Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          1YrhIwxLqapyMl9vd3JUdrZ4Q7OG+4ULamqyO5OuNzc=
Subject key identifier:   14:E4:CF:0F:69:9C:F0:B8:4D:3A:62:2F:66:66:0F:68:00:9F:5D:8A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       02A84058BA19B35E8AAFD801E820861D52D60296
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa
Signing time:             Sat 05 Oct 2024 01:51:09 +0000
ROA not before:           Sat 05 Oct 2024 01:46:09 +0000
ROA not after:            Sat 04 Oct 2025 01:51:09 +0000
asID:                     6939
IP address blocks:        23.95.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a8:40:58:ba:19:b3:5e:8a:af:d8:01:e8:20:86:1d:52:d6:02:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  5 01:46:09 2024 GMT
            Not After : Oct  4 01:51:09 2025 GMT
        Subject: CN=14E4CF0F699CF0B84D3A622F66660F68009F5D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:84:23:e1:b9:50:9f:27:3a:e3:0b:ea:32:
                    5f:b8:1f:56:d5:20:61:f7:4b:1c:b2:6c:8d:63:51:
                    5c:a4:21:53:77:d2:2d:2e:4f:c2:0d:34:2c:62:8f:
                    26:7e:e8:96:e0:7f:4d:4e:7e:f3:e5:05:77:d2:35:
                    4c:b4:9a:ff:7c:69:db:72:53:65:1f:bd:b4:27:d7:
                    de:8e:3b:8e:64:75:75:20:00:15:03:05:6f:bc:b1:
                    f9:18:de:38:7d:2f:8c:6d:d0:44:84:7e:e0:c5:be:
                    93:32:eb:25:3f:f4:47:f5:47:f8:a0:74:83:d6:33:
                    fb:2b:d8:e3:35:e9:2a:fb:9d:f7:3f:7c:2d:cb:15:
                    a8:df:4a:0e:3d:6e:9f:2c:c1:69:e5:9a:bb:e1:1e:
                    22:b8:d9:bb:71:be:c2:6b:99:90:e8:61:0b:b7:d2:
                    7e:bb:ad:7c:e6:91:9f:53:6d:be:cd:ca:93:01:04:
                    8c:74:f2:fe:a5:1f:4f:75:6a:25:64:0d:6b:97:2c:
                    4f:0f:05:59:6c:63:c3:9a:64:d7:f1:e1:70:d0:3e:
                    12:d4:40:1a:b0:80:77:aa:4d:21:d4:bb:cf:98:27:
                    ff:74:cc:21:6c:1e:86:17:3c:be:9e:be:bc:b8:db:
                    a2:f3:26:2b:7e:d5:58:8b:bf:6b:bd:fe:58:34:86:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E4:CF:0F:69:9C:F0:B8:4D:3A:62:2F:66:66:0F:68:00:9F:5D:8A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:96:57:b2:20:93:8a:9c:e7:a7:e9:7c:50:5c:82:a6:39:
         3a:b9:82:e8:33:76:cc:f2:96:ab:ab:3f:25:02:fa:6e:ff:fa:
         c8:78:9f:8d:18:ce:44:30:86:dd:73:e7:82:4e:4d:1b:99:c2:
         75:a0:81:31:11:52:2b:eb:ea:7b:9a:f0:1e:d2:d8:13:ba:f6:
         ff:26:fd:a1:a5:dd:70:a1:45:96:65:d8:1d:a8:e4:94:e9:24:
         62:d6:d4:07:7a:33:6c:d0:88:d0:2d:57:53:63:97:e2:df:34:
         62:6c:0c:88:a0:4b:84:35:cd:2f:49:38:ea:ab:36:f1:dc:69:
         65:5c:a4:a1:94:61:61:ab:ed:9c:67:8b:d2:90:72:81:74:fc:
         b7:45:dd:d9:fd:f1:ef:23:6e:51:1e:30:83:26:3a:c7:a4:57:
         20:4e:71:c6:3b:01:3d:49:16:59:e0:6f:37:53:74:4a:a1:a2:
         02:26:94:36:44:a5:f3:93:4e:a9:3e:ba:ab:00:00:38:17:a3:
         d2:62:99:82:18:96:18:1b:38:55:e5:18:7b:4e:45:48:a8:9f:
         ec:6d:1c:19:98:ef:2a:ff:18:7c:74:f1:93:83:6a:59:5e:6c:
         f4:ab:74:57:2d:86:ae:7c:ca:eb:85:63:fa:48:42:24:3c:c5:
         45:43:3c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org