Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS12094.roa
File:                     AS12094.roa (raw, json)
Hash identifier:          FBexbyyK3R/8HGlXBFLQIpuYtBMxIDxUFOXWIo5Tlwc=
Subject key identifier:   0C:88:D6:2D:E6:D7:32:FD:63:0A:68:D0:B7:7C:7E:51:26:2D:25:6A
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       09E2C431014A9F2B670E4325840329C788C726C9
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS12094.roa
Signing time:             Mon 26 Feb 2024 22:08:40 +0000
ROA not before:           Mon 26 Feb 2024 22:03:40 +0000
ROA not after:            Mon 24 Feb 2025 22:08:40 +0000
asID:                     12094
IP address blocks:        50.33.135.0/24 maxlen: 24
                          50.33.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e2:c4:31:01:4a:9f:2b:67:0e:43:25:84:03:29:c7:88:c7:26:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Feb 26 22:03:40 2024 GMT
            Not After : Feb 24 22:08:40 2025 GMT
        Subject: CN=0C88D62DE6D732FD630A68D0B77C7E51262D256A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:c4:c9:d7:9e:be:a8:6a:b0:78:de:c0:8b:
                    d4:92:89:14:5a:8d:17:32:f0:c0:b8:a7:87:d3:06:
                    7c:99:20:5e:d4:b0:4d:eb:e8:f5:e4:31:68:d7:54:
                    2e:cf:37:3c:8f:c4:eb:6f:5c:6c:23:3d:3d:21:9c:
                    ac:c7:f4:97:75:3e:68:cf:5a:63:86:3b:85:8b:46:
                    ce:51:1a:e4:36:98:af:bd:1b:5c:1d:84:6d:12:70:
                    3e:0c:af:6a:5f:75:22:49:71:1a:55:c3:70:aa:92:
                    e2:ac:93:f5:4a:cb:09:b7:7e:e8:60:c8:48:e9:f9:
                    34:52:db:9b:22:0b:92:4e:2c:9b:1e:82:39:f2:ce:
                    8a:12:0d:03:b9:b1:52:d6:91:c1:f1:22:c5:af:a7:
                    76:cb:8b:25:ec:e7:98:1b:e5:54:86:8d:8e:8e:02:
                    bc:48:e3:4b:3d:60:dd:df:25:02:f0:8f:8f:db:62:
                    2e:d1:93:88:8b:66:83:b9:1e:ff:3d:85:34:51:fe:
                    14:1e:10:5f:a8:37:b3:5b:e9:bf:dd:50:25:fc:50:
                    4a:40:6e:fa:d2:25:b7:ab:75:ca:8f:fd:03:9d:9d:
                    e9:50:d6:c8:cd:45:ac:c2:39:3d:cc:a5:b7:80:44:
                    33:45:1d:a8:fe:f2:f2:db:41:47:b4:61:fd:fd:84:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:88:D6:2D:E6:D7:32:FD:63:0A:68:D0:B7:7C:7E:51:26:2D:25:6A
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS12094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.33.135.0/24
                  50.33.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:80:8f:2b:10:98:07:13:a9:c6:f7:d0:c2:ad:5a:15:e7:
         7b:05:8d:c9:7a:ec:57:ff:9d:5f:be:dc:fd:6d:98:92:15:4c:
         1e:59:35:11:71:a5:c3:3d:01:aa:0f:47:dc:7d:0b:10:c2:28:
         f0:d8:44:6b:e1:3c:a8:04:75:60:35:d3:06:81:93:b6:9c:14:
         10:65:e3:98:e8:0b:ad:37:c8:34:e3:66:1a:05:85:d2:cc:16:
         e1:17:43:68:df:be:50:61:21:3b:32:e9:f7:37:ac:d3:49:32:
         88:fe:ca:ae:5b:ce:49:d7:51:64:38:ef:7e:0f:33:7f:8c:bf:
         42:bc:87:69:d7:86:fd:73:1d:cc:e1:35:b2:46:1d:80:6d:93:
         53:df:ee:a7:3b:bd:18:93:d9:e6:ce:58:a8:e1:f5:db:47:96:
         76:d8:fd:9c:c2:d5:4b:01:6e:ed:bb:b0:44:34:8c:e4:aa:1b:
         30:18:36:e4:ae:ee:18:d0:c0:2d:04:ef:fe:81:7d:fe:46:21:
         9f:5c:a4:99:7e:8c:f2:91:2b:a8:f7:be:81:b0:a6:2f:4e:91:
         8a:9a:ad:ca:b1:59:2b:45:47:0f:16:9c:5a:af:d0:32:88:fb:
         40:ed:85:89:2c:ef:8e:8d:59:0a:75:7e:63:f6:4c:5b:2b:15:
         9a:dc:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org