Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51847.roa
File:                     AS51847.roa (raw, json)
Hash identifier:          zl8QfrjjGiRaGTknKb2Jq0+tYcwmeAJBJjd2CKs91R8=
Subject key identifier:   89:63:7C:B9:73:26:A5:1D:56:39:DF:A3:06:7E:A5:51:8B:2E:12:55
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       651A2798FCF4C850F0EBCC60A3C956FE40553DEF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51847.roa
Signing time:             Sat 21 Sep 2024 02:34:13 +0000
ROA not before:           Sat 21 Sep 2024 02:29:13 +0000
ROA not after:            Sat 20 Sep 2025 02:34:13 +0000
asID:                     51847
IP address blocks:        23.94.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1a:27:98:fc:f4:c8:50:f0:eb:cc:60:a3:c9:56:fe:40:55:3d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 21 02:29:13 2024 GMT
            Not After : Sep 20 02:34:13 2025 GMT
        Subject: CN=89637CB97326A51D5639DFA3067EA5518B2E1255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:ac:09:75:44:33:8f:c8:b9:e2:5e:72:35:
                    f9:ff:14:b7:71:24:49:a1:f5:cb:b7:14:62:3e:d0:
                    49:58:01:75:59:d1:44:bf:ad:e7:9b:ab:8c:d8:d6:
                    69:a5:3a:b1:34:8a:1b:3b:fa:11:00:47:b9:38:e2:
                    80:83:dd:5a:b5:bf:25:ab:53:49:e6:40:d8:76:b1:
                    e8:ec:99:d2:16:d8:df:f8:b4:1d:67:78:9b:bc:05:
                    1b:e3:a8:c2:82:f0:8f:19:0d:d1:b3:0c:01:f8:20:
                    c9:93:52:b4:de:1b:14:88:00:2f:25:0b:b5:dc:0c:
                    03:ab:ad:f5:84:d2:f1:af:d8:ba:76:ce:c9:ce:16:
                    c0:36:b5:c0:21:c6:a5:19:8a:87:6e:32:be:45:82:
                    32:c5:e6:de:c7:56:93:d1:d2:87:00:64:98:6f:75:
                    d2:e5:f4:8f:79:66:67:0f:09:23:68:8b:ba:ba:ee:
                    80:7c:27:4b:dd:3c:cc:e7:c0:e3:68:8b:71:30:c3:
                    78:d1:40:c1:8a:57:b3:51:8b:fc:24:5f:29:68:f3:
                    05:24:5e:3b:b9:a2:38:2a:68:88:bd:55:fd:f6:8a:
                    fc:1c:62:09:91:ec:77:1c:21:a8:34:37:2f:a0:89:
                    d9:31:aa:86:e7:dc:c6:40:56:24:e5:38:e8:04:2c:
                    23:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:7C:B9:73:26:A5:1D:56:39:DF:A3:06:7E:A5:51:8B:2E:12:55
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e7:ab:07:b6:ff:45:f9:8c:9b:ff:ee:44:b8:f9:f4:10:dc:
         a4:84:5d:ce:b7:0a:fc:17:8c:e0:b8:3e:55:ee:26:35:1b:49:
         a1:99:f7:b6:e3:d1:a6:e8:19:f0:4d:51:f6:b9:d5:56:43:2a:
         f9:d0:32:68:4e:be:9a:74:6b:53:6c:af:a1:52:21:b9:f9:69:
         3e:82:56:a9:8c:25:05:a7:de:99:c3:f6:cb:fd:f3:29:54:7b:
         fa:09:c9:8c:54:29:11:11:6f:f3:e6:c8:e4:53:f8:38:22:47:
         c8:c7:80:5c:36:65:43:82:49:96:11:67:38:89:0d:de:a3:03:
         d7:44:28:38:f3:6e:bc:40:0e:53:ff:b9:09:fb:80:79:0b:dd:
         f6:67:87:9f:a8:e5:25:4f:22:94:f8:ab:1b:fa:94:8a:d1:ef:
         3c:b5:bb:e4:fd:7c:53:0b:a0:75:3b:c6:f9:fb:64:ee:08:fe:
         e7:6b:d6:13:a6:f4:f6:4b:04:75:40:a9:55:a5:fc:25:39:91:
         80:d5:7a:bf:de:3c:7e:4d:1b:60:f2:17:9a:56:89:e3:87:15:
         7e:99:30:89:34:16:31:13:f1:65:45:f8:32:d4:1a:39:ed:96:
         2e:e2:c6:36:40:10:73:90:08:59:aa:b9:e3:ac:8c:46:ea:f0:
         e5:e9:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:39 2024 by rpki-client on console-fra.rpki-client.org