Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          +JvxqEmNmaw3MEZGJSjZvc0bUrwrEfnIpzRMOcfbMzQ=
Subject key identifier:   C5:AE:5A:13:91:F6:85:1F:59:94:C8:5E:0A:31:94:73:70:64:EF:B9
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       74695F7A211DEF4495B5B0B8DA44B0CD12236464
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262287.roa
Signing time:             Tue 25 Jun 2024 01:56:59 +0000
ROA not before:           Tue 25 Jun 2024 01:51:59 +0000
ROA not after:            Tue 24 Jun 2025 01:56:59 +0000
asID:                     262287
IP address blocks:        23.94.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:69:5f:7a:21:1d:ef:44:95:b5:b0:b8:da:44:b0:cd:12:23:64:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 25 01:51:59 2024 GMT
            Not After : Jun 24 01:56:59 2025 GMT
        Subject: CN=C5AE5A1391F6851F5994C85E0A3194737064EFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:29:e7:f4:3e:05:19:3d:4f:0a:3b:1e:a2:
                    0b:7d:ad:98:67:63:d8:6d:80:e1:aa:4e:7f:35:83:
                    27:af:a0:e7:8a:1b:99:e2:95:77:5e:22:76:4d:25:
                    91:46:1a:8b:17:e6:15:6a:b9:6b:04:12:e7:85:79:
                    bc:a6:e5:b9:9e:49:96:b4:4f:86:2c:ad:bd:f4:ae:
                    f4:a6:80:ec:e1:48:22:7c:0e:72:4d:f9:f7:f4:f8:
                    47:09:89:8a:10:be:90:39:a0:d4:37:3b:28:d3:3e:
                    85:f7:28:0a:7a:6f:50:18:0d:aa:79:06:22:2a:7b:
                    b6:6e:61:58:62:a4:f0:e0:a0:ec:6b:69:bf:fd:2f:
                    b6:bf:95:70:8f:07:6b:6f:1f:23:a6:76:d4:ab:6f:
                    8f:b3:e2:29:18:24:18:18:c9:07:cd:e8:a6:86:7b:
                    a3:6d:04:5b:32:a9:23:bd:4f:59:f4:d3:7c:b1:35:
                    9b:2b:9b:ca:76:04:18:20:b0:52:c3:15:0f:00:eb:
                    ea:8d:4b:ae:86:29:1d:ba:30:b8:1e:c3:a3:b4:ff:
                    f9:e3:f1:9d:0a:41:7e:0e:2a:d0:54:55:d3:fd:96:
                    b1:c4:d0:f3:78:f8:63:28:3a:c5:c8:0f:30:be:8c:
                    aa:98:3a:c1:8e:94:96:1b:1b:ad:06:df:28:4a:fd:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AE:5A:13:91:F6:85:1F:59:94:C8:5E:0A:31:94:73:70:64:EF:B9
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:ca:36:1c:16:0e:fe:54:a6:2b:86:62:6c:1c:80:f4:07:
         f1:e2:1d:fa:a3:15:af:29:9c:70:50:6a:5f:87:74:1e:1c:22:
         d8:fa:fe:dd:b9:6c:e4:66:2f:95:ba:0d:e3:66:82:fb:33:11:
         f2:9c:48:c5:95:b2:16:11:de:af:ad:70:7c:c3:e2:df:ae:63:
         70:de:60:da:3b:48:76:ec:1d:dd:71:37:30:33:f8:f7:14:4a:
         27:77:59:2d:a1:49:48:e4:25:6c:12:4c:31:76:6e:00:f6:25:
         d8:5e:89:2b:fc:d8:5c:96:c8:48:f7:6a:4d:6a:42:0b:92:d0:
         9a:40:2c:e6:05:74:dc:d4:83:83:02:b2:51:8d:d4:16:45:09:
         18:26:27:ac:b1:5b:f7:a4:6a:e4:52:e4:57:c9:07:bf:eb:c4:
         cd:8c:a9:e5:1c:6f:6a:fb:79:83:90:c3:ce:b1:2b:a4:43:a7:
         5b:3b:e9:86:64:7d:12:b3:bc:a7:04:df:d4:00:d9:4e:d6:78:
         ee:82:b5:25:8f:80:59:fb:67:01:ca:de:f3:c3:4d:04:ca:d9:
         a5:03:d5:b6:14:c7:9b:dc:27:4b:95:07:f3:d6:0f:41:ea:22:
         7d:80:37:d2:8d:9f:d9:36:bd:31:06:d5:4b:50:d6:ae:1c:78:
         7b:a0:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org