Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
File:                     AS215672.roa (raw, json)
Hash identifier:          KhOzWNQWL0dGWeY25S451ggIVdq7KcOl4MN0G166M4g=
Subject key identifier:   ED:39:89:AF:67:33:6D:EF:77:81:AA:29:ED:55:53:10:0E:20:3B:CC
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       717E0BCB71072657E5547FAB05F8D38D21E604ED
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
Signing time:             Mon 17 Jun 2024 03:47:48 +0000
ROA not before:           Mon 17 Jun 2024 03:42:48 +0000
ROA not after:            Mon 16 Jun 2025 03:47:48 +0000
asID:                     215672
IP address blocks:        23.94.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7e:0b:cb:71:07:26:57:e5:54:7f:ab:05:f8:d3:8d:21:e6:04:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 17 03:42:48 2024 GMT
            Not After : Jun 16 03:47:48 2025 GMT
        Subject: CN=ED3989AF67336DEF7781AA29ED5553100E203BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:57:a9:84:e0:68:60:e3:82:b1:a3:43:7f:fe:
                    9f:99:8d:49:d0:17:cc:66:d9:05:be:18:b4:45:2f:
                    0c:eb:16:6b:3c:cd:81:2e:2c:13:a2:ea:66:22:0f:
                    8c:56:28:fb:98:e2:c3:fe:56:5e:89:22:a1:9d:b1:
                    6b:3b:6a:ad:3d:52:7e:0b:e3:03:57:04:0a:3f:46:
                    88:e6:ab:6a:d1:b2:cc:e1:28:8b:01:c6:1e:eb:b6:
                    0a:8e:b4:7c:1f:49:28:05:14:33:da:c1:ca:b1:6a:
                    8c:18:e3:fd:29:bc:f4:1f:d3:eb:09:e2:0b:a5:ca:
                    8c:96:e5:8a:a5:de:27:43:3e:b9:e6:1c:33:75:af:
                    02:d7:51:65:25:82:e5:f0:99:6e:52:5c:23:63:31:
                    b1:23:6e:c5:36:9f:21:a2:63:e8:4e:8a:07:b0:cd:
                    50:c6:55:ca:2e:72:ae:72:42:4d:4b:a8:c0:1f:43:
                    e6:2c:22:36:1b:37:4d:24:d9:dc:fe:50:a8:51:26:
                    93:fe:b4:54:6e:06:a9:cb:a2:69:ae:7d:4f:67:be:
                    ae:09:37:9c:ac:f7:1f:ec:04:4c:f6:71:e9:02:05:
                    ec:4d:b3:bb:41:ee:ca:0c:4a:53:3c:fa:94:b1:24:
                    08:92:12:21:6b:d2:4e:78:01:eb:76:56:34:89:a6:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:39:89:AF:67:33:6D:EF:77:81:AA:29:ED:55:53:10:0E:20:3B:CC
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:3c:eb:8c:c6:57:b5:76:18:ba:2e:2c:b6:9b:b4:7e:b0:
         57:4d:0c:8a:ef:0d:b5:57:6e:a8:7c:6c:ca:c7:dd:92:37:be:
         b6:34:13:02:91:2c:29:7a:46:40:fb:3c:e6:5b:e6:0a:01:82:
         16:99:74:eb:e5:fe:f0:58:98:10:b3:27:9c:b0:f3:bd:39:9e:
         ba:fb:02:b5:bc:ff:85:13:ec:a2:f0:f3:67:a2:0b:9c:bf:51:
         b1:bb:59:24:15:bf:de:ab:31:61:6b:ae:2c:68:cc:be:3a:c5:
         17:66:b2:fe:08:3d:ea:12:cd:4f:9a:a5:d1:26:c7:76:a6:83:
         59:a9:12:0b:25:7b:6f:84:90:9e:bf:54:a9:57:27:5b:15:58:
         87:66:c6:21:00:85:e2:af:6c:a2:27:95:da:38:5b:a1:5b:a5:
         ce:df:63:94:44:2c:5f:78:95:96:96:f3:c2:33:db:7d:b8:e5:
         3e:6b:96:38:a9:be:f3:12:c2:01:39:81:4f:e5:63:d3:1c:4b:
         e4:73:d3:e4:8c:b9:73:7b:ff:65:e2:6e:60:47:01:26:8f:52:
         8c:8a:33:ce:1f:95:57:64:e5:da:5f:b9:0d:dd:69:51:95:07:
         97:39:d3:d9:00:31:32:3a:66:36:48:e5:9d:df:cf:49:55:e2:
         52:e8:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:44 2025 by rpki-client