Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          MV8C9SGJTUyCFWMvaaHXeuOf6XQ8RgHgv9hKIVAFWwE=
Subject key identifier:   E0:B9:C2:DB:B9:AA:CE:7C:D8:E2:3E:62:A1:33:CA:22:44:05:C6:0E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       373556EBD59A41660B3CDF26B161B669FFB463EF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
Signing time:             Sun 14 Apr 2024 06:21:45 +0000
ROA not before:           Sun 14 Apr 2024 06:16:45 +0000
ROA not after:            Sun 13 Apr 2025 06:21:45 +0000
asID:                     5065
IP address blocks:        192.228.113.0/24 maxlen: 24
                          192.228.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:35:56:eb:d5:9a:41:66:0b:3c:df:26:b1:61:b6:69:ff:b4:63:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 14 06:16:45 2024 GMT
            Not After : Apr 13 06:21:45 2025 GMT
        Subject: CN=E0B9C2DBB9AACE7CD8E23E62A133CA224405C60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:05:12:6f:39:4d:4a:e4:d9:41:9e:3f:ef:
                    bf:af:38:57:aa:3c:94:64:2c:d5:d9:c6:d7:12:af:
                    35:7c:89:c8:d8:31:17:e3:6f:b6:a5:ed:c7:b6:c3:
                    4d:9c:73:81:f1:0b:6c:09:3e:b4:c6:68:c2:b1:67:
                    71:d5:64:c4:de:ef:31:a0:b9:4c:95:47:a1:66:b1:
                    62:58:b9:e8:52:0e:db:a8:17:13:c4:5e:df:bf:b4:
                    ef:13:86:c4:1b:ef:74:1a:f7:cb:23:ce:6a:f0:e5:
                    e4:5c:65:d9:31:70:17:40:30:b9:66:40:91:6c:65:
                    1a:11:bc:e7:f7:59:b3:14:fc:82:7f:13:ce:75:eb:
                    6c:38:ed:41:79:24:e7:97:c4:e2:ac:3f:e6:b1:a0:
                    7c:bc:0c:2a:6b:17:8e:1a:9f:33:91:9b:03:6f:1d:
                    a0:b4:1b:dc:4d:26:1d:10:fd:b5:42:86:a7:e5:c8:
                    4e:78:3a:09:de:e1:34:87:24:18:93:85:b1:d3:63:
                    39:7f:7d:de:2f:51:7d:89:61:81:ed:da:18:ee:06:
                    9a:5c:ec:4f:95:02:52:9b:30:24:14:35:d7:b0:55:
                    39:fa:b3:da:c4:51:c2:76:2e:91:cc:2f:53:1f:51:
                    6d:f6:b5:ff:4b:b0:82:f5:b3:bf:f5:e6:98:fc:6d:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B9:C2:DB:B9:AA:CE:7C:D8:E2:3E:62:A1:33:CA:22:44:05:C6:0E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.113.0/24
                  192.228.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:85:c6:50:ae:2f:5a:b2:05:71:35:a7:88:98:03:eb:b9:66:
         d2:d8:84:c5:04:6e:9d:c8:b7:e7:05:be:42:55:21:a8:44:c2:
         e5:51:e9:58:f4:0f:fd:6a:83:f4:59:46:95:d9:63:37:b5:79:
         3f:7b:6c:2f:85:e6:1e:20:16:7b:8d:d2:7a:09:0c:c8:60:01:
         33:59:ac:bf:90:67:b0:11:c0:6f:3e:58:a0:dc:a5:f0:ba:ed:
         7f:49:bd:ed:e5:42:41:a5:47:9a:ad:f7:12:80:ca:b1:e1:c6:
         2e:ca:72:d3:cb:e0:76:4f:df:55:8b:d6:1a:2d:de:ea:89:0a:
         0f:71:a2:4c:6f:1f:b6:9a:32:6d:13:8b:ba:0a:72:b8:84:f0:
         1c:8d:be:28:da:16:bb:75:14:04:96:88:de:6e:47:1c:72:3a:
         9a:c3:81:59:ce:df:fd:7e:fa:25:c4:ec:cb:53:6f:5f:0e:2f:
         81:9a:49:7c:e3:7b:70:0a:49:57:71:b0:27:42:5e:81:52:e3:
         fe:63:50:c4:7c:20:54:47:17:30:72:94:a8:4e:6d:6b:69:5e:
         9a:d1:41:50:cc:76:4e:a8:93:b6:8a:ae:42:e7:de:8a:d8:b1:
         a5:ed:81:0d:10:7d:8e:ab:a7:29:0e:7f:ba:8f:0f:0f:95:25:
         65:8a:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:35:08 2024 by rpki-client on console-ams.rpki-client.org