Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS63172.roa
File:                     AS63172.roa (raw, json)
Hash identifier:          qBOGRRyL/N7zpD5DM99DHx2yOkraOetYKUR1opFlu/8=
Subject key identifier:   CA:34:5F:D6:A7:59:12:78:9C:93:B8:6F:26:EF:D0:1F:C0:DA:D2:07
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       48DAA2BAA1748621B72A460A0D27BC9B446DB2A4
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS63172.roa
Signing time:             Tue 30 Jan 2024 05:26:49 +0000
ROA not before:           Tue 30 Jan 2024 05:21:49 +0000
ROA not after:            Tue 28 Jan 2025 05:26:49 +0000
asID:                     63172
IP address blocks:        104.169.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:da:a2:ba:a1:74:86:21:b7:2a:46:0a:0d:27:bc:9b:44:6d:b2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:21:49 2024 GMT
            Not After : Jan 28 05:26:49 2025 GMT
        Subject: CN=CA345FD6A75912789C93B86F26EFD01FC0DAD207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:22:6c:f3:96:98:b2:d4:35:43:17:dd:9c:
                    c2:e5:96:b9:c5:bc:d4:69:3c:4b:c8:ad:ed:f7:06:
                    a9:98:85:22:83:d2:30:34:c1:fb:e2:ee:03:f7:aa:
                    e7:c3:76:a5:75:92:b7:60:bf:02:8e:64:2c:21:d1:
                    e9:29:28:6c:94:10:9f:dc:0d:2a:e4:1d:82:86:d1:
                    07:f1:f6:57:1c:f8:90:11:4d:f8:7b:93:5b:e7:f7:
                    b5:c6:8e:c0:80:a4:38:46:e9:33:7e:bd:c3:36:4d:
                    40:c6:1f:19:5c:75:dd:1a:60:63:e7:b2:c6:74:49:
                    64:b9:e2:38:f4:c2:b4:70:91:fd:5a:7e:1c:0a:08:
                    e8:2a:b5:5d:d7:75:5e:85:ac:0e:65:31:0f:0e:7d:
                    f0:7b:f9:4d:9c:7e:ac:e4:05:df:83:53:db:bf:ee:
                    9c:90:fe:92:36:b3:5d:80:ff:4c:85:d4:ba:5b:b1:
                    c2:b2:d1:e8:d0:fe:3b:75:6a:cf:72:1d:4a:6b:df:
                    b4:e6:30:e0:88:c0:e9:37:c4:12:7c:78:fd:72:12:
                    52:94:14:28:0f:d8:fe:dd:47:bf:ba:4a:4e:14:3c:
                    d8:ed:ac:dd:0c:70:13:ef:3a:cc:32:ca:14:f9:ba:
                    93:ed:f0:99:c6:c7:c6:16:5d:ed:70:32:3e:32:62:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:5F:D6:A7:59:12:78:9C:93:B8:6F:26:EF:D0:1F:C0:DA:D2:07
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS63172.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.169.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:37:e6:fd:0c:9f:ad:0d:9b:ca:e6:c5:1d:97:87:46:24:fc:
         80:6b:a9:91:f8:43:4a:5b:b6:61:40:c7:36:c2:e6:2c:d6:24:
         ce:37:de:94:b4:61:49:ab:ad:27:09:ca:3d:2f:00:9e:e2:86:
         94:a0:b5:83:b3:53:3b:c7:a8:17:37:54:2d:42:43:f8:0e:90:
         12:f6:27:00:7f:fb:43:9d:6c:2c:7d:90:f9:d8:54:ce:59:1e:
         6a:ed:e1:d9:44:21:17:85:c7:83:2d:5e:65:ec:8f:b4:2f:e9:
         85:31:e0:ad:3f:f9:83:c2:48:dd:19:b6:eb:db:71:50:04:ac:
         17:35:9a:74:73:7b:fc:33:be:3f:18:2f:9e:a4:04:39:94:ca:
         eb:2d:ab:28:d7:67:c8:bf:e3:6d:a1:34:b0:e0:2b:ca:c7:bd:
         36:e8:99:a5:a5:ad:3b:8c:d6:ac:7b:f1:e0:8d:39:e0:95:c3:
         84:86:e0:15:71:3e:d5:b8:b2:2c:2a:69:1c:25:98:41:7a:5a:
         68:f0:1b:c0:de:a5:2d:c5:14:fa:5f:95:38:27:34:e0:c3:56:
         11:97:ce:c0:f2:c0:1b:76:e7:cc:17:46:4c:2d:1b:47:38:73:
         9a:14:21:1c:a8:0c:6a:86:6b:17:a9:be:f6:56:25:60:c6:e4:
         cf:5f:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org