Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63473.roa
File:                     AS63473.roa (raw, json)
Hash identifier:          z0wWYtkSJdT1Vuj99xxufA8MGYJ33eot6ETjcsuPXc0=
Subject key identifier:   A6:5C:6C:9C:32:35:CF:81:F8:91:3F:CE:B6:6C:EB:62:33:09:82:F5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       172B1D1418ABE79DF1CE4C3637C5CDDA59B28F41
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63473.roa
Signing time:             Thu 06 Jun 2024 23:51:40 +0000
ROA not before:           Thu 06 Jun 2024 23:46:40 +0000
ROA not after:            Thu 05 Jun 2025 23:51:40 +0000
asID:                     63473
IP address blocks:        104.234.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:1d:14:18:ab:e7:9d:f1:ce:4c:36:37:c5:cd:da:59:b2:8f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  6 23:46:40 2024 GMT
            Not After : Jun  5 23:51:40 2025 GMT
        Subject: CN=A65C6C9C3235CF81F8913FCEB66CEB62330982F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:59:8e:af:87:2c:0d:72:6b:3d:c9:37:41:6c:
                    d2:5d:b7:9e:08:30:65:8b:16:e1:d0:3c:7a:8b:f8:
                    7b:5d:6f:c8:c6:cc:2a:ba:5d:9a:98:54:ae:db:4e:
                    89:b8:ce:e3:33:0a:c8:c3:1a:1c:1d:32:40:83:14:
                    4a:bb:e8:f0:8f:fa:77:8c:e8:7a:c5:cf:81:63:48:
                    ce:f1:9b:b4:27:36:e8:ff:1f:5e:44:fe:27:23:50:
                    e9:b1:10:8d:b4:ec:65:f8:85:25:7e:ef:ca:50:f4:
                    46:65:55:05:db:f1:6b:46:35:a6:86:ce:6a:ff:61:
                    3a:64:cd:86:91:78:53:0f:82:00:00:7e:73:54:fe:
                    17:83:49:94:7c:43:4c:ed:fb:dc:95:47:3a:70:24:
                    98:10:b3:3c:f9:cc:2c:3f:05:b2:1a:bf:33:e6:8c:
                    74:60:ad:e5:64:cd:95:c5:a1:24:fd:92:fc:84:12:
                    9a:4b:4b:76:8e:30:c9:30:2b:e7:29:74:69:1a:99:
                    07:e7:60:11:7a:03:e0:84:b4:9b:d1:bf:92:e2:a7:
                    d6:e2:7c:fc:4a:d7:fa:07:7e:d6:08:3a:56:4c:6e:
                    15:bc:53:33:9c:77:c4:36:02:ab:fc:89:d9:38:56:
                    66:67:88:1b:52:c3:0b:de:12:82:f8:e5:95:3c:0d:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5C:6C:9C:32:35:CF:81:F8:91:3F:CE:B6:6C:EB:62:33:09:82:F5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:87:d4:70:83:80:f7:f0:73:2f:9b:aa:16:88:f2:5e:55:6b:
         77:5e:0f:b9:d2:2e:99:cf:ce:7a:22:65:9f:1b:26:a4:e7:0e:
         da:80:42:a0:ea:33:42:d6:3d:9c:47:36:4e:cf:46:c0:fa:06:
         da:36:b0:ff:5e:27:7b:26:91:e3:4d:da:31:30:91:e3:23:9e:
         94:4a:65:5a:77:3b:26:ac:3d:ac:ca:0b:88:73:9f:b1:fa:b4:
         e9:ae:47:c8:09:37:c8:2c:50:f0:38:8a:d1:55:b1:c5:da:cd:
         4c:b4:b7:ac:42:5c:52:4d:1c:18:08:41:61:2a:f3:ba:ba:17:
         0c:f8:27:bf:88:fd:ee:80:85:59:c5:53:60:17:8c:e2:cf:97:
         b8:65:b7:c4:7f:a8:2d:3a:61:9a:c8:76:12:8c:94:79:b5:fc:
         bd:a1:21:53:9e:ef:57:82:99:d2:ae:c0:89:37:48:36:7f:bd:
         3f:7f:64:7c:3f:0c:cb:48:95:d8:ae:ef:d6:18:6c:93:07:74:
         35:80:04:03:aa:31:a5:74:f9:d2:84:11:5a:f8:77:fa:68:e1:
         1a:03:4a:f9:48:65:8a:e1:4b:63:88:bd:90:20:94:fd:89:65:
         77:52:ff:af:66:7d:28:a8:37:c8:bd:3c:6b:9b:d4:89:a6:5f:
         39:07:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org