Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55286.roa
File:                     AS55286.roa (raw, json)
Hash identifier:          VXNdNMAcZGJH4sXpsQHPcLBFpn03+ZYhDtmu7dQN6cU=
Subject key identifier:   DF:7E:23:E8:3C:9C:05:95:11:C6:C6:79:FE:90:BF:54:C2:F9:AE:69
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2A692E23430BFE2085412AF8530D318A1472FA12
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55286.roa
Signing time:             Fri 08 Mar 2024 13:38:02 +0000
ROA not before:           Fri 08 Mar 2024 13:33:02 +0000
ROA not after:            Fri 07 Mar 2025 13:38:02 +0000
asID:                     55286
IP address blocks:        172.245.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:69:2e:23:43:0b:fe:20:85:41:2a:f8:53:0d:31:8a:14:72:fa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar  8 13:33:02 2024 GMT
            Not After : Mar  7 13:38:02 2025 GMT
        Subject: CN=DF7E23E83C9C059511C6C679FE90BF54C2F9AE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:e7:3c:72:5c:c2:53:e9:c8:5a:2f:c9:78:
                    ff:2e:72:27:ea:48:41:ac:0d:bd:5c:64:ab:14:1e:
                    44:5d:05:67:ee:cf:72:00:19:88:07:01:ca:75:88:
                    11:06:62:61:49:7f:7c:6c:38:aa:62:68:b1:63:67:
                    a3:1f:5b:e8:47:86:99:12:e9:df:da:21:2b:ca:33:
                    3c:f2:84:65:c4:32:53:6d:21:18:2a:27:0d:94:4a:
                    61:2d:df:00:11:5f:1e:76:4f:46:74:bc:c2:4e:cd:
                    df:39:4f:8a:64:69:f1:a0:b7:44:12:56:73:3c:8d:
                    30:0b:ce:dd:e3:57:41:e2:29:64:46:9e:d6:f8:a5:
                    30:70:5e:c1:09:84:58:f4:d6:09:3a:bf:81:7d:73:
                    9d:f8:de:73:57:b5:15:97:d6:00:16:74:d3:f8:2d:
                    e4:61:0e:d4:03:c2:7f:5d:2f:f2:31:b6:f6:66:f3:
                    4d:33:3a:6c:ca:f1:43:62:60:3f:d4:c8:2a:e9:3e:
                    d9:06:55:b6:87:e1:25:2f:a4:5e:7c:bc:64:79:d2:
                    60:07:af:90:bd:b8:a0:ad:11:3c:68:08:15:d5:f4:
                    7f:13:2f:e5:c8:54:52:c8:b5:5a:e6:a5:ce:12:41:
                    35:2e:b5:17:38:e1:e9:08:93:4d:df:f3:5d:20:3b:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:23:E8:3C:9C:05:95:11:C6:C6:79:FE:90:BF:54:C2:F9:AE:69
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.245.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ee:6c:6e:c0:16:5b:94:59:e0:31:34:ce:5a:26:2d:92:9c:
         61:56:0b:1f:ba:46:23:41:d4:52:dd:17:4d:44:74:14:d0:c7:
         fc:f0:ad:b3:22:a4:79:75:2f:fe:1b:16:3a:8b:2e:9d:24:19:
         7b:81:e1:68:93:99:96:0d:55:8c:0c:74:56:60:d2:cd:ba:1d:
         d5:e1:47:24:bb:21:31:a8:22:ad:f1:cc:5a:b2:bb:91:1d:24:
         e0:fe:ba:c2:77:0d:23:72:99:8d:96:0f:8c:7d:50:3a:b9:c3:
         ad:91:1d:0a:0b:a1:79:56:e0:78:77:d4:c0:9d:d8:5e:9d:a2:
         22:73:5a:65:eb:28:4c:61:4b:fd:fa:96:cd:06:94:33:80:ef:
         be:53:fd:68:dd:30:64:2f:0d:a2:c7:73:db:ad:4c:03:e4:8e:
         c4:f3:35:57:e7:33:67:2a:b2:ed:fd:e1:9f:0a:71:eb:99:a5:
         7c:65:6d:90:82:37:82:31:83:5f:6f:1f:53:52:db:1a:3e:9f:
         ac:79:15:6c:32:c4:58:ca:86:d1:b3:95:d9:30:94:cc:16:37:
         c6:f7:bc:4c:a8:7e:65:7d:c6:c2:07:2c:d3:f2:6f:21:ba:26:
         e4:c4:a7:bf:92:d0:b7:72:40:ee:2a:24:dd:34:a3:1f:d5:15:
         81:26:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:56:36 2024 by rpki-client on console-fra.rpki-client.org