Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS54906.roa
File:                     AS54906.roa (raw, json)
Hash identifier:          ESrtiParlUnqwRu2xhdUMP/7knaYHGU+0TZoViU8NBI=
Subject key identifier:   35:D8:8E:58:49:F2:5D:40:31:E6:BE:5B:E2:90:D9:3B:16:38:18:5A
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       34FD2A564826A7EE3A25705125B3D430C7AA85C5
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS54906.roa
Signing time:             Wed 17 Jan 2024 05:48:07 +0000
ROA not before:           Wed 17 Jan 2024 05:43:07 +0000
ROA not after:            Wed 15 Jan 2025 05:48:07 +0000
asID:                     54906
IP address blocks:        208.111.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fd:2a:56:48:26:a7:ee:3a:25:70:51:25:b3:d4:30:c7:aa:85:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:43:07 2024 GMT
            Not After : Jan 15 05:48:07 2025 GMT
        Subject: CN=35D88E5849F25D4031E6BE5BE290D93B1638185A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:1d:78:b7:3d:0a:a6:e8:2d:86:f2:d8:d9:
                    0c:61:db:61:66:00:a1:dd:9a:55:ec:41:ba:22:1d:
                    05:17:a2:95:a3:40:3a:d7:e8:1c:2d:8c:e7:d9:cd:
                    0d:22:44:07:40:be:af:fd:09:70:24:6c:15:59:e5:
                    62:e8:63:0c:c9:0f:72:a8:37:0a:62:e0:c2:fc:45:
                    c5:51:9a:c1:b9:4d:04:d8:0b:51:bd:f9:c4:3d:c5:
                    8f:08:1b:9f:b4:03:93:e8:28:ef:03:10:5d:1a:9d:
                    9a:e6:a2:ec:38:3b:85:c7:f7:3a:4b:fb:cf:3f:36:
                    d1:cb:d1:d8:a7:7c:0d:33:a3:ab:a1:4d:85:b2:75:
                    7f:21:b3:58:37:a1:32:64:0a:c5:29:74:e2:90:d8:
                    7a:00:f9:2a:f1:1c:cb:32:6b:fc:86:1a:f4:18:f3:
                    ba:b3:3e:5c:45:42:38:7a:fe:b7:1b:fa:26:7a:f2:
                    af:1c:c2:72:18:11:9a:1c:41:ea:d0:dc:07:f9:d6:
                    fa:d0:0c:40:7f:40:99:0f:a7:c0:42:5c:cc:7b:e8:
                    5c:00:b1:01:1e:6f:29:49:ce:b5:6d:d4:79:62:52:
                    c6:f0:d5:ff:cc:96:c5:d0:f5:c0:dd:f5:16:ee:5d:
                    2e:81:07:85:8e:da:ac:47:d3:b3:df:fd:31:b7:12:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:8E:58:49:F2:5D:40:31:E6:BE:5B:E2:90:D9:3B:16:38:18:5A
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS54906.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:7f:14:70:03:60:7e:0d:8e:c8:a3:00:8f:ad:1a:58:92:
         6e:00:36:77:03:42:57:47:db:ea:37:de:f3:97:93:86:c9:9f:
         9d:39:cd:41:64:c7:21:5d:54:16:c1:e2:0b:14:b8:25:d8:bf:
         1c:a0:c0:7e:c1:e3:98:22:eb:59:61:f3:f8:4d:f6:86:9a:30:
         20:53:29:a9:ec:10:50:10:0d:8f:84:29:1b:66:4f:53:a0:16:
         e6:e1:b9:a2:0e:da:d1:ff:c7:8a:00:e8:5f:8f:fa:0f:10:54:
         de:c3:fc:13:c9:d0:51:e4:fa:89:60:59:6f:2d:4a:c8:96:d5:
         d2:31:62:c7:42:3d:b6:aa:5d:a9:bf:7b:73:0a:58:66:5a:cd:
         bf:a2:7b:dc:e2:00:8a:be:b6:af:c2:cd:51:3a:66:d1:45:59:
         60:10:c8:0b:e2:bd:8f:c1:38:77:fa:89:4f:da:c5:f4:81:4d:
         b0:79:4b:4d:45:51:66:81:11:de:23:b2:dd:51:c3:c7:d0:fe:
         bc:e0:88:57:6e:55:b5:50:ba:04:99:32:f2:7c:83:c7:cc:5d:
         3d:e0:c8:fb:6f:2e:fb:17:95:7e:23:b5:e3:19:ea:1b:05:cb:
         2b:af:5e:69:3e:3d:08:2e:aa:5e:b0:d2:1f:a4:60:b8:32:15:
         a4:65:61:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:42:36 2024 by rpki-client on console-ams.rpki-client.org