Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61102.roa
File:                     AS61102.roa (raw, json)
Hash identifier:          jxQnjg5k2oiGlwHnWyPFJMV2hwuALt///YANs7FsJZg=
Subject key identifier:   A7:CA:D6:9D:4D:62:DF:C0:E1:FC:E8:D7:59:8E:E9:42:C5:67:BF:D5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0C981E842E2DB3D23EFE6B11FCCDF0569D92308E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61102.roa
Signing time:             Wed 20 Nov 2024 18:49:21 +0000
ROA not before:           Wed 20 Nov 2024 18:44:21 +0000
ROA not after:            Wed 19 Nov 2025 18:49:21 +0000
asID:                     61102
IP address blocks:        206.53.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:98:1e:84:2e:2d:b3:d2:3e:fe:6b:11:fc:cd:f0:56:9d:92:30:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 20 18:44:21 2024 GMT
            Not After : Nov 19 18:49:21 2025 GMT
        Subject: CN=A7CAD69D4D62DFC0E1FCE8D7598EE942C567BFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:81:9e:cd:da:6d:f5:3f:ce:69:65:7a:2f:
                    16:e6:b1:50:0c:ed:5b:91:b6:0b:45:7d:ba:a0:12:
                    83:02:8d:4c:8b:76:cc:29:ff:6b:ce:c7:a2:c2:7f:
                    ec:42:48:8c:c7:93:ba:8a:0d:65:41:b5:06:c6:39:
                    5b:02:3b:08:e3:26:09:de:b8:21:8f:d3:65:83:44:
                    a4:d3:79:68:35:c9:33:53:7b:fd:c9:cd:97:77:92:
                    f4:b8:9b:64:58:8b:5c:12:11:74:e8:75:77:f8:93:
                    16:5e:a8:5d:80:02:e6:59:33:2f:19:5c:d0:1f:b9:
                    79:bb:3d:10:0a:c0:fe:91:4f:c4:f8:85:b6:12:62:
                    04:e8:c0:6e:4c:fd:ea:bd:ba:46:23:73:cf:14:c2:
                    c5:78:69:68:85:7d:9c:75:55:15:e6:83:a6:e3:02:
                    c6:d1:b1:83:95:4a:5e:15:08:3b:39:ea:20:7d:c9:
                    4f:c4:7d:9c:46:66:1d:78:c4:ae:16:bc:ad:1e:0c:
                    b6:37:d3:bf:f9:2a:4a:ce:26:9e:84:65:e6:83:2f:
                    72:42:2c:67:eb:1d:ee:80:85:44:3b:cd:ae:3d:e1:
                    b4:dd:9c:ef:8a:7b:e6:ff:40:86:f6:6a:5a:24:cb:
                    86:a8:85:96:b0:f9:47:23:1e:c7:3d:a0:31:92:0d:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CA:D6:9D:4D:62:DF:C0:E1:FC:E8:D7:59:8E:E9:42:C5:67:BF:D5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61102.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:79:d0:c4:22:f6:5c:91:06:ac:1a:44:7f:9c:b7:49:9a:
         67:5b:d2:9e:f6:7a:a2:1e:1d:7b:21:0f:5c:5c:79:78:a6:8a:
         42:79:d0:6c:df:6e:d8:be:47:d7:37:cd:ab:c0:93:9e:32:92:
         81:df:b4:90:48:fd:be:82:48:e7:96:d3:ce:73:75:ec:9b:48:
         dd:92:64:ef:f0:e8:92:0f:ee:f1:4f:a1:38:d5:78:30:88:fe:
         6b:f1:65:0e:c2:de:5f:88:12:0b:ea:ba:68:bb:37:4f:2d:6d:
         73:87:70:75:18:b1:b5:49:22:c5:ab:08:44:f5:59:19:b1:34:
         59:88:64:5a:79:77:05:39:bb:ea:ef:24:68:67:99:30:e4:12:
         f1:07:d2:c6:c2:f8:ee:c5:88:d7:8e:c3:51:40:cf:ce:e9:58:
         92:f6:9e:57:37:ca:2b:21:d5:c7:b9:61:1a:03:00:d8:ec:34:
         82:3d:00:19:1c:be:24:9c:fe:79:08:37:45:96:c9:8b:1a:90:
         60:5b:db:a4:f2:54:55:f0:e5:4e:5e:38:93:52:d2:de:eb:7f:
         92:cc:20:20:6d:96:1b:4b:e3:36:f7:a9:95:be:66:d0:dd:b0:
         1c:c1:e4:2a:3f:31:ff:ed:21:4c:96:12:3a:6c:3f:e9:09:da:
         9d:cc:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org