Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          hXvjvEE7aV109woik2sjf9aMHmHCtjwn60i0Hky6/6U=
Subject key identifier:   A6:5F:65:80:9D:2C:30:F8:5C:AB:13:2F:1C:7C:91:B9:67:A3:32:9C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       20E6ACB138D2B9F588B63229D096B9AC13176DF6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
Signing time:             Wed 31 Jul 2024 18:37:17 +0000
ROA not before:           Wed 31 Jul 2024 18:32:17 +0000
ROA not after:            Wed 30 Jul 2025 18:37:17 +0000
asID:                     63023
IP address blocks:        104.234.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 01:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e6:ac:b1:38:d2:b9:f5:88:b6:32:29:d0:96:b9:ac:13:17:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 31 18:32:17 2024 GMT
            Not After : Jul 30 18:37:17 2025 GMT
        Subject: CN=A65F65809D2C30F85CAB132F1C7C91B967A3329C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:5d:50:ae:84:c2:3f:b7:0f:6e:5b:de:3a:
                    8d:8f:47:51:98:d4:10:7d:6c:aa:6b:ad:ef:e2:1d:
                    00:ed:a9:a3:db:90:a8:42:7d:90:1c:f3:56:24:db:
                    10:bc:57:69:60:40:c2:6e:b3:58:2d:e2:c1:fb:11:
                    5c:93:9e:fb:14:d2:9a:d0:97:4c:62:24:ac:cd:ab:
                    d3:7f:7e:5d:de:36:14:06:9e:51:bf:19:68:28:13:
                    95:7b:90:20:a6:94:60:ca:f0:26:dd:07:b1:a8:75:
                    eb:39:c9:0d:27:7f:af:7b:80:8b:17:87:ea:ec:c2:
                    7b:e1:21:af:f7:c7:e9:b3:c7:05:c2:7c:d1:0b:8d:
                    ce:cb:01:30:8b:a5:66:9a:69:0e:71:b6:f7:e3:ff:
                    37:f3:d7:e8:45:04:cd:55:66:7c:bd:99:1b:fb:ea:
                    06:61:c9:2a:4e:7a:5f:16:7d:4d:6e:2c:e5:be:d6:
                    47:f5:53:58:b0:1c:09:eb:71:d4:74:d1:85:05:84:
                    88:c5:08:41:75:fe:a8:1b:a2:3b:e9:f4:ee:6e:08:
                    c0:7e:d5:f9:c2:1b:27:c6:2a:0f:c2:75:71:b7:6b:
                    70:e9:b5:ed:c5:92:56:76:7c:f3:fa:cb:e2:34:b3:
                    2a:2d:14:e3:7e:15:9d:47:1e:b5:4a:3f:4b:90:43:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5F:65:80:9D:2C:30:F8:5C:AB:13:2F:1C:7C:91:B9:67:A3:32:9C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:ee:85:d0:b9:ce:e0:53:c2:b1:20:d2:8d:c0:9a:a6:3b:
         81:c7:59:ba:10:ce:51:72:b0:e5:8e:03:02:9a:f6:78:cc:68:
         41:8d:b5:ee:1c:00:62:85:06:c9:39:a7:7d:50:0c:60:06:a7:
         d7:38:e7:4b:bd:fa:4d:04:a2:3d:a1:1e:e0:00:ae:d3:14:be:
         82:b1:ef:b7:27:68:93:e2:54:37:8d:cf:bb:52:12:76:c5:a5:
         f2:59:41:e5:f4:58:9f:a1:bf:19:93:71:b9:9c:64:12:d1:b8:
         e8:5e:65:75:c9:48:30:ec:fc:ed:06:db:f8:7e:f4:2a:f5:a2:
         42:9d:21:2e:5c:46:f8:e6:d0:e7:c6:f8:88:c6:56:10:be:d1:
         88:2a:b9:37:53:d8:e2:c3:f0:73:20:f5:8b:0d:a1:3a:2d:e2:
         e7:4b:15:0c:54:5e:64:b8:25:51:2a:c1:24:f2:fe:54:90:1d:
         ef:73:3e:59:db:21:eb:e4:e6:25:49:e1:48:f2:45:b9:1f:cc:
         f5:da:8d:2d:38:c1:40:70:c0:76:57:56:89:3d:59:b7:50:6c:
         e3:49:e9:58:c9:22:61:0c:ed:77:0a:d0:46:fa:87:88:6d:c9:
         21:5f:7f:32:28:ac:ce:24:eb:5a:78:e9:0a:24:b2:b2:46:d5:
         f4:40:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 03:21:25 2024 by rpki-client on console-fra.rpki-client.org