Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa
File:                     AS215287.roa (raw, json)
Hash identifier:          mre0FiRvOfX2jw2vh5MwIhJj9Y2iYE+KhD0Mbx5gwxs=
Subject key identifier:   F6:E2:08:DE:79:11:23:65:34:45:B1:02:97:5A:3E:A3:04:22:6F:5F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       70D87646277E5B900374BA5CC8AD97DAE5C0DCF0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa
Signing time:             Thu 20 Jun 2024 13:41:49 +0000
ROA not before:           Thu 20 Jun 2024 13:36:49 +0000
ROA not after:            Thu 19 Jun 2025 13:41:49 +0000
asID:                     215287
IP address blocks:        23.95.45.0/24 maxlen: 24
                          23.95.98.0/24 maxlen: 24
                          172.245.243.0/24 maxlen: 24
                          198.12.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Jun 2024 18:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d8:76:46:27:7e:5b:90:03:74:ba:5c:c8:ad:97:da:e5:c0:dc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 20 13:36:49 2024 GMT
            Not After : Jun 19 13:41:49 2025 GMT
        Subject: CN=F6E208DE791123653445B102975A3EA304226F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:40:65:42:ec:97:96:52:98:0a:c4:33:39:
                    6e:0a:6c:dc:c4:97:ae:55:5a:e1:d1:72:9b:66:1e:
                    04:63:af:ac:d7:7b:05:4f:c2:9d:c7:5e:34:b6:80:
                    f4:4c:af:8f:71:2f:8c:0a:dd:0e:9d:3d:9c:ba:ea:
                    f6:d3:ac:50:b7:c2:39:b0:2e:0d:11:14:70:38:22:
                    03:26:ab:b2:a9:d2:fa:3d:9c:e4:ba:2e:65:81:98:
                    ea:10:ff:11:91:90:4e:4c:5d:d0:c1:63:1e:8e:29:
                    d4:bd:6e:10:94:98:3d:4f:81:9e:dd:28:c0:37:5f:
                    71:47:76:20:14:6e:eb:e4:cd:a3:bd:b2:b4:a4:08:
                    f7:98:9e:4e:5b:83:c9:ad:56:6c:28:17:af:7e:78:
                    13:cf:27:4e:f8:3a:9f:12:d6:06:16:ee:a3:91:d9:
                    78:7e:53:c1:37:c5:b4:a4:ed:02:63:4c:af:99:ee:
                    09:64:ea:31:1c:0b:51:15:b5:d0:86:70:f5:e9:d7:
                    17:e6:ee:32:45:7f:ec:a6:f5:d7:84:0e:57:36:de:
                    f4:4e:4c:12:00:1b:74:da:59:42:28:29:a5:8e:cb:
                    ff:ab:66:56:21:a4:cd:54:56:d0:82:72:ae:3e:94:
                    5d:b1:e0:fb:b3:6e:93:da:4f:5e:b2:84:60:54:6a:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:08:DE:79:11:23:65:34:45:B1:02:97:5A:3E:A3:04:22:6F:5F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.45.0/24
                  23.95.98.0/24
                  172.245.243.0/24
                  198.12.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:c1:63:d0:58:11:9a:65:ba:95:82:12:f7:16:bb:6c:44:
         9a:92:c4:a7:6f:0a:38:80:12:93:6c:d5:28:48:e0:b4:af:d2:
         08:4e:31:a3:21:1a:00:e9:7d:94:be:28:1b:ab:00:02:a4:db:
         bc:f2:bc:ff:10:6f:48:d5:a7:3d:5e:e3:ce:46:b1:2b:a4:81:
         ca:7f:70:75:23:37:f4:fb:3f:80:37:e8:0f:7d:13:64:56:84:
         f5:c4:14:4e:76:a5:8c:35:1e:81:cc:a9:92:a1:45:ce:a0:ef:
         b8:d4:c2:57:cd:2f:2f:65:7e:d3:9c:69:03:6a:ad:96:a9:f3:
         13:be:0f:1f:9a:c5:b7:0d:8f:ba:b6:3a:5b:d5:bb:cf:c7:28:
         05:d6:31:27:91:ff:48:37:37:fc:66:e0:54:d5:6c:fd:a8:99:
         ee:2d:d3:c9:fc:00:b4:f5:ab:85:0b:3e:79:b3:29:84:0d:1a:
         95:48:07:b1:a5:24:65:19:2d:8d:02:18:4e:98:23:b0:39:5d:
         85:d6:ab:ed:7d:18:89:10:01:fc:48:12:a1:3c:94:a8:73:69:
         39:f4:35:cd:e1:71:3e:50:29:61:4b:46:a6:c7:d2:1b:c4:8a:
         3e:48:66:c9:bc:09:ae:1a:01:90:10:97:69:09:e9:f2:0f:f0:
         fe:75:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:56 2024 by rpki-client on console-ams.rpki-client.org