Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60223.roa
File:                     AS60223.roa (raw, json)
Hash identifier:          flu+zr5YJiPa2rb9SvPe2QXVxyK4Rf6JxRz/yrHgl5U=
Subject key identifier:   C5:7D:8C:E3:B9:A9:0C:D7:19:9A:79:F4:F8:5F:F0:76:FE:8C:35:AA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3393D14B3CB33D9DAEC7C57F114A2EDF22BD48CF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60223.roa
Signing time:             Sun 20 Oct 2024 09:25:06 +0000
ROA not before:           Sun 20 Oct 2024 09:20:06 +0000
ROA not after:            Sun 19 Oct 2025 09:25:06 +0000
asID:                     60223
IP address blocks:        23.94.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:93:d1:4b:3c:b3:3d:9d:ae:c7:c5:7f:11:4a:2e:df:22:bd:48:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 20 09:20:06 2024 GMT
            Not After : Oct 19 09:25:06 2025 GMT
        Subject: CN=C57D8CE3B9A90CD7199A79F4F85FF076FE8C35AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:0f:30:68:20:a0:57:ad:8f:35:65:07:97:
                    ba:03:66:a5:46:0b:f8:6b:21:33:5b:a2:3f:1c:57:
                    57:f9:d6:83:99:66:06:f0:a3:ea:c0:ee:ad:57:e1:
                    5f:64:ec:61:b1:00:78:3c:9a:29:4e:1e:b5:e0:aa:
                    74:d4:df:c9:01:f7:e2:f0:ba:ea:56:56:d7:48:a8:
                    de:4b:f6:36:a7:c5:1b:1b:66:ce:09:0b:04:ad:42:
                    ef:6d:2d:42:ac:6d:1e:62:9c:ee:cb:35:b2:61:37:
                    8c:e3:ae:dd:e7:1f:3f:7c:4e:b6:b3:cd:4e:e8:2e:
                    26:94:46:1a:57:17:b8:f0:fa:9e:e2:39:82:34:e7:
                    3a:b4:ad:32:b6:19:81:13:1b:44:40:62:fd:c0:a8:
                    df:50:cb:b3:02:cd:fb:8f:91:e2:a9:f3:9c:e1:e4:
                    56:d5:38:3f:fb:9a:1a:34:fd:60:fb:97:c4:57:c1:
                    28:0a:9a:b4:8f:2c:91:6c:e4:22:cb:5f:c0:a8:f5:
                    dd:60:79:58:53:a2:f4:f3:1b:c0:35:a6:76:1f:66:
                    05:78:ed:cd:5e:b5:c0:cb:4c:20:cb:f3:e2:1b:cc:
                    63:b6:ff:c4:70:1c:4b:70:43:40:b9:98:26:fd:12:
                    f6:74:9b:71:78:48:51:3d:e3:aa:a5:38:07:eb:13:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7D:8C:E3:B9:A9:0C:D7:19:9A:79:F4:F8:5F:F0:76:FE:8C:35:AA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60223.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:f6:a3:c7:8e:6a:a3:df:f4:38:ab:9c:e1:88:39:b3:d9:cd:
         eb:4f:71:c1:f2:9b:28:96:bc:af:bf:ae:29:bc:e7:e6:ad:e1:
         c6:16:a9:2c:21:69:09:bf:d8:d6:54:65:f2:5a:fd:04:4c:eb:
         ee:be:7d:5e:55:b0:1b:16:35:e6:33:43:98:aa:74:20:e0:e9:
         3d:b1:57:f2:f7:c0:ed:95:b9:06:d8:a9:bb:19:bf:10:f0:be:
         99:06:ca:f9:9c:9a:4b:42:54:b9:c7:6e:df:a4:c4:a7:16:45:
         8a:0b:7e:ae:6a:8c:df:58:d3:5a:4c:55:b0:ea:31:e1:b1:e5:
         24:4f:17:d3:6d:e3:db:77:66:d2:70:84:74:a6:65:ea:38:d1:
         cb:32:2e:96:68:c6:d0:10:74:45:44:ce:a7:1d:c7:b5:26:91:
         a3:d8:40:8e:ce:f7:a9:61:bf:11:f5:0e:66:6c:8d:f4:76:7c:
         8e:2f:fc:04:a5:2d:f3:bc:54:c0:a0:57:8e:a3:49:cf:93:46:
         87:d6:77:ca:0e:7d:28:0a:7c:20:7c:63:3e:0e:1d:ea:a2:8c:
         46:e4:81:33:81:e0:c0:44:c2:cb:7c:2e:d1:4e:ff:a1:cc:c5:
         c3:8d:00:ae:c4:5e:f0:8a:09:a4:4b:da:33:ce:90:00:23:90:
         7e:14:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:46:14 2024 by rpki-client on console-ams.rpki-client.org