Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS62904.roa
File:                     AS62904.roa (raw, json)
Hash identifier:          ZeRUXSzrXYZDy2hNHtSBF+iVmRnqtYaE2thBy+q1GUg=
Subject key identifier:   5C:4D:A3:CC:03:56:DD:D6:86:00:8F:71:A0:E4:DA:92:59:D0:DB:48
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       59506A06B4D36C0342A94A172ABFD5C3DEBF84B0
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS62904.roa
Signing time:             Wed 19 Jul 2023 16:30:59 +0000
ROA not before:           Wed 19 Jul 2023 16:25:59 +0000
ROA not after:            Wed 17 Jul 2024 16:30:59 +0000
asID:                     62904
IP address blocks:        216.246.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 10:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:6a:06:b4:d3:6c:03:42:a9:4a:17:2a:bf:d5:c3:de:bf:84:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 19 16:25:59 2023 GMT
            Not After : Jul 17 16:30:59 2024 GMT
        Subject: CN=5C4DA3CC0356DDD686008F71A0E4DA9259D0DB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:db:fb:f8:d0:e4:33:ae:3a:15:15:f0:78:
                    8c:83:b2:9c:1c:68:76:71:51:72:28:24:19:d5:36:
                    a5:32:bd:3a:b8:a3:43:dc:e4:ba:13:c0:5e:a8:40:
                    8e:7d:fc:e1:8a:4c:b8:5d:71:32:4a:2d:21:5f:c6:
                    b4:45:67:2d:7d:60:37:c9:8a:4f:ce:e8:b2:5f:b2:
                    82:78:df:74:94:02:91:ab:fd:c7:3c:22:e5:15:44:
                    6b:ec:cb:e1:23:23:cb:3e:02:10:66:e5:42:68:10:
                    5f:58:54:72:bc:4e:53:5e:6d:0c:78:8d:3a:58:d9:
                    c2:a4:36:8a:06:79:fd:44:b5:5c:c3:22:cb:27:bd:
                    7c:67:e2:ff:7e:ac:3d:17:01:75:30:41:8a:05:d8:
                    8a:b6:6a:0f:9a:17:1f:89:f2:8e:52:e8:b2:4f:60:
                    ba:70:9d:8e:2c:d4:57:a4:9b:23:ce:9b:dd:1c:d1:
                    56:8d:1f:31:73:35:c9:3b:46:8b:48:10:7c:27:d6:
                    1a:ee:5a:d1:2d:0a:75:ff:93:48:ce:f6:9b:e3:f3:
                    3a:d1:30:93:ab:8f:91:ba:81:65:95:79:0c:7c:9c:
                    d7:12:15:2a:48:15:36:de:d5:71:8a:92:ba:96:0e:
                    e0:22:fc:95:d6:81:76:51:ea:91:27:6d:fd:f4:dd:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:A3:CC:03:56:DD:D6:86:00:8F:71:A0:E4:DA:92:59:D0:DB:48
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS62904.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:fb:f0:cf:8a:62:a5:45:75:52:76:39:ac:90:a9:15:05:e1:
         d3:7b:49:9b:5f:9e:cd:89:57:61:3a:c0:79:bb:fe:59:c6:a4:
         ba:9b:26:9e:0b:df:cc:8d:cf:8a:fb:6b:b9:da:24:81:53:50:
         2d:09:94:10:14:62:59:0d:6b:59:dc:ed:23:4a:2d:d2:6e:e1:
         dc:db:a6:85:30:da:51:6c:12:95:08:b0:a5:de:71:70:de:93:
         da:92:cb:2c:39:5c:0d:fb:2a:fa:02:6a:ed:ba:ba:26:38:61:
         2b:64:cf:04:f6:63:0b:70:94:43:be:37:32:20:c1:3f:5d:75:
         66:d3:05:6f:f2:f0:27:84:5e:07:02:05:14:d3:c8:27:a8:98:
         aa:70:32:af:01:e7:39:72:9f:24:8c:f0:15:c6:55:e8:39:ea:
         1e:f3:0e:18:87:06:9a:5d:c7:6c:3c:7f:35:12:01:74:1a:e4:
         1c:b0:fa:ff:d5:a3:3e:5c:83:12:48:4a:1d:8e:d9:a8:62:16:
         8e:23:05:29:79:0f:7a:d6:85:2e:bd:10:cd:59:7a:08:a1:db:
         43:f2:df:3a:3b:93:c0:d0:8f:d3:71:19:13:61:b7:29:9c:46:
         3f:c2:c7:00:4e:3f:5e:ac:2a:b4:09:45:20:49:dd:95:18:cc:
         61:39:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:12:57 2024 by rpki-client on console-fra.rpki-client.org