Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33652.roa
File:                     AS33652.roa (raw, json)
Hash identifier:          s23lmoSfaE2LWSN29Ev32kqG7HQ68uWUpzmIVHS6h8c=
Subject key identifier:   DE:C0:D5:E9:49:5F:A4:B7:F2:7A:0A:6A:90:96:8E:73:0D:C6:F6:8F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7EE4E17ADB6B0F79F0A4343DF7CE22A403F6DFBF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33652.roa
Signing time:             Wed 21 Feb 2024 22:35:22 +0000
ROA not before:           Wed 21 Feb 2024 22:30:22 +0000
ROA not after:            Wed 19 Feb 2025 22:35:22 +0000
asID:                     33652
IP address blocks:        64.50.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e4:e1:7a:db:6b:0f:79:f0:a4:34:3d:f7:ce:22:a4:03:f6:df:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 21 22:30:22 2024 GMT
            Not After : Feb 19 22:35:22 2025 GMT
        Subject: CN=DEC0D5E9495FA4B7F27A0A6A90968E730DC6F68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:30:9e:07:e6:3f:8a:74:cf:bf:ca:71:12:
                    68:4f:74:97:8f:3b:94:9a:2b:b4:be:de:c4:6a:9a:
                    fc:f7:4a:9e:89:bf:ce:7d:8b:fe:9d:e2:ed:77:80:
                    0b:ad:91:9f:14:fc:34:f5:ca:89:68:26:d3:35:4c:
                    46:d2:5a:b0:f0:56:29:8f:f7:ae:92:5d:4d:2a:af:
                    c0:8b:54:36:4d:73:4b:d9:73:d6:18:20:e7:44:38:
                    54:a7:76:43:34:b4:ed:3b:b8:b0:1f:27:4c:b1:ae:
                    25:d0:b9:2c:96:77:0e:ca:35:da:35:18:b3:24:fd:
                    63:58:77:e8:47:69:3a:2d:77:a5:93:fd:70:24:eb:
                    8b:86:2f:d4:e3:47:ce:42:80:20:b5:6f:35:85:b6:
                    86:9e:91:fb:98:c1:1d:08:10:2a:1b:3b:c0:fe:e6:
                    e2:c6:e6:65:e6:6d:e0:7d:b6:93:47:28:b1:1d:ba:
                    bd:61:11:03:86:f3:9d:a7:05:58:7a:39:46:05:ac:
                    50:72:dc:87:53:1b:f4:ae:8d:05:67:65:a7:50:7a:
                    b4:5a:9e:ec:76:49:ea:a1:b8:9e:0b:cb:b1:99:ce:
                    8e:40:a7:95:6f:3f:b1:6d:4f:9f:89:36:09:dc:31:
                    62:6b:6d:d0:d9:03:36:3c:f3:49:50:e7:aa:49:1a:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C0:D5:E9:49:5F:A4:B7:F2:7A:0A:6A:90:96:8E:73:0D:C6:F6:8F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33652.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:54:90:a7:94:84:59:91:87:35:2c:e6:d2:1e:b3:5d:56:8d:
         42:88:fa:a2:6c:04:07:d3:8a:88:01:5d:95:14:70:6e:37:cb:
         c5:f3:d5:88:2e:5c:81:4c:66:7b:cb:9b:d3:2e:ff:d8:a2:d4:
         66:5d:72:28:a0:1b:96:dc:87:ac:f2:e2:a1:4b:3b:85:ec:de:
         c8:ad:05:ae:c7:65:1e:b8:7d:35:ef:61:fc:57:21:5a:33:3e:
         e1:d4:c8:70:52:a7:b1:2a:23:2d:82:57:2a:f3:bb:d0:68:5c:
         2c:69:4a:eb:c0:a3:68:17:12:b4:ec:06:e9:14:b3:43:1b:e6:
         dc:3a:3b:bd:4a:5e:92:b9:4d:ba:9c:0b:73:4c:7f:d0:4d:50:
         36:7a:0e:6b:86:2b:78:ec:10:eb:8e:f0:b0:8c:02:3a:99:4f:
         70:26:1d:c2:c8:cf:7e:4c:73:1c:5c:91:d6:67:98:ed:4d:eb:
         ee:2c:86:2c:c1:c2:43:6d:6a:73:9c:39:4d:ac:b4:1b:f6:e8:
         8b:4e:d0:66:2a:53:7b:f8:b3:7e:55:c7:61:1d:55:0a:b7:b7:
         20:28:47:13:5d:0a:c7:a7:6c:1f:ce:16:2f:59:75:2c:7f:54:
         e1:ba:16:3c:cd:f9:d9:e4:c2:61:0b:a3:9d:d5:dc:5a:52:28:
         8a:97:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:02:41 2024 by rpki-client on console-fra.rpki-client.org