Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54004.roa
File:                     AS54004.roa (raw, json)
Hash identifier:          V7++DwZLI8Rwd4Zf2zJfCIkFv+FWEJ7zFDx0TtsVRwk=
Subject key identifier:   D5:D4:1A:CD:4B:60:93:7D:A5:26:D9:9E:D5:98:25:AF:1F:E8:69:FA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6CA3408876E53903479A3652C3AD8041E4A905BD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54004.roa
Signing time:             Tue 07 May 2024 14:48:34 +0000
ROA not before:           Tue 07 May 2024 14:43:34 +0000
ROA not after:            Tue 06 May 2025 14:48:34 +0000
asID:                     54004
IP address blocks:        209.200.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a3:40:88:76:e5:39:03:47:9a:36:52:c3:ad:80:41:e4:a9:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  7 14:43:34 2024 GMT
            Not After : May  6 14:48:34 2025 GMT
        Subject: CN=D5D41ACD4B60937DA526D99ED59825AF1FE869FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:2e:f0:9b:05:83:73:6e:64:20:b1:c8:43:
                    41:6b:98:9d:de:78:f3:7a:19:71:55:3f:e0:58:0b:
                    34:41:eb:39:49:a8:df:4e:43:51:62:3f:87:a1:41:
                    e6:d0:42:61:9e:8e:2a:2c:f8:56:00:37:fe:56:f3:
                    a2:27:45:88:fb:4c:9a:57:b2:cc:45:9b:6f:7a:8c:
                    c1:14:87:c3:aa:74:61:1d:26:09:72:40:2d:7c:5d:
                    64:81:9b:0d:89:b2:78:e4:6c:f1:7e:6c:2f:ec:4c:
                    61:57:98:7f:8f:0f:44:38:1d:f4:96:9a:0b:17:7c:
                    29:a3:d9:32:a4:2d:a7:c5:ad:13:ca:8d:45:29:7e:
                    17:13:41:42:df:ce:2c:83:e0:83:0c:1b:81:a7:2a:
                    40:03:14:5c:51:ff:31:02:a5:f7:84:97:ba:32:f8:
                    0c:43:2b:7b:8c:db:2e:54:98:32:80:50:6f:36:8a:
                    c9:1d:82:6d:17:bf:7e:9e:72:74:ee:80:c7:a3:57:
                    26:83:f8:2b:8e:2f:a4:52:2c:4d:22:67:77:b5:79:
                    df:08:43:37:59:61:87:31:0d:d3:75:18:d2:24:76:
                    31:0b:82:5c:97:2b:c6:15:66:7f:9a:57:f1:91:71:
                    3c:8c:40:50:fe:5b:b3:1a:36:50:c1:3e:fb:43:05:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:1A:CD:4B:60:93:7D:A5:26:D9:9E:D5:98:25:AF:1F:E8:69:FA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54004.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:76:e7:88:d2:63:5e:ca:35:c4:fe:99:fe:ee:cb:1e:c3:30:
         78:2c:b6:a4:48:02:7b:69:d3:5f:4f:c6:48:bb:f5:6c:84:9e:
         96:2a:9d:dd:f7:d6:e8:7c:fa:21:18:16:9b:17:d7:39:d9:e4:
         52:15:9d:d9:06:07:1c:e0:e5:dd:ed:88:d4:1f:78:25:13:dd:
         db:2c:70:df:fe:4b:c4:ca:e5:fe:21:8e:b0:6b:e5:6f:3b:5f:
         03:ab:15:9f:f3:12:14:6a:34:cc:51:c4:d9:82:97:66:b7:a5:
         7b:74:81:3f:e5:48:42:65:ce:c9:75:d7:c6:e9:0b:f5:ef:4d:
         93:b4:28:e7:7c:a4:4e:22:1d:67:63:12:11:fa:83:3d:ac:d4:
         01:90:07:b6:29:cb:b2:c9:84:31:ed:9d:32:ff:6e:b9:35:53:
         37:1d:ea:c3:81:95:62:c9:6c:e5:64:9d:95:ce:a3:31:0a:cb:
         18:c1:41:13:fc:9e:a8:91:7c:2c:f3:c7:b4:87:fd:35:61:5e:
         0d:a8:c3:90:2e:ff:71:b1:cf:96:7d:d5:b5:a0:85:7e:23:55:
         f5:40:e9:a1:fb:71:18:03:99:24:23:ed:c4:42:fa:79:f8:24:
         64:56:86:a8:de:46:b4:26:e6:ed:28:4d:07:13:87:05:03:58:
         4c:da:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org