Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135391.roa
File:                     AS135391.roa (raw, json)
Hash identifier:          3IAHcbJe2DWl0rsZUm17iEgUKsMUcroWmDwXPt+ppmc=
Subject key identifier:   F6:01:0E:03:F8:D0:85:05:4D:1A:D5:49:49:0F:F6:B6:25:CE:7E:11
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       074A7A38712222D7FB92C7A9AFC223914AFFBE97
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135391.roa
Signing time:             Mon 22 Jul 2024 07:07:09 +0000
ROA not before:           Mon 22 Jul 2024 07:02:09 +0000
ROA not after:            Mon 21 Jul 2025 07:07:09 +0000
asID:                     135391
IP address blocks:        23.95.98.0/24 maxlen: 24
                          107.172.36.0/24 maxlen: 24
                          198.23.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4a:7a:38:71:22:22:d7:fb:92:c7:a9:af:c2:23:91:4a:ff:be:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 22 07:02:09 2024 GMT
            Not After : Jul 21 07:07:09 2025 GMT
        Subject: CN=F6010E03F8D085054D1AD549490FF6B625CE7E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:18:6f:f6:bd:28:79:da:03:3d:5e:40:ae:
                    2d:0c:df:1a:3b:93:cb:c6:5e:32:c3:22:83:4c:a3:
                    f0:7e:20:ec:0b:3c:5a:6c:92:b8:2b:03:bb:71:69:
                    85:e7:fd:c2:18:0b:b4:d2:e4:ca:1e:67:c3:c0:9e:
                    2c:4c:90:25:68:2d:67:fe:20:98:64:59:1a:76:59:
                    55:68:ba:69:30:a0:1f:96:9c:92:3a:24:ed:07:cb:
                    d0:fb:c1:18:b1:58:3a:dd:a7:10:a0:a8:86:98:1c:
                    e7:b4:cd:e7:67:f6:8e:cc:82:b1:f7:f6:b3:a4:fc:
                    2d:1f:8a:5a:13:e6:04:08:28:45:a4:b0:e7:69:a6:
                    1e:05:bf:ee:19:8f:a6:28:88:60:50:73:23:ee:2f:
                    86:fa:f2:84:4f:f9:17:86:ac:88:7a:6a:5d:7f:c7:
                    ec:8e:ba:75:b4:6f:19:8f:47:4c:38:fe:ce:d0:b9:
                    6f:69:fd:97:1c:32:d9:26:e8:57:d4:35:ad:69:d0:
                    26:cc:b5:f0:23:2e:4c:5d:15:3a:7d:4d:05:06:2e:
                    a3:98:bb:18:93:24:25:1b:68:c3:f2:9d:52:05:25:
                    0d:83:3b:b7:7c:4f:c7:31:08:65:72:3b:6a:33:a2:
                    80:84:b3:0f:65:bf:55:f7:bd:ba:ee:13:5d:8e:b7:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:01:0E:03:F8:D0:85:05:4D:1A:D5:49:49:0F:F6:B6:25:CE:7E:11
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.98.0/24
                  107.172.36.0/24
                  198.23.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:10:61:4d:9e:ad:a1:71:3f:5f:90:97:de:f1:46:c7:13:8b:
         5f:09:3e:09:80:a1:0a:5f:df:4c:af:00:6d:f4:a8:e1:c6:7e:
         01:a6:0b:7b:bd:ee:8d:76:36:4b:65:f7:0c:19:ff:bb:61:5a:
         70:04:fb:b8:57:59:70:b8:d1:f1:1b:5d:54:20:b6:32:70:64:
         86:fe:54:66:4c:d1:31:32:ee:fe:09:7a:d1:20:7e:6f:39:93:
         1d:fb:f0:8c:2e:38:ff:e2:c1:48:92:1a:95:94:72:57:fc:c0:
         bb:ea:39:d9:ba:13:a5:5f:32:97:70:bf:d8:d4:ec:a8:0c:15:
         8a:5e:e0:d4:1d:65:82:20:d9:a4:a6:a6:df:97:c0:c5:3b:19:
         95:44:64:b8:5f:52:89:0f:33:58:f7:39:f4:92:08:f5:e1:c6:
         28:5f:5e:bf:b6:ed:75:f0:be:14:25:dc:5e:95:fc:03:71:ac:
         36:c1:ed:cb:66:9a:d9:f0:df:3d:a0:1b:50:87:1b:63:36:b6:
         65:f6:05:1a:7a:42:5a:85:73:86:bf:c5:e7:5c:2e:cd:3f:aa:
         2e:8e:aa:ea:13:f9:37:ea:49:48:8e:36:9a:c2:f7:2a:19:2e:
         1a:15:ac:1f:57:2b:ed:5d:c3:1b:e1:5a:c3:00:bc:25:78:28:
         4a:77:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org