Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215460.roa
File:                     AS215460.roa (raw, json)
Hash identifier:          0geZZHMXQaY9cZtCX00CdKGgfWH7tR04JCPQFXbIiW0=
Subject key identifier:   32:E2:2B:D3:8F:80:C5:3E:6F:DE:5F:99:2C:CE:9B:FF:12:E9:C0:B4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       16267EA016070B034DA77372F3CC669D9DB662A1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215460.roa
Signing time:             Thu 27 Jun 2024 06:44:37 +0000
ROA not before:           Thu 27 Jun 2024 06:39:37 +0000
ROA not after:            Thu 26 Jun 2025 06:44:37 +0000
asID:                     215460
IP address blocks:        23.94.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:26:7e:a0:16:07:0b:03:4d:a7:73:72:f3:cc:66:9d:9d:b6:62:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 27 06:39:37 2024 GMT
            Not After : Jun 26 06:44:37 2025 GMT
        Subject: CN=32E22BD38F80C53E6FDE5F992CCE9BFF12E9C0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:a3:5b:b6:19:0b:7a:62:4f:0b:b2:81:5e:
                    8c:df:db:61:66:e3:5d:ce:a7:c4:20:e3:c1:98:31:
                    ea:cb:ee:46:52:53:dc:7e:40:fa:4c:77:25:40:a6:
                    8c:19:07:ab:59:d2:dc:35:8e:45:b4:31:97:af:81:
                    ed:fc:c9:39:92:f9:04:73:87:f4:0f:d9:e9:a0:c9:
                    7c:5f:17:7d:0c:cb:bc:6d:35:79:9e:24:00:55:82:
                    52:38:ed:ea:2e:3c:0a:74:ab:3a:1a:8e:b1:31:65:
                    3e:fc:0d:40:36:a7:c6:82:b5:d8:72:59:6d:95:9d:
                    fd:58:dc:00:09:43:90:12:a4:24:1b:fb:46:86:53:
                    d4:67:f1:e2:6f:1f:03:14:08:76:3d:a0:55:e0:d7:
                    ca:38:ca:9c:68:0c:7b:03:44:60:1e:b6:f4:3e:93:
                    a8:2d:28:80:b5:01:59:61:68:61:f0:d9:6e:da:d0:
                    e9:1a:9e:b8:d8:18:a1:f0:0e:c2:59:fe:52:35:62:
                    2c:75:09:78:ed:4d:62:b7:ac:4e:ff:50:c0:5d:01:
                    d1:41:23:88:4a:70:35:5d:70:4e:70:c6:7a:ca:e5:
                    b2:2d:c4:05:8a:94:d0:e5:4a:73:b9:6f:69:24:ee:
                    ab:b4:c7:37:00:ea:c1:11:ac:02:a8:18:1f:5c:b3:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:2B:D3:8F:80:C5:3E:6F:DE:5F:99:2C:CE:9B:FF:12:E9:C0:B4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215460.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:2e:6d:79:7d:ce:4c:6b:97:28:41:c7:c4:68:21:7f:95:
         00:79:44:a9:45:55:e9:ce:74:c2:47:87:ea:72:16:b4:55:3e:
         f0:37:3e:43:86:60:f5:3b:5a:2f:ff:29:6e:de:88:15:53:66:
         ab:48:2a:96:43:10:54:c8:67:22:25:b2:90:9c:92:a5:19:e3:
         6f:41:ff:55:cc:c8:11:a5:c9:b1:c7:83:c3:92:6c:32:ce:0a:
         6f:c5:8e:5a:dc:0b:fb:4d:a3:4f:d8:db:df:87:9d:51:80:72:
         cf:fa:1d:93:a3:ef:ca:7c:ed:97:e4:39:e0:db:9b:57:4d:eb:
         53:ca:1c:5d:32:3e:4e:f2:a7:a7:39:a2:f2:34:f6:c3:24:75:
         94:28:04:eb:73:5b:86:68:a3:ee:6e:5f:15:56:ea:e8:74:c7:
         47:da:8e:06:d3:55:d0:5c:9f:09:d4:2c:f8:a1:57:03:7e:14:
         c9:cf:86:ea:f0:70:95:49:55:31:c7:de:e0:d3:6b:86:b6:d9:
         05:2c:d1:91:0a:26:90:ae:59:e8:61:1e:70:95:0d:be:32:c3:
         b0:72:1f:d4:32:b4:3e:3a:82:c4:ed:6d:4a:7f:fd:58:b2:f7:
         33:63:8e:64:5b:e7:ea:e9:b7:7a:17:5c:bb:4e:6d:fb:c7:30:
         f0:b4:de:08
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUFiZ+oBYHCwNNp3Ny88xmnZ22YqEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwNjI3MDYzOTM3WhcNMjUwNjI2MDY0NDM3
WjAzMTEwLwYDVQQDEygzMkUyMkJEMzhGODBDNTNFNkZERTVGOTkyQ0NFOUJGRjEy
RTlDMEI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ujW7YZC3pi
TwuygV6M39thZuNdzqfEIOPBmDHqy+5GUlPcfkD6THclQKaMGQerWdLcNY5FtDGX
r4Ht/Mk5kvkEc4f0D9npoMl8Xxd9DMu8bTV5niQAVYJSOO3qLjwKdKs6Go6xMWU+
/A1ANqfGgrXYclltlZ39WNwACUOQEqQkG/tGhlPUZ/Hibx8DFAh2PaBV4NfKOMqc
aAx7A0RgHrb0PpOoLSiAtQFZYWhh8Nlu2tDpGp642Bih8A7CWf5SNWIsdQl47U1i
t6xO/1DAXQHRQSOISnA1XXBOcMZ6yuWyLcQFipTQ5UpzuW9pJO6rtMc3AOrBEawC
qBgfXLNiMwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDLiK9OPgMU+b95fmSzOm/8S
6cC0MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxNTQ2MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdeWDANBgkqhkiG9w0BAQsFAAOC
AQEAhU0ubXl9zkxrlyhBx8RoIX+VAHlEqUVV6c50wkeH6nIWtFU+8Dc+Q4Zg9Tta
L/8pbt6IFVNmq0gqlkMQVMhnIiWykJySpRnjb0H/VczIEaXJsceDw5JsMs4Kb8WO
WtwL+02jT9jb34edUYByz/odk6Pvynztl+Q54NubV03rU8ocXTI+TvKnpzmi8jT2
wyR1lCgE63Nbhmij7m5fFVbq6HTHR9qOBtNV0FyfCdQs+KFXA34Uyc+G6vBwlUlV
Mcfe4NNrhrbZBSzRkQomkK5Z6GEecJUNvjLDsHIf1DK0PjqCxO1tSn/9WLL3M2OO
ZFvn6um3ehdcu05t+8cw8LTeCA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org