Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63018.roa
File:                     AS63018.roa (raw, json)
Hash identifier:          MjAf1FIdt1uvtRCb1WzI9iYyXk1bi2mzX+dFnm95ja4=
Subject key identifier:   3F:D4:5F:AA:19:D0:1C:93:76:E4:55:4A:84:8B:01:AB:FE:35:5F:68
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       14DF5689174E98D347D0C970D8AB95694E6D30C1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63018.roa
Signing time:             Thu 03 Oct 2024 13:56:04 +0000
ROA not before:           Thu 03 Oct 2024 13:51:04 +0000
ROA not after:            Thu 02 Oct 2025 13:56:04 +0000
asID:                     63018
IP address blocks:        198.23.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:df:56:89:17:4e:98:d3:47:d0:c9:70:d8:ab:95:69:4e:6d:30:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  3 13:51:04 2024 GMT
            Not After : Oct  2 13:56:04 2025 GMT
        Subject: CN=3FD45FAA19D01C9376E4554A848B01ABFE355F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:e4:8a:b8:c0:a3:93:07:c8:b0:b8:50:4f:
                    a1:e8:9b:ee:c6:ad:cf:51:ed:d1:f5:67:f5:c3:c3:
                    cd:bb:af:02:be:e6:05:97:b2:0d:25:2c:66:9d:c7:
                    af:ed:dc:fa:24:af:8c:d9:a1:a1:14:89:8e:e7:bd:
                    df:b8:34:b2:c6:04:04:7b:9d:55:00:33:32:6e:3d:
                    c5:62:41:b5:fd:21:63:93:e4:1f:ee:0f:91:52:a1:
                    58:c1:5f:0a:c3:c1:42:0a:48:9a:7d:16:35:f0:ba:
                    02:16:6c:a6:f8:16:5c:eb:fd:5e:83:bc:d3:3c:6d:
                    48:cf:50:12:9a:f2:36:54:f7:b0:ec:d9:60:ee:a2:
                    b4:ef:0d:30:bb:a1:60:3b:ab:19:5b:dd:99:83:e6:
                    90:d5:38:e8:15:3c:e3:1c:6f:57:35:b0:5f:96:e0:
                    49:1c:0a:c3:4e:17:d8:b3:63:d3:01:51:f3:72:27:
                    4b:26:47:c7:31:d9:ee:2b:9c:d6:8d:9a:3a:a4:13:
                    aa:a9:29:6f:3e:de:fc:92:63:4b:df:88:48:2b:1e:
                    9e:a0:02:f1:b8:94:43:2b:a4:bc:69:21:58:13:83:
                    88:76:1a:3c:d6:69:90:55:ba:0e:2a:83:43:82:af:
                    11:35:94:65:6e:1b:1a:09:0f:c5:2b:13:04:fb:6c:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D4:5F:AA:19:D0:1C:93:76:E4:55:4A:84:8B:01:AB:FE:35:5F:68
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:39:c8:87:ea:7f:a9:b0:8d:7c:8c:30:d3:d9:b7:15:3c:16:
         fe:62:83:24:fc:1b:e2:60:3a:f7:06:6b:81:97:f9:d0:43:49:
         52:ab:9e:44:10:fd:fa:dc:f0:65:96:ab:02:cb:16:fe:f1:f5:
         82:9a:dc:c9:70:56:82:94:60:2f:1e:db:1b:0c:6c:10:8f:53:
         ee:a1:91:a3:18:9a:00:e7:d1:b8:a4:68:61:86:34:5f:ec:7b:
         eb:c7:90:54:84:89:7d:a1:15:aa:02:2a:bb:f3:27:eb:5f:39:
         9f:7c:87:a2:b9:53:b6:4c:b1:e6:84:56:51:62:81:36:0d:e0:
         d3:71:37:ef:ce:14:34:b2:8f:22:9b:b1:10:c8:10:c9:37:88:
         b2:c8:fc:4d:80:ba:67:08:45:7c:ab:c9:bc:23:6a:e8:05:98:
         e4:d3:1b:55:35:4b:e2:ec:d9:97:cb:53:36:f1:f2:33:6d:20:
         5e:37:aa:c7:31:16:b3:51:d2:16:46:53:fb:b7:ee:43:3e:0e:
         89:06:2f:e6:d8:96:50:c2:97:e1:8d:85:a0:fe:95:64:71:6b:
         8e:d4:fb:9d:ba:b0:3d:5b:e0:44:34:52:3f:45:a0:f7:e5:ed:
         6f:b2:90:ab:ec:cd:23:6f:74:57:1c:6b:9e:48:ed:09:ab:44:
         fe:2a:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org