Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62564.roa
File:                     AS62564.roa (raw, json)
Hash identifier:          hMYAgYuEC+slj1pSjfXdfKNaihWGnjK52BLSYMO+m/Q=
Subject key identifier:   61:37:9D:2C:B5:25:E1:DD:9E:45:4F:3F:DC:22:37:60:FD:D7:9A:B9
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7D6E0F298D37A20B82A5244D4FBBF653EE2EBDAD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62564.roa
Signing time:             Thu 28 Nov 2024 14:55:33 +0000
ROA not before:           Thu 28 Nov 2024 14:50:33 +0000
ROA not after:            Thu 27 Nov 2025 14:55:33 +0000
asID:                     62564
IP address blocks:        98.142.250.0/24 maxlen: 24
                          104.234.124.0/24 maxlen: 24
                          104.234.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6e:0f:29:8d:37:a2:0b:82:a5:24:4d:4f:bb:f6:53:ee:2e:bd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 28 14:50:33 2024 GMT
            Not After : Nov 27 14:55:33 2025 GMT
        Subject: CN=61379D2CB525E1DD9E454F3FDC223760FDD79AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:7e:11:9a:e9:89:e4:ea:60:9b:01:30:83:
                    27:67:5f:31:97:d8:0d:8a:2a:2d:ee:21:b5:fa:a9:
                    d6:f8:d6:11:d9:86:91:1c:1b:24:e0:51:2a:c9:7d:
                    a4:4a:69:fb:ec:74:1f:ea:a3:64:b3:08:c9:cc:fe:
                    b1:0a:99:c8:c2:09:73:d7:4c:eb:96:0d:f8:0a:f1:
                    34:16:96:76:92:2a:51:b3:b3:0e:8a:65:02:36:ca:
                    46:31:c0:ec:fe:47:f9:47:75:20:4d:76:f4:5f:c1:
                    23:f7:58:c6:f2:0a:a0:7e:e0:22:53:51:cd:0b:cf:
                    61:d8:48:de:40:cb:ce:13:dd:16:37:3e:0f:41:94:
                    24:bb:70:c7:b1:2f:10:6c:5d:77:54:2c:de:b5:c8:
                    71:fd:c6:31:a9:f1:0f:bc:27:b6:e7:f7:28:2a:55:
                    a1:52:30:8f:77:46:d2:44:13:4f:83:d6:a8:40:8f:
                    a2:57:dc:c7:c6:7e:89:a6:07:18:19:7f:ac:42:87:
                    c1:1d:bb:b8:c5:d3:b4:21:2e:a4:43:6a:b2:bf:f5:
                    77:a5:36:c5:8c:85:12:53:ba:d0:56:85:59:3e:a1:
                    2e:55:e4:42:fa:16:2b:ad:72:68:17:38:22:0d:39:
                    e0:b2:ce:7e:25:90:31:7a:5c:c8:40:a7:cc:4d:5c:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:37:9D:2C:B5:25:E1:DD:9E:45:4F:3F:DC:22:37:60:FD:D7:9A:B9
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62564.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.250.0/24
                  104.234.124.0/24
                  104.234.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:40:d8:f8:4f:a4:86:6e:46:7e:c3:ba:8e:46:ea:af:a2:ae:
         2b:34:6c:53:a6:bb:41:1d:f9:62:01:36:39:43:6c:fa:9f:88:
         67:c2:8a:38:8f:36:f9:5c:0b:42:2b:41:14:df:83:72:4e:34:
         8e:9f:a5:0c:80:30:ef:90:30:8e:05:cd:9b:3e:90:35:a0:c5:
         58:7c:ab:98:fc:a8:04:94:3d:d8:28:ab:f7:d5:d3:3e:b8:26:
         d3:af:77:a7:f6:87:50:c8:9a:f1:e7:f2:54:72:02:ed:d1:cf:
         29:4a:ce:87:d7:10:96:3b:28:81:98:70:d6:e4:9d:ab:cd:87:
         5b:d4:4e:1e:0b:2f:86:6f:66:86:29:98:95:3c:9c:29:db:3a:
         16:5a:e5:0e:58:7f:c3:0b:74:8d:cf:2e:b9:2c:b6:6b:7a:8f:
         07:25:47:a8:85:22:bf:d7:68:a8:b9:15:71:2d:a6:9a:c4:30:
         c2:c0:16:b0:82:05:f6:cd:5f:e7:73:27:82:6f:92:60:32:a8:
         7d:ff:d8:0a:72:c2:5a:f9:cb:18:c0:69:53:02:86:d3:7c:83:
         49:90:f0:75:97:e0:58:ab:08:8e:5a:65:55:f1:2e:03:0e:a1:
         0f:82:13:ec:7e:71:09:fd:fd:39:2b:62:7a:9e:7e:88:27:28:
         37:33:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:04 2025 by rpki-client