Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS1239.roa
File:                     AS1239.roa (raw, json)
Hash identifier:          VRe4+t8xIE3e5IBN3uP7VONYw1KFJJLrtBqgwka94LM=
Subject key identifier:   AC:9D:70:78:23:F2:80:5E:F8:CA:4B:A8:7E:E9:92:04:78:F7:79:E4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3B374F932E7D69F87F467D9C33F2D5BF5DF32F97
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS1239.roa
Signing time:             Thu 29 Aug 2024 17:48:59 +0000
ROA not before:           Thu 29 Aug 2024 17:43:59 +0000
ROA not after:            Thu 28 Aug 2025 17:48:59 +0000
asID:                     1239
IP address blocks:        64.50.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:37:4f:93:2e:7d:69:f8:7f:46:7d:9c:33:f2:d5:bf:5d:f3:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 29 17:43:59 2024 GMT
            Not After : Aug 28 17:48:59 2025 GMT
        Subject: CN=AC9D707823F2805EF8CA4BA87EE9920478F779E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:68:a2:aa:ed:00:42:b9:eb:63:8e:56:17:c6:
                    cf:20:6a:27:31:5f:c4:37:d6:76:61:c0:37:0d:0f:
                    c7:d6:b7:45:da:04:50:bc:6e:2d:f0:b3:33:c7:a2:
                    10:a7:4e:4c:7f:11:86:41:f7:34:dc:17:59:c6:35:
                    0b:ca:42:c6:42:24:3b:ba:57:26:3f:99:ee:31:53:
                    2d:4d:2c:c4:58:7d:55:ce:6b:b7:1d:87:b6:0e:ef:
                    d0:de:6e:16:ab:e3:c0:80:eb:e1:39:5c:a0:94:47:
                    a4:5b:ad:af:83:a1:ff:4f:2e:a0:7b:72:74:3c:00:
                    b6:0b:ba:a3:1b:41:fd:4f:e8:dc:7a:fc:bd:67:cc:
                    7a:1a:fe:a3:a7:96:67:15:04:ab:62:51:a9:da:d3:
                    d3:83:77:f6:45:43:81:18:8e:a9:f4:32:15:02:fe:
                    a8:c8:a1:22:0f:6c:cb:c6:75:68:02:51:4c:8b:cb:
                    15:70:e2:ac:70:a6:0a:d7:ab:62:b9:8e:1a:bf:e6:
                    97:a6:38:7d:6e:43:8f:ef:56:3a:4b:07:5a:d4:35:
                    c7:1c:3e:1f:f7:74:82:4f:39:6b:a1:7d:69:a8:48:
                    64:95:bc:78:09:79:16:c7:24:ab:58:03:c8:e0:75:
                    73:50:8f:66:6f:1d:26:f4:3d:75:d3:df:21:03:a6:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:70:78:23:F2:80:5E:F8:CA:4B:A8:7E:E9:92:04:78:F7:79:E4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS1239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:2c:1e:fa:d6:ba:cf:b6:ee:f0:15:37:9f:17:c3:0f:cc:
         e7:3e:14:a7:7f:8e:61:db:38:a8:ad:02:10:4b:d4:20:14:01:
         e8:27:10:ff:3a:5d:15:78:07:b9:71:65:e0:1c:da:37:a1:86:
         00:63:d6:4e:6a:22:04:69:28:a3:f3:e9:c6:75:09:72:f6:6b:
         f7:9a:4d:e4:43:c2:a2:04:19:39:d3:a0:2b:29:d7:7f:4d:21:
         5e:d7:7a:32:3f:fe:da:94:26:0c:67:35:95:95:f6:ed:af:ac:
         a9:99:ae:ac:d4:27:f9:73:7b:a6:fa:5b:83:a4:75:e1:9c:a4:
         7d:84:ba:be:fb:a0:ca:ac:47:f5:d2:a4:0f:07:45:62:95:0a:
         8d:5a:5e:fc:f8:0c:88:2a:3a:4c:4e:49:40:c7:a6:bb:37:10:
         92:10:c3:ab:41:30:bd:70:a8:8f:bf:77:51:be:76:0d:b6:90:
         93:9a:39:1b:ce:4e:71:15:09:b3:02:8e:91:14:20:45:1a:99:
         13:e2:ee:04:45:20:d8:30:6b:a7:51:02:07:41:f2:72:b3:c6:
         5a:3f:24:6d:25:de:7c:1a:91:98:64:62:38:6a:ea:2d:27:42:
         c9:91:62:43:9a:4d:49:05:83:28:51:99:c8:5b:d0:ef:e6:c6:
         61:71:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:40 2025 by rpki-client