Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63150.roa
File:                     AS63150.roa (raw, json)
Hash identifier:          OtMTJEXo3yHU7sRlDeSk9ZFb0gRYsTEpuwN9/0X/6zo=
Subject key identifier:   3D:04:5A:60:58:0F:AD:60:D5:62:62:F4:59:D4:F1:72:20:28:6B:0A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       698EAB33CC7660E2881F1E3BCC98B1C9200B4020
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63150.roa
Signing time:             Tue 22 Oct 2024 03:27:50 +0000
ROA not before:           Tue 22 Oct 2024 03:22:50 +0000
ROA not after:            Tue 21 Oct 2025 03:27:50 +0000
asID:                     63150
IP address blocks:        23.95.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8e:ab:33:cc:76:60:e2:88:1f:1e:3b:cc:98:b1:c9:20:0b:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 22 03:22:50 2024 GMT
            Not After : Oct 21 03:27:50 2025 GMT
        Subject: CN=3D045A60580FAD60D56262F459D4F17220286B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:08:93:a0:0e:fe:6e:16:34:68:52:85:27:
                    08:83:4a:4c:4a:07:9b:d7:72:c1:91:dc:fa:b5:60:
                    1c:8f:b8:a1:45:a8:1e:69:fd:b3:1a:ff:37:d2:5b:
                    03:b2:98:13:5e:ec:cd:81:57:f0:a8:92:cf:dc:8c:
                    d0:19:5e:0e:57:8e:ce:8d:66:bc:1c:5e:7b:21:d5:
                    46:e5:bc:bb:1c:e4:14:b4:61:72:39:29:cb:04:59:
                    8d:cd:da:06:3b:6e:04:93:31:cf:7a:89:b6:41:71:
                    e5:39:36:cc:b0:40:03:6d:a5:de:7f:8a:d4:0e:0b:
                    72:10:4a:60:e3:9d:b2:cb:66:bd:bf:c4:67:1e:10:
                    86:1f:02:56:4e:fe:b4:a8:a0:83:f0:00:cf:57:97:
                    cb:4e:77:4b:aa:47:8f:4f:ce:a2:65:a3:a5:3d:1e:
                    e4:90:71:03:b5:18:55:fe:84:62:78:bf:a3:37:b4:
                    bf:eb:8a:02:2a:ee:33:37:6f:cd:48:5b:4e:fc:5b:
                    d8:8c:17:51:0f:69:f6:c9:4f:2e:d0:58:66:dc:db:
                    88:fc:bb:cb:dd:62:3a:9d:7a:5f:93:27:f1:41:92:
                    67:b9:3b:ed:db:d3:2a:93:37:6e:8e:e5:43:b3:ec:
                    ab:4b:46:df:2e:57:aa:e4:f5:d5:d0:88:9a:ad:aa:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:04:5A:60:58:0F:AD:60:D5:62:62:F4:59:D4:F1:72:20:28:6B:0A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:11:6c:97:3a:5d:c9:77:79:d6:d8:42:47:e6:a7:0b:aa:2f:
         48:80:20:01:a6:d4:47:b6:f0:fb:ec:0a:81:66:ec:0c:5f:aa:
         05:6f:51:a8:03:18:50:00:d0:35:21:da:a1:6e:6f:41:b7:68:
         d7:4e:40:f7:10:94:e7:1d:3c:7e:ff:75:96:1b:dd:c2:88:35:
         82:cd:d4:cf:35:de:8b:2d:8e:97:ad:aa:78:dd:0d:ba:76:c8:
         fd:03:28:ba:06:d4:d9:e5:53:91:b0:a2:30:f4:dd:00:48:0c:
         53:e9:ae:ac:3a:ce:2e:03:99:80:0a:3f:d7:73:1f:bd:ed:d3:
         dd:6b:6f:cc:f6:10:34:ee:06:24:89:4e:5d:aa:c5:48:4a:22:
         ba:9c:f3:f6:51:d0:f6:fd:c6:53:c9:a0:f6:bc:43:b7:37:5e:
         ec:84:31:47:c1:54:02:b3:3a:5c:16:f2:38:e4:8c:47:8c:17:
         06:a9:26:65:ba:bf:49:ed:dc:16:3c:f0:73:d0:3d:85:a0:19:
         c5:99:c9:80:26:17:1b:06:48:7a:17:f9:a2:d1:4c:f3:de:79:
         83:0b:02:a0:41:bb:a7:ed:a9:61:b4:3a:95:a9:f4:ba:4c:9a:
         90:e9:d4:71:95:0c:57:60:24:f8:f3:49:0f:2b:59:64:af:e9:
         04:d7:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:39 2024 by rpki-client on console-fra.rpki-client.org