Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400304.roa
File:                     AS400304.roa (raw, json)
Hash identifier:          RCB1qDw0rMMzqCI4zR2gFq7W/cum+ruc/v3uYKtV1yM=
Subject key identifier:   3B:6A:F0:FA:24:88:E5:2F:B2:45:90:02:8C:D8:DA:06:91:05:AC:BB
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4A544DA12D70CA98B3713FA94BBD54F72A4EC8E2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400304.roa
Signing time:             Wed 04 Sep 2024 14:58:33 +0000
ROA not before:           Wed 04 Sep 2024 14:53:33 +0000
ROA not after:            Wed 03 Sep 2025 14:58:33 +0000
asID:                     400304
IP address blocks:        23.95.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:54:4d:a1:2d:70:ca:98:b3:71:3f:a9:4b:bd:54:f7:2a:4e:c8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  4 14:53:33 2024 GMT
            Not After : Sep  3 14:58:33 2025 GMT
        Subject: CN=3B6AF0FA2488E52FB24590028CD8DA069105ACBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:95:1e:95:bd:fd:04:c2:d2:c2:b7:17:48:
                    74:b4:31:77:a4:4a:c9:77:64:12:af:d2:cc:d8:41:
                    6c:0e:24:24:c6:4f:d7:f0:26:59:0e:06:ee:10:c7:
                    31:89:e4:c4:25:81:fe:96:dc:ac:65:ed:78:65:f8:
                    e3:63:68:67:55:87:3f:e2:7a:a8:1b:f4:de:79:15:
                    af:39:d2:1e:0c:59:9e:3f:84:4c:c9:b7:c1:df:4f:
                    1c:c0:c6:b6:52:cf:ec:d7:02:40:b5:a0:5d:d2:3a:
                    82:3a:2a:9d:22:66:ea:bd:ff:41:27:eb:5f:fa:60:
                    3b:5c:b6:53:4a:27:cf:db:52:6f:f8:a4:5a:5a:07:
                    58:fe:fd:cd:68:eb:4b:2b:58:3c:b4:59:1b:2e:b0:
                    13:79:7a:04:68:4a:41:c2:62:c1:db:aa:23:ff:95:
                    e0:f9:f5:b3:ab:5f:9e:91:ca:fd:6b:79:ba:0e:eb:
                    97:eb:a5:37:8d:dc:1b:b4:1b:da:fc:bf:d2:a2:2e:
                    70:29:3a:6c:27:5d:db:53:8f:72:36:b6:ea:4e:6c:
                    88:ea:a6:fe:6a:b0:64:6a:87:4c:a3:71:a6:5b:5a:
                    5f:68:20:83:ca:56:e1:1c:c5:14:93:7b:31:77:68:
                    b6:ae:40:aa:bc:35:b5:18:79:7a:b3:bf:96:2f:44:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6A:F0:FA:24:88:E5:2F:B2:45:90:02:8C:D8:DA:06:91:05:AC:BB
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:c7:db:a0:55:c8:46:f1:ec:d7:a1:bd:6a:eb:a8:4e:6a:
         a0:1a:14:18:14:8d:88:ed:a8:28:66:44:c2:3f:63:58:52:1e:
         46:98:b8:e8:2b:6d:0c:84:5c:d0:ff:2b:20:59:8f:5e:d7:2f:
         e6:fa:0f:ab:3d:e1:51:24:ab:9e:0a:0d:a4:ce:53:cf:00:9f:
         7a:1b:79:19:57:9b:9e:97:37:0b:1f:52:91:73:95:a1:67:b8:
         fd:a2:cc:4f:dc:55:f7:fe:69:28:24:00:2f:79:44:6d:40:04:
         59:d8:77:e0:f4:d2:1a:e9:3d:0f:b6:42:3d:00:f4:e9:ca:d1:
         8c:4a:ec:1d:44:25:26:be:51:ec:ed:8b:f3:47:74:a7:b4:eb:
         16:c7:50:5d:6b:47:5c:aa:6a:cc:7c:b7:26:c0:03:e5:3b:14:
         33:0f:e3:f9:2e:0e:a2:4d:4d:91:cd:43:d1:99:e3:98:97:6f:
         47:2d:c2:a5:79:61:d2:e1:fb:03:a9:cb:3c:3d:38:0f:5d:db:
         5a:ed:20:21:36:1f:00:86:df:f7:7a:af:1a:21:34:68:c9:ff:
         16:a0:f9:e5:63:b3:18:fd:b1:04:7a:89:4f:03:fd:1c:5e:ea:
         18:26:1e:8f:4f:ef:c2:85:ff:e0:b4:8f:74:dc:cc:fd:8f:59:
         47:af:9f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org