Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          6jObVUjPbKXA7flrX9+09Utks35JDIt1TJM0J/5MIFQ=
Subject key identifier:   FA:CA:95:A1:63:93:03:58:35:02:92:01:49:34:CB:66:E0:B9:4D:E8
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2C55C643AADBB95DA329E91DB066E9CF6F61B128
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20454.roa
Signing time:             Fri 25 Oct 2024 06:49:02 +0000
ROA not before:           Fri 25 Oct 2024 06:44:02 +0000
ROA not after:            Fri 24 Oct 2025 06:49:02 +0000
asID:                     20454
IP address blocks:        64.50.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:55:c6:43:aa:db:b9:5d:a3:29:e9:1d:b0:66:e9:cf:6f:61:b1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 25 06:44:02 2024 GMT
            Not After : Oct 24 06:49:02 2025 GMT
        Subject: CN=FACA95A163930358350292014934CB66E0B94DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:51:05:71:a2:cf:3f:b2:7e:da:cf:90:5f:
                    4c:d8:d4:e8:49:e6:c6:a0:ac:9a:d8:60:0b:5a:03:
                    0f:8f:a5:9c:b3:eb:60:46:93:44:ee:75:98:4e:c6:
                    ee:a3:f3:2e:3e:0a:a4:ec:5e:46:d5:39:cc:33:4b:
                    8e:e7:bd:3e:48:25:ac:81:7d:5d:a9:50:40:18:92:
                    e0:3b:85:a6:56:05:b6:e8:d8:e9:94:6a:38:d9:41:
                    5b:26:44:28:9f:46:bb:a3:24:70:e6:8d:06:16:39:
                    f6:ef:e1:ef:75:d6:e9:4c:f0:db:dc:8f:6c:77:7d:
                    31:3d:d2:00:d8:de:9b:6f:92:bb:21:07:17:9d:69:
                    cf:56:51:e4:00:52:74:57:a6:b9:85:03:1f:75:3d:
                    2f:74:62:1c:80:60:16:da:5d:c0:9c:85:11:69:2c:
                    a7:bc:cb:33:6e:ba:11:06:87:f6:81:ca:84:8d:e2:
                    f7:a2:c7:12:eb:e0:8d:7e:d4:5a:f1:86:92:31:38:
                    7f:94:6b:d8:c2:ed:98:23:52:72:c9:60:14:09:b7:
                    32:69:2b:bd:81:2d:ee:51:cf:eb:a5:eb:b2:c4:2a:
                    f3:1d:60:cf:12:72:a1:95:5f:b4:42:2f:ce:27:c9:
                    34:5b:81:17:3b:c6:12:6a:90:a9:91:99:b8:19:35:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CA:95:A1:63:93:03:58:35:02:92:01:49:34:CB:66:E0:B9:4D:E8
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:46:bf:cd:a1:d6:91:f5:3f:d3:75:4a:e1:dd:b7:b5:7d:
         b0:c9:17:88:90:27:a5:01:41:dc:3d:ce:d1:78:40:3f:7c:36:
         37:29:3d:26:65:bc:52:a1:f4:07:34:31:9d:14:72:80:2d:a7:
         37:19:0c:93:e4:dc:3c:41:93:b8:3c:4e:7f:5d:1b:67:e7:22:
         2b:91:d6:b2:90:44:11:41:6c:cc:fd:15:ae:5c:a4:70:9c:8f:
         b4:40:b6:72:e6:95:a5:ea:8f:8a:ba:ae:79:4e:d3:a5:22:12:
         45:15:35:d9:af:0a:6a:ef:3e:20:7d:e1:88:6c:46:a7:3d:6e:
         e7:35:4e:2e:ba:cd:17:e7:e9:ad:d3:8b:3a:10:86:84:c7:a1:
         7a:37:37:c1:65:0d:fd:ee:a3:0e:5f:09:a2:42:28:41:b6:92:
         85:d6:c8:c3:df:46:63:8c:9f:bb:e1:b7:18:bc:70:bf:9f:56:
         c7:85:83:48:a9:f5:2b:31:b0:89:65:20:ed:e8:77:83:11:b1:
         df:e1:42:c2:6a:b1:b1:d3:c9:29:19:13:c4:55:6f:c3:d5:da:
         62:e4:a6:ba:a2:c8:fb:4f:c6:cc:ca:f7:3b:ff:2b:62:ae:73:
         7a:18:4d:b2:18:45:d1:69:4a:c3:e5:21:84:3b:c7:20:41:0c:
         ea:71:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org