Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          1d2VENReK0PEXBRSzGW3c0/6m5l7A0BNqXrTVRXSx+0=
Subject key identifier:   9D:5A:C7:1E:C3:7F:2F:64:12:2F:44:7B:F1:2D:D2:65:F1:8E:BD:AC
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       39AFC6AD0B6A85C7A0CFF00DBB6CBB5A73951152
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa
Signing time:             Sun 29 Jun 2025 10:18:45 +0000
ROA not before:           Sun 29 Jun 2025 10:13:45 +0000
ROA not after:            Sun 28 Jun 2026 10:18:45 +0000
asID:                     63023
IP address blocks:        190.92.164.0/24 maxlen: 24
                          192.210.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 19:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:af:c6:ad:0b:6a:85:c7:a0:cf:f0:0d:bb:6c:bb:5a:73:95:11:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 29 10:13:45 2025 GMT
            Not After : Jun 28 10:18:45 2026 GMT
        Subject: CN=9D5AC71EC37F2F64122F447BF12DD265F18EBDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:1b:b1:47:e4:ea:c8:ed:fc:2d:c3:32:5e:
                    1e:d8:33:e5:31:c5:b0:1a:a5:9d:28:24:4a:70:c9:
                    a0:2c:6e:d7:29:a3:89:9d:20:1d:d9:3b:3f:4f:59:
                    9d:48:4a:b6:c0:c5:a8:79:bc:14:85:2c:a5:94:ea:
                    a7:ca:e0:0a:88:ef:77:ed:94:49:98:58:1e:9d:fb:
                    f8:e6:ce:2d:77:04:0e:03:aa:9f:6c:49:49:32:f4:
                    7b:0a:bf:cb:45:25:99:4f:d0:d0:d1:31:27:0f:9e:
                    09:ba:ec:70:f5:cf:d0:27:85:d4:9b:f7:a9:9a:05:
                    bb:63:96:d8:4c:d0:17:d6:9a:37:7a:fa:19:4f:c1:
                    b2:cf:42:10:36:68:84:eb:50:94:e0:5e:b0:50:6f:
                    3e:a3:d6:7b:b9:e5:ea:78:2c:06:6f:33:fd:4c:81:
                    25:88:42:ba:0d:e7:84:e3:fc:59:4e:ec:69:de:14:
                    e4:0d:fb:d9:b7:71:03:ca:56:f2:df:12:39:85:3d:
                    6d:79:77:47:57:c0:f2:ad:f3:c1:86:0f:f1:0f:62:
                    3f:99:a2:a6:72:ea:81:0d:1d:68:d6:a9:db:9b:c9:
                    16:09:7e:2b:a8:db:90:c1:2d:3d:66:42:55:9d:a6:
                    6b:f0:c5:5f:1a:94:85:7a:c4:73:a1:da:f8:10:cd:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5A:C7:1E:C3:7F:2F:64:12:2F:44:7B:F1:2D:D2:65:F1:8E:BD:AC
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.164.0/24
                  192.210.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:0c:32:f7:36:94:f1:76:a9:19:30:82:20:1c:fd:ea:26:
         67:b5:0d:48:95:3d:6a:a5:34:a9:a9:14:5e:9c:27:66:29:34:
         ce:be:bd:03:05:2f:a0:c5:1f:dc:84:d7:02:c0:45:c6:49:70:
         52:52:60:c5:74:c9:c9:1e:ba:2a:20:14:d5:09:1d:2b:a3:22:
         0f:67:3a:da:0c:20:02:3e:9d:3d:24:2f:98:46:36:a6:13:36:
         f8:08:ee:f9:2c:b2:c3:a0:cf:97:3a:16:ed:76:11:69:a6:55:
         f9:1d:bd:cc:0c:6f:96:58:1a:7a:45:e4:b1:4c:b3:e9:2a:4c:
         1b:dc:e6:41:a8:ba:7d:15:e8:a9:4c:be:88:e5:18:cf:fe:c9:
         1f:ed:b8:67:61:ac:88:74:84:7d:fe:52:a6:11:91:8c:ca:d7:
         ba:a1:09:b7:aa:cb:d9:20:57:55:b0:57:8d:26:0a:d0:1d:68:
         dc:84:df:f6:d7:84:26:a2:23:2b:10:37:45:1c:d9:2c:bf:40:
         bf:9d:d3:f4:87:b7:cb:77:25:b6:65:ea:d8:e7:38:61:d7:5a:
         4b:01:ac:8a:bb:74:dc:b6:40:1a:30:23:cc:0e:e5:44:ea:df:
         a6:ae:ae:35:f4:21:3b:c1:ad:e5:c9:53:11:4a:0d:78:f2:a6:
         71:78:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:56:01 2025 by rpki-client