Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59711.roa
File:                     AS59711.roa (raw, json)
Hash identifier:          awAje49bYUiNY9HQT4JZQ3b1rEs/0wDBVcWyHyyQCGw=
Subject key identifier:   18:23:17:67:3D:23:45:8F:95:6F:AE:44:34:C3:33:3D:A1:A9:11:0F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7C968FAF6AE5ECF74C74C61B639F3E38184516AF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59711.roa
Signing time:             Fri 02 Aug 2024 11:48:59 +0000
ROA not before:           Fri 02 Aug 2024 11:43:59 +0000
ROA not after:            Fri 01 Aug 2025 11:48:59 +0000
asID:                     59711
IP address blocks:        98.142.252.0/24 maxlen: 24
                          98.142.253.0/24 maxlen: 24
                          98.142.254.0/24 maxlen: 24
                          206.53.48.0/24 maxlen: 24
                          206.53.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:96:8f:af:6a:e5:ec:f7:4c:74:c6:1b:63:9f:3e:38:18:45:16:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  2 11:43:59 2024 GMT
            Not After : Aug  1 11:48:59 2025 GMT
        Subject: CN=182317673D23458F956FAE4434C3333DA1A9110F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:fd:d1:88:65:e7:af:8a:d8:a7:98:a7:07:
                    bb:66:3e:0f:df:0f:e1:12:71:b6:c8:f4:9e:4b:f7:
                    e9:7b:e0:c2:13:f6:f8:fa:e9:fe:50:40:b4:a0:3e:
                    67:f0:43:cb:88:0c:1b:63:d9:58:b6:fd:c9:92:14:
                    f3:e1:81:89:98:e4:8e:b8:6f:2f:a4:fd:12:5d:e3:
                    8e:23:e6:83:83:bd:43:b1:f8:20:12:43:84:4f:ec:
                    6c:2f:9e:d8:36:fc:5b:23:be:5e:61:a5:2d:49:b2:
                    f4:b9:87:a8:63:53:bd:96:b2:aa:50:30:95:22:6a:
                    89:6f:68:e6:ee:ff:b9:1e:0e:1e:a7:65:c0:00:79:
                    e0:ae:c2:e9:49:df:fd:18:88:19:da:7c:5d:d6:14:
                    f8:94:6d:a7:01:ad:a4:3a:ee:90:2d:1a:6b:4a:9a:
                    a8:51:e7:8a:53:4c:ee:f9:52:74:b5:29:42:c6:ad:
                    09:03:74:d6:0f:4f:a1:26:26:f6:22:16:0a:6b:90:
                    37:18:59:69:3c:fc:3e:67:1b:48:82:b5:69:a9:3e:
                    b8:10:c8:23:62:6b:d1:60:82:dd:8a:c4:39:1f:d8:
                    05:20:17:8d:17:52:14:7b:b8:a3:c8:bc:79:98:55:
                    4f:f7:93:2a:1d:d9:43:a5:fd:77:57:7e:be:1a:3d:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:17:67:3D:23:45:8F:95:6F:AE:44:34:C3:33:3D:A1:A9:11:0F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59711.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.252.0-98.142.254.255
                  206.53.48.0/24
                  206.53.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:66:b8:5f:b4:b1:32:0f:5f:32:f3:2a:f5:a1:fb:03:87:32:
         51:c1:c8:f5:2d:e0:c9:6e:97:5e:2e:9a:ce:b9:7a:a3:e4:0a:
         f2:5c:d7:26:47:41:94:5b:9b:2b:91:24:ef:bd:6f:1e:c3:30:
         77:f1:85:07:59:bf:9f:a0:d9:59:54:bc:23:a8:5d:93:32:ef:
         eb:55:dd:14:ab:cf:7a:48:5a:bf:50:e7:7a:6c:b9:7b:e6:d4:
         ad:24:23:a7:6c:b8:66:00:cb:52:13:ff:3f:2b:61:6a:3a:d6:
         7f:09:a3:52:7e:40:52:d1:fb:b3:a2:51:6e:34:df:ef:92:64:
         33:2a:bd:7a:9f:66:d8:f4:97:4d:11:50:a9:79:ce:d0:c9:f3:
         31:24:90:c8:be:72:6a:ad:73:d4:f2:2f:b3:a5:05:ea:67:20:
         2f:6d:68:40:99:9a:35:8c:b3:9a:fc:a8:12:4e:ca:44:44:30:
         c7:fa:92:87:30:20:e9:e3:fc:35:4d:ad:01:eb:cd:0d:9d:3c:
         32:16:f9:71:c2:27:c4:25:08:78:3c:09:3a:ff:4b:d8:b5:2c:
         8a:47:03:f1:81:03:76:a3:38:85:46:5e:5c:ba:fc:b4:f6:76:
         e4:e4:dd:90:b7:cf:bb:50:d5:a7:15:08:6e:96:33:2b:9f:a2:
         27:ba:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org