Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa
File:                     AS399861.roa (raw, json)
Hash identifier:          aBB9XTFU0m1Gh+Fs5T6/8bPuWSK3Lw1mFc5tC/IEjOc=
Subject key identifier:   A8:99:87:F3:8B:0D:A1:8F:E5:4E:55:25:F7:B6:6E:73:ED:29:11:07
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5991EAE6722DE0B07B955FB7A09D8AAE129F8D49
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa
Signing time:             Sun 20 Oct 2024 03:49:03 +0000
ROA not before:           Sun 20 Oct 2024 03:44:03 +0000
ROA not after:            Sun 19 Oct 2025 03:49:03 +0000
asID:                     399861
IP address blocks:        23.95.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:91:ea:e6:72:2d:e0:b0:7b:95:5f:b7:a0:9d:8a:ae:12:9f:8d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 20 03:44:03 2024 GMT
            Not After : Oct 19 03:49:03 2025 GMT
        Subject: CN=A89987F38B0DA18FE54E5525F7B66E73ED291107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:8a:f2:e2:6e:cd:be:fd:28:ef:54:56:e1:
                    58:af:ca:4f:3a:68:98:27:a3:90:38:6d:c1:df:8f:
                    5a:00:53:d5:a6:95:df:33:bb:c0:60:62:08:12:17:
                    a3:5c:58:52:c7:67:c3:c8:c1:3f:c5:cd:74:79:18:
                    a1:19:f1:4c:44:4c:16:54:0b:1c:49:89:bc:37:e9:
                    8d:aa:72:5c:8c:14:05:e9:a8:73:8b:b3:61:01:29:
                    83:61:b2:ea:8c:fe:95:b1:12:4e:50:c5:f0:cb:65:
                    6a:89:5e:eb:52:cd:43:be:9e:de:28:48:cf:02:46:
                    be:44:34:bd:2c:8d:0a:dd:36:a1:e3:de:c3:80:52:
                    12:65:c4:c0:55:fd:aa:13:12:df:d6:f3:d5:ec:b3:
                    16:62:5c:38:e0:80:88:dc:53:3a:5f:da:90:07:bd:
                    7f:a4:0f:55:dc:a7:39:47:86:93:40:3b:0f:03:61:
                    25:a3:b8:69:03:1f:40:f5:a3:7e:2b:f1:2b:1b:ba:
                    16:93:3e:ea:d1:de:4d:ac:69:5c:32:87:aa:01:d1:
                    e5:46:fa:4d:b7:d4:98:ec:14:5b:6a:bd:96:0d:c4:
                    00:7b:41:c9:6f:0c:30:3a:ba:c0:37:6d:eb:0e:5a:
                    84:5e:35:3b:d6:df:85:c7:16:5b:db:dd:cc:5c:c4:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:87:F3:8B:0D:A1:8F:E5:4E:55:25:F7:B6:6E:73:ED:29:11:07
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:af:a4:6e:ca:b3:56:b3:76:c5:28:49:17:6c:ff:d6:07:ab:
         fd:0f:34:9e:96:32:8a:26:65:4e:d2:e7:d9:8d:24:24:ca:c3:
         d7:52:19:07:b6:ce:ff:05:2d:7b:e0:70:bb:09:8e:0c:11:e0:
         6f:ec:a7:39:44:d1:fc:d6:34:67:60:3e:b8:be:1a:67:44:a3:
         04:95:9e:13:a2:bd:ae:67:a3:27:f4:c1:67:0a:ed:9d:17:38:
         17:3c:8d:c6:70:28:8f:6a:58:16:35:8c:11:d8:bc:25:2f:ba:
         31:5a:ee:dc:ee:49:aa:78:5f:7f:ad:30:83:7e:ff:78:41:73:
         6c:ef:aa:e8:8f:84:93:a0:cc:cc:89:50:d3:7b:f6:e6:2c:59:
         0d:50:ce:67:c0:a0:db:83:33:ec:64:fe:43:2e:54:71:3c:b8:
         0e:54:65:f6:f6:5a:bf:4c:55:c8:a8:c3:67:25:93:05:7a:54:
         da:76:ee:06:95:d0:96:1c:ff:db:35:37:e7:94:70:97:cd:14:
         8d:6f:60:d4:8c:3d:89:05:55:8d:14:07:89:70:c4:81:4b:b7:
         c1:ba:5f:f9:13:0a:2f:41:86:21:79:cd:73:e8:b0:05:4a:c1:
         aa:c2:90:5b:b4:00:9c:a3:c7:7f:3b:c7:0f:7d:c1:f2:3c:4c:
         aa:82:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org