Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          6Uw7fUxi6sN1nq9AA/XIwLm4XojOy+MxFvoUjG/+mDs=
Subject key identifier:   B5:58:FA:EC:C3:63:2C:1E:BE:8F:3F:F2:9C:4E:1D:69:14:CD:A9:37
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6AD79113A239D8CA2565749C7C1E36F42990B4B5
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS0.roa
Signing time:             Thu 03 Oct 2024 11:49:01 +0000
ROA not before:           Thu 03 Oct 2024 11:44:01 +0000
ROA not after:            Thu 02 Oct 2025 11:49:01 +0000
asID:                     0
IP address blocks:        74.50.5.0/24 maxlen: 24
                          74.50.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d7:91:13:a2:39:d8:ca:25:65:74:9c:7c:1e:36:f4:29:90:b4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  3 11:44:01 2024 GMT
            Not After : Oct  2 11:49:01 2025 GMT
        Subject: CN=B558FAECC3632C1EBE8F3FF29C4E1D6914CDA937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d4:f3:bb:d9:e6:90:2f:33:fb:68:1c:4d:29:
                    82:91:87:11:a1:97:0b:65:96:38:12:13:1b:a2:50:
                    2f:b1:57:1b:18:e1:b1:f8:af:af:08:4c:42:b6:de:
                    7e:f4:7a:80:6d:84:bb:58:27:09:33:2d:74:67:4d:
                    05:10:d9:21:bc:d1:62:a9:a2:16:41:64:9a:7e:8b:
                    00:51:8d:3e:6f:c3:a7:86:8b:1e:29:f8:88:5b:31:
                    f0:f2:da:59:2b:63:7e:fb:1e:6c:6e:4a:82:c9:28:
                    7f:d9:c5:59:4e:01:f5:90:c9:cd:7e:0e:e3:60:ae:
                    ad:8a:8f:65:48:a8:9b:af:0b:b6:6c:77:7c:c1:50:
                    02:a5:44:93:24:fe:ec:ea:fb:c6:c1:df:b3:b0:71:
                    bd:4b:fc:ea:a7:4f:f7:db:e0:c4:2d:26:7e:e7:e6:
                    d5:3c:ef:60:74:5b:31:8d:9f:d3:d6:b1:28:f8:9c:
                    f9:71:d2:3d:7e:7a:fe:a0:ca:c3:2f:34:5a:46:43:
                    e7:2a:82:21:20:75:70:86:ec:79:a3:ca:3c:f9:1e:
                    e5:0d:da:1f:be:34:43:77:26:db:52:9b:0f:88:9b:
                    96:83:11:25:cd:7e:82:ce:01:d5:0d:1c:d7:ed:d2:
                    4b:d1:94:6b:3d:19:53:46:f7:e4:bb:b0:c9:45:69:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:58:FA:EC:C3:63:2C:1E:BE:8F:3F:F2:9C:4E:1D:69:14:CD:A9:37
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.5.0/24
                  74.50.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:f2:73:1a:37:8d:38:3f:24:d6:0b:7a:aa:74:08:73:95:
         99:e1:90:82:b7:2a:5b:08:78:7f:4c:e3:10:87:99:f0:02:7a:
         5a:ab:52:86:98:89:42:d9:4f:5f:a5:c5:a2:9f:90:69:6a:f8:
         4e:de:eb:8c:cd:5a:90:64:97:47:d6:ea:36:02:ab:9a:77:c4:
         03:eb:64:a3:4f:4e:fe:d6:fa:e7:15:d2:8c:43:75:b4:bf:8c:
         0b:a3:22:01:21:80:c3:b5:d4:a4:55:ff:04:83:ac:5e:42:03:
         91:d8:f2:d8:38:82:b1:7c:ed:a3:1b:ec:97:9c:a3:0e:02:b5:
         ce:25:ea:c3:d6:2b:f4:1e:9e:f5:87:9a:72:ff:67:80:7f:44:
         65:cb:24:5c:ab:55:1e:55:96:97:83:48:38:5d:e1:fa:7f:16:
         db:03:4b:ae:da:b4:fd:49:59:79:f6:da:50:5a:e7:c0:ac:cc:
         99:3a:8d:fa:e7:75:c1:bc:fe:f7:27:6f:8c:e1:04:87:32:d6:
         b2:9e:7e:68:44:75:0d:57:47:84:ab:3e:d0:f0:1a:a3:1f:8b:
         7b:7c:c1:a3:cb:8f:72:33:87:76:63:19:de:8b:08:5e:86:f0:
         e7:03:6d:c0:6b:fe:94:56:f8:c9:a4:a5:db:2a:cb:8a:c0:7c:
         90:da:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:27 2024 by rpki-client on console-fra.rpki-client.org