Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS31862.roa
File:                     AS31862.roa (raw, json)
Hash identifier:          kW56SE4nJjUCodriUEFFNbXDzEsB3w8ejGfiJr5AzX4=
Subject key identifier:   06:6F:BB:B2:FE:6B:98:BC:34:38:47:BD:5D:7E:09:AD:2A:95:00:D0
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       650847BA9088A833DA0DDF712D6E9FBCD4620742
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS31862.roa
Signing time:             Tue 30 Jan 2024 05:30:01 +0000
ROA not before:           Tue 30 Jan 2024 05:25:01 +0000
ROA not after:            Tue 28 Jan 2025 05:30:01 +0000
asID:                     31862
IP address blocks:        50.49.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:08:47:ba:90:88:a8:33:da:0d:df:71:2d:6e:9f:bc:d4:62:07:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:25:01 2024 GMT
            Not After : Jan 28 05:30:01 2025 GMT
        Subject: CN=066FBBB2FE6B98BC343847BD5D7E09AD2A9500D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:62:5b:2b:42:c6:46:31:36:44:6a:47:d8:
                    09:d1:7e:58:0d:19:3f:99:34:a7:ae:f3:f4:ed:4e:
                    ba:a9:52:12:1e:54:0e:57:75:87:e7:73:fa:c2:d4:
                    60:78:a3:4f:a8:8c:61:97:04:d1:6e:3e:59:23:5f:
                    3f:34:2c:ec:b8:71:d4:d8:6b:12:c5:f4:b2:30:a7:
                    61:f3:a2:96:9c:4f:2e:96:61:b6:ed:99:78:3d:90:
                    cf:2b:e5:1f:f1:5a:8b:5f:89:45:87:ef:dc:97:ca:
                    68:74:b3:a2:ec:a9:08:27:56:ca:ad:c8:c7:4e:94:
                    37:17:06:a0:25:88:16:40:b5:33:55:81:d8:c3:83:
                    1c:42:3e:3c:44:af:60:c7:3c:cb:a1:8e:c0:b2:62:
                    fd:f1:2a:6c:22:62:92:26:61:cd:8c:26:e7:92:78:
                    18:c6:7c:40:dd:79:94:5a:68:42:06:cd:86:6d:c1:
                    1e:e3:ee:4c:5c:d1:04:23:82:37:93:c6:9f:32:43:
                    ec:09:37:46:be:21:e2:11:ab:bd:d0:79:70:79:47:
                    8a:37:7a:05:54:c7:42:47:e6:7a:dd:08:be:7c:2b:
                    4d:69:13:86:a7:84:c1:56:52:81:65:ef:ff:b3:1e:
                    a3:66:41:8c:f9:b1:5b:b7:07:e8:7b:4a:3f:99:eb:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6F:BB:B2:FE:6B:98:BC:34:38:47:BD:5D:7E:09:AD:2A:95:00:D0
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS31862.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.49.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:b2:e5:23:66:d9:9a:ab:43:50:6b:8b:11:ea:90:4f:67:
         fa:75:25:07:30:2f:cc:30:81:2c:87:16:d3:c9:11:65:cf:45:
         71:7a:6a:9e:b8:27:de:3f:41:7c:ca:f8:92:2e:87:8a:62:6a:
         c4:b9:de:53:ea:61:ae:57:e6:fe:f0:7c:f9:65:85:f1:50:c7:
         b0:56:3d:65:77:29:6a:1d:5c:80:01:33:1d:ff:20:dd:e8:46:
         1d:ce:5a:76:c3:80:4d:c8:9c:44:27:3e:cc:3c:3b:e5:f0:ba:
         6e:e6:bb:ce:47:19:ba:0b:32:36:b5:b4:0f:71:5a:fb:4a:0d:
         cb:d0:2b:dc:f8:43:48:d7:23:8c:f1:d5:a5:32:85:71:bc:8f:
         86:1a:02:ba:72:07:e6:28:6e:98:6e:95:f2:5f:18:ff:39:07:
         e1:df:2d:83:22:2c:2b:eb:35:d7:60:dc:7a:23:18:a1:23:0e:
         b2:fb:c4:aa:27:85:e7:6c:7f:2a:cb:29:40:b5:92:24:3b:8c:
         5b:76:7d:ab:98:69:07:2e:37:6b:cd:b1:05:6e:a8:9d:2f:29:
         11:12:2c:d2:2a:04:20:52:ef:54:15:fd:4b:fb:93:35:5a:68:
         31:e2:63:3d:77:ab:f1:0c:f3:fb:a2:05:bc:44:a3:d5:06:44:
         4d:0d:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org