Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          IfZtubIjv8IBkqsWuu/eRxWlrgaVgHhjTR/LBByNcbc=
Subject key identifier:   B4:E6:32:20:2B:68:73:14:DC:87:8E:E8:27:4E:D4:A3:D0:94:5B:94
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       38F7BFE91173F400E1A86F27C6AE1D0030712438
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
Signing time:             Fri 15 Dec 2023 00:00:11 +0000
ROA not before:           Thu 14 Dec 2023 23:55:11 +0000
ROA not after:            Fri 13 Dec 2024 00:00:11 +0000
asID:                     20473
IP address blocks:        98.142.241.0/24 maxlen: 24
                          104.234.150.0/24 maxlen: 24
                          104.234.193.0/24 maxlen: 24
                          104.234.242.0/24 maxlen: 24
                          206.53.50.0/24 maxlen: 24
                          206.53.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 02:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f7:bf:e9:11:73:f4:00:e1:a8:6f:27:c6:ae:1d:00:30:71:24:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 14 23:55:11 2023 GMT
            Not After : Dec 13 00:00:11 2024 GMT
        Subject: CN=B4E632202B687314DC878EE8274ED4A3D0945B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:bd:8c:af:ab:8d:49:8a:0d:9b:de:7a:26:
                    08:ab:39:49:f0:f9:62:28:84:01:2a:7f:34:87:da:
                    33:c6:6c:14:31:69:6f:03:7b:92:60:fd:a1:77:91:
                    45:3f:2f:9d:c7:b7:48:d0:67:3f:38:66:5e:ee:d4:
                    32:97:6d:a4:f1:54:f9:55:e0:d2:b0:3e:14:4d:18:
                    98:19:02:38:f1:11:4f:a3:e5:65:6c:33:72:f8:b9:
                    5d:44:a2:95:c9:8c:c4:92:6c:f8:03:0d:70:f4:29:
                    05:b6:89:1c:3a:ef:b3:ef:10:5a:7e:d0:45:d6:32:
                    91:be:3a:7d:a8:27:f3:eb:83:e9:08:24:00:10:23:
                    e4:5c:db:f7:b1:22:4c:ac:f2:23:8b:93:11:41:b0:
                    51:43:6e:5c:d3:88:73:1e:6f:bd:94:0b:2e:4b:2a:
                    9b:ba:39:a9:99:4e:0b:e0:58:47:4b:8e:95:8f:03:
                    d4:0d:2c:6e:d0:fb:72:56:5a:83:8f:fb:6b:1c:46:
                    c1:e6:65:b8:17:ee:91:09:55:fe:1f:34:a0:90:da:
                    1f:df:ac:80:cd:ba:e1:50:5c:e4:84:60:34:96:b3:
                    8c:1a:93:f5:d4:71:0f:9c:64:f5:d4:ef:71:ff:83:
                    b6:6d:e0:09:68:4f:ee:5e:36:41:79:b5:88:c9:8c:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E6:32:20:2B:68:73:14:DC:87:8E:E8:27:4E:D4:A3:D0:94:5B:94
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.241.0/24
                  104.234.150.0/24
                  104.234.193.0/24
                  104.234.242.0/24
                  206.53.50.0/24
                  206.53.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:7c:74:a0:43:51:ce:71:52:a5:eb:75:46:15:3b:2f:a9:a9:
         a4:21:78:4a:e0:4a:7f:85:25:51:a2:eb:85:37:a8:14:51:89:
         d8:ca:28:37:67:1f:f3:f2:64:f8:32:92:e3:41:81:6f:a7:c6:
         f7:b7:10:64:a7:15:2f:7f:de:24:cf:05:4b:89:f8:ea:68:c2:
         0d:b1:d5:11:97:49:59:a8:fb:c4:6d:f6:2d:61:61:c7:34:13:
         75:bd:d8:f5:90:7f:07:02:ef:ef:c8:81:9e:8e:5b:ce:09:b9:
         b6:42:e8:57:3d:60:1f:1e:af:08:b6:94:4f:bb:6d:7f:3d:0b:
         be:92:fb:8d:e6:7f:d4:af:ee:78:cd:2a:1b:00:9a:99:36:e4:
         88:23:fa:fd:b3:5b:80:e3:b9:c2:bf:bb:cd:67:98:14:d3:e5:
         8e:48:ad:d1:b8:0e:81:3b:45:84:31:69:76:73:98:2c:c0:1f:
         00:a0:09:bf:a1:0e:c6:0b:06:ca:1a:69:af:b1:d8:d1:56:73:
         6e:88:4e:09:18:db:a8:95:f9:46:7c:e4:06:c8:d6:67:ba:be:
         60:e4:3c:08:5c:09:84:e6:0a:fd:36:fe:7a:8f:21:e2:52:e9:
         a7:fd:c0:cb:38:30:ba:a7:2e:dc:03:f9:d6:83:6d:3f:93:8a:
         40:e1:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 23:35:16 2024 by rpki-client on console-ams.rpki-client.org