E56A42A4885A2
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa
Signing time:             Wed 13 Sep 2023 08:29:58 +0000
ROA not before:           Wed 13 Sep 2023 08:24:58 +0000
ROA not after:            Wed 11 Sep 2024 08:29:58 +0000
asID:                     65123
IP address blocks:        45.54.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a4:c7:18:b5:6b:7e:31:86:dc:9a:86:5a:9e:56:a4:2a:48:85:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Sep 13 08:24:58 2023 GMT
            Not After : Sep 11 08:29:58 2024 GMT
        Subject: CN=37294B59717033908DE37AE445D08B8A16B421DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:53:c6:04:64:b9:18:40:96:6a:89:41:aa:
                    d4:33:0b:3a:7d:93:72:f4:19:52:f0:12:42:3d:9b:
                    af:80:ae:70:34:c1:e6:51:f8:58:a5:49:c8:9b:62:
                    25:bc:a5:0f:ab:cf:3e:66:7d:28:12:b0:b5:7f:2d:
                    41:72:8b:23:5c:5e:7d:ba:45:9c:c6:5a:5e:35:cf:
                    90:60:4e:f1:cd:f6:33:ad:9a:2b:8a:52:0c:80:5d:
                    6d:e8:80:fc:9c:76:f2:41:11:8f:83:a1:e2:38:7d:
                    51:9c:ba:0a:8e:3b:11:bb:1a:68:65:e9:5c:ab:04:
                    72:06:d2:b5:37:25:f4:b6:bc:1b:94:db:16:98:73:
                    c5:f0:65:af:27:21:f5:24:39:45:79:ca:b9:94:a1:
                    bf:d9:75:ac:a5:6b:12:fc:19:b6:e5:8c:9a:76:83:
                    4e:13:95:b8:e1:28:0e:52:8a:db:f2:b8:d7:55:05:
                    fa:82:7d:f1:55:10:5d:8e:c4:c2:58:17:db:a2:ee:
                    4e:dc:de:c1:62:94:ca:d1:a0:37:05:85:73:a7:46:
                    10:9d:21:82:36:18:45:79:44:f8:9c:89:0d:3e:a3:
                    c1:97:9d:03:27:96:2c:18:d4:f8:20:07:0c:30:75:
                    d4:29:86:26:18:c6:14:f3:da:1b:28:26:01:79:f9:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:29:4B:59:71:70:33:90:8D:E3:7A:E4:45:D0:8B:8A:16:B4:21:DC
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:be:f2:0e:47:49:b7:9b:52:e9:41:c3:f0:f0:da:29:5e:71:
         d7:36:97:d5:e8:bf:87:e9:55:2d:e0:0d:75:69:b2:18:91:a7:
         4a:94:07:0b:5c:d6:08:8f:5d:5d:3b:61:81:9f:5d:b7:3a:7d:
         81:c0:d7:ab:c9:34:cc:95:cc:62:06:09:7d:a6:b6:4d:ce:e3:
         db:8e:c2:de:ce:49:a1:3f:9c:57:27:e4:28:a0:d5:0c:c1:76:
         c6:a2:6f:12:41:81:39:23:0b:64:3a:4b:b4:d0:a0:32:70:65:
         2c:15:97:49:d7:ba:f8:8a:78:fe:61:7e:27:f0:ad:68:bc:94:
         55:16:fc:cf:c9:91:88:aa:44:33:48:a3:3e:b0:b0:67:27:00:
         be:25:b4:95:59:42:0c:28:33:f4:db:c7:3b:42:12:44:dd:35:
         e0:98:9b:53:95:f0:63:69:db:8d:16:5c:c5:d1:55:cc:d4:7b:
         83:b3:e0:0e:29:0c:5d:5c:5e:d3:34:ed:3a:99:cb:92:6e:ed:
         61:61:17:46:1d:c4:95:39:ed:b4:e1:7f:d7:26:0a:f0:e3:67:
         cf:d4:7f:2b:cc:eb:a1:0a:07:06:3b:52:81:f3:d7:cb:52:19:
         f7:ae:6e:34:86:2e:2d:ac:7c:c8:42:87:b7:ac:d7:85:68:d4:
         e6:01:fd:db
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUbqTHGLVrfjGG3JqGWp5WpCpIhaIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjMwOTEzMDgyNDU4WhcNMjQwOTExMDgyOTU4
WjAzMTEwLwYDVQQDEygzNzI5NEI1OTcxNzAzMzkwOERFMzdBRTQ0NUQwOEI4QTE2
QjQyMURDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCBTxgRkuRhA
lmqJQarUMws6fZNy9BlS8BJCPZuvgK5wNMHmUfhYpUnIm2IlvKUPq88+Zn0oErC1
fy1BcosjXF59ukWcxlpeNc+QYE7xzfYzrZorilIMgF1t6ID8nHbyQRGPg6HiOH1R
nLoKjjsRuxpoZelcqwRyBtK1NyX0trwblNsWmHPF8GWvJyH1JDlFecq5lKG/2XWs
pWsS/Bm25YyadoNOE5W44SgOUorb8rjXVQX6gn3xVRBdjsTCWBfbou5O3N7BYpTK
0aA3BYVzp0YQnSGCNhhFeUT4nIkNPqPBl50DJ5YsGNT4IAcMMHXUKYYmGMYU89ob
KCYBefnK6wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDcpS1lxcDOQjeN65EXQi4oW
tCHcMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzY1MTIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTYMMA0GCSqGSIb3DQEBCwUAA4IB
AQByvvIOR0m3m1LpQcPw8NopXnHXNpfV6L+H6VUt4A11abIYkadKlAcLXNYIj11d
O2GBn123On2BwNeryTTMlcxiBgl9prZNzuPbjsLezkmhP5xXJ+QooNUMwXbGom8S
QYE5IwtkOku00KAycGUsFZdJ17r4inj+YX4n8K1ovJRVFvzPyZGIqkQzSKM+sLBn
JwC+JbSVWUIMKDP028c7QhJE3TXgmJtTlfBjaduNFlzF0VXM1HuDs+AOKQxdXF7T
NO06mcuSbu1hYRdGHcSVOe204X/XJgrw42fP1H8rzOuhCgcGO1KB89fLUhn3rm40
hi4trHzIQoe3rNeFaNTmAf3b
-----END CERTIFICATE-----
Generated at Mon May 13 00:55:00 2024 by rpki-client on console-fra.rpki-client.org