Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS393323.roa
File:                     AS393323.roa (raw, json)
Hash identifier:          poMOPHAVqVDQyYxPOHus6PuuEqVMugswDD6mCh00gfs=
Subject key identifier:   5E:C1:9C:ED:ED:87:9E:C5:36:EA:AA:C4:85:70:9B:08:8D:41:A2:76
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       1B90C4F77D06C562A33697D4DDA37AA1614AF73D
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS393323.roa
Signing time:             Tue 30 Jan 2024 05:26:37 +0000
ROA not before:           Tue 30 Jan 2024 05:21:37 +0000
ROA not after:            Tue 28 Jan 2025 05:26:37 +0000
asID:                     393323
IP address blocks:        184.16.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:90:c4:f7:7d:06:c5:62:a3:36:97:d4:dd:a3:7a:a1:61:4a:f7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:21:37 2024 GMT
            Not After : Jan 28 05:26:37 2025 GMT
        Subject: CN=5EC19CEDED879EC536EAAAC485709B088D41A276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:ed:b8:0b:ec:31:78:78:27:ca:d9:d5:b4:
                    ab:53:f3:82:92:92:48:c0:cc:df:e9:a3:ed:c3:f6:
                    8b:0f:05:cd:7a:10:7b:59:00:da:15:b1:8e:4e:65:
                    3a:a2:50:22:ac:c7:4f:0e:a0:9c:a7:ab:0b:ed:1a:
                    0b:ac:d2:ad:3c:6d:1d:8d:49:10:eb:32:c0:88:f3:
                    1b:61:81:5a:72:e4:34:c0:58:d7:de:1c:79:b4:35:
                    17:f3:54:88:16:5a:73:61:40:a2:38:da:09:ab:49:
                    95:00:3f:12:2d:2c:f9:65:ad:b3:84:4f:d8:50:52:
                    6c:33:53:bc:da:17:c9:43:92:24:16:6c:36:d5:4d:
                    95:e5:52:dc:c5:f2:75:20:95:d1:58:c3:47:20:7c:
                    4b:e7:c2:b9:85:cf:68:7c:79:c2:95:46:83:2d:6f:
                    3f:36:bb:28:b4:df:d8:8c:0d:3f:f5:23:eb:f1:db:
                    9d:3a:a7:70:87:20:1c:72:61:48:21:fe:09:c4:4e:
                    a2:ac:ab:a9:52:d2:d5:be:c1:e2:05:30:1a:af:4e:
                    9f:9b:f0:4d:6b:d8:3f:f2:0a:dc:da:12:c2:71:64:
                    11:89:03:2e:d3:29:be:7e:83:1f:5b:08:1c:e8:1c:
                    c6:1f:3f:f5:89:60:4b:dd:88:bd:5d:b3:88:1a:1b:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C1:9C:ED:ED:87:9E:C5:36:EA:AA:C4:85:70:9B:08:8D:41:A2:76
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS393323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.16.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:70:72:04:6b:86:36:98:c5:04:d4:5b:d5:4f:19:1c:09:
         44:f8:36:de:9d:49:1a:20:94:b7:55:57:29:d1:b4:d0:93:c0:
         2d:63:21:0f:39:48:06:95:13:dd:e3:79:fa:52:41:23:5b:9b:
         d8:6b:e5:ff:93:e9:6a:55:f2:d8:61:5b:05:aa:e9:ac:c0:75:
         0b:da:f8:85:c9:60:d0:b1:9f:56:7c:de:50:c8:c8:10:de:bc:
         a3:56:a5:fe:99:4b:05:a6:2b:05:21:bd:8a:06:ad:a1:16:03:
         23:56:fa:af:c3:5a:d8:6a:a2:4e:d8:8e:e3:37:91:be:fa:f2:
         9a:ee:13:38:ff:75:31:c7:c5:94:ff:98:26:4c:de:56:32:5b:
         05:cb:e4:e9:47:05:5c:94:a4:a0:58:60:12:24:7a:5f:ff:20:
         39:6a:bb:0b:96:5a:ad:c4:cc:d8:91:36:80:96:e9:07:24:1a:
         ed:a9:a3:6d:82:ba:54:8b:af:5a:d9:83:98:94:7d:30:29:ce:
         02:dc:95:c0:6f:4d:5b:80:a7:1a:a9:72:ac:0e:d2:f8:0b:75:
         56:fe:54:3b:3f:62:3f:df:ac:21:69:0c:c9:42:cf:dc:8c:72:
         14:58:b9:ee:44:ff:f0:f6:76:ce:0e:dc:5c:ec:d1:88:e1:6f:
         bb:e3:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org