Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          5+exhHiJ4exiUbF8hSZQlIEG/1ECkwYraGVyzB051vg=
Subject key identifier:   7C:D3:1F:CB:CE:35:CD:D2:36:2A:D2:A7:B5:1C:31:52:99:07:E2:E9
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       60EE86CE11043CDB85A752CE4996D606FE8CC82E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa
Signing time:             Fri 29 Nov 2024 21:36:08 +0000
ROA not before:           Fri 29 Nov 2024 21:31:08 +0000
ROA not after:            Fri 28 Nov 2025 21:36:08 +0000
asID:                     63023
IP address blocks:        190.92.164.0/24 maxlen: 24
                          192.210.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Dec 2024 19:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ee:86:ce:11:04:3c:db:85:a7:52:ce:49:96:d6:06:fe:8c:c8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 29 21:31:08 2024 GMT
            Not After : Nov 28 21:36:08 2025 GMT
        Subject: CN=7CD31FCBCE35CDD2362AD2A7B51C31529907E2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:a7:38:f0:80:ee:c8:58:6e:86:e9:f3:fb:
                    f4:90:e9:86:4b:9a:9f:d1:9c:89:47:55:43:ac:4b:
                    a5:54:af:6a:1e:39:6d:90:51:ca:0c:d2:af:06:6c:
                    26:e6:c9:c7:3e:94:dc:ff:db:4b:dc:14:06:c2:01:
                    45:6a:df:84:8d:9c:c6:26:31:b8:89:e8:3b:6f:3d:
                    2e:e6:c9:39:5a:41:83:37:a6:b2:16:39:f2:8d:7a:
                    d0:ba:db:6b:a0:79:88:01:6f:ba:5a:5b:d2:d2:2e:
                    11:43:6e:be:68:3c:25:82:43:1e:26:52:85:46:93:
                    4f:b1:49:f5:87:36:88:0a:aa:7d:be:07:98:75:b0:
                    75:3e:b9:98:66:69:1d:bb:5b:f3:2b:5e:5e:b5:20:
                    d1:58:23:50:b1:14:54:6b:42:57:de:c0:e4:f4:10:
                    fe:1e:3d:73:10:64:bc:b0:1f:90:37:5f:26:a9:54:
                    0a:6e:2e:86:7b:91:ab:39:e1:ac:87:7c:84:8e:1d:
                    98:c6:0c:bf:14:e2:e6:a9:52:ea:96:cb:81:7a:3f:
                    5f:56:2d:9e:6d:7a:c4:83:a5:70:19:5b:5a:f5:f3:
                    30:c3:69:9b:de:4b:0b:2c:47:13:af:89:ed:ac:34:
                    f2:5f:ab:ea:34:a6:80:32:9e:ae:27:40:4a:93:ac:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D3:1F:CB:CE:35:CD:D2:36:2A:D2:A7:B5:1C:31:52:99:07:E2:E9
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.164.0/24
                  192.210.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:45:c8:ee:b9:46:6d:50:8b:77:39:8f:ef:0e:41:30:6b:73:
         36:7b:e7:82:33:a9:b9:ab:8b:cf:c7:e0:06:2c:37:33:84:4f:
         4f:45:06:8c:cd:57:a7:06:5e:f3:4d:c8:0a:ac:f7:a4:d4:6f:
         b0:57:f3:68:54:66:36:54:93:c2:ed:8c:b7:32:d8:d8:c0:70:
         5b:4a:2c:72:d0:87:f7:9e:1d:b2:6a:04:17:22:75:a3:5f:2f:
         f8:74:f0:d2:e7:0a:70:8f:6d:b9:9f:e9:56:97:b8:ed:fe:ee:
         19:3c:b1:09:6e:01:7d:1c:25:b5:22:a7:f9:9f:3f:d5:aa:4f:
         2b:5b:eb:53:bd:50:56:db:2b:7a:c1:92:17:46:ee:95:86:ac:
         c9:fe:2f:fb:c7:8d:aa:be:ac:97:1c:a5:61:34:42:1f:f2:08:
         6c:de:b5:4a:92:d8:d4:7c:e2:00:b9:a8:d4:d3:0c:d3:ac:75:
         36:21:5e:65:c0:37:75:98:7d:a5:0c:8a:3d:1a:cb:fd:9d:fc:
         73:3e:a1:00:d6:4d:d0:c4:e4:80:00:4b:bb:d0:dc:63:6c:d6:
         f3:c4:34:df:d0:45:7f:78:39:02:04:d4:ae:2c:76:50:34:26:
         07:d3:d6:41:9a:c6:9e:39:b0:6c:60:63:09:40:f0:a1:d5:ce:
         aa:50:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 19:54:15 2024 by rpki-client on console-fra.rpki-client.org