Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7720.roa
File:                     AS7720.roa (raw, json)
Hash identifier:          RD0RgpcpCDDRRaEgMmR1DQZfxzLm/AupvOHz3c9RGC4=
Subject key identifier:   4E:03:51:CA:9A:46:C7:AB:59:1E:E7:37:72:82:95:91:11:73:9D:A1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       304A0576BEEDFC7FF0600DB2D9A8DC2611523051
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7720.roa
Signing time:             Wed 28 Aug 2024 10:42:53 +0000
ROA not before:           Wed 28 Aug 2024 10:37:53 +0000
ROA not after:            Wed 27 Aug 2025 10:42:53 +0000
asID:                     7720
IP address blocks:        192.210.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4a:05:76:be:ed:fc:7f:f0:60:0d:b2:d9:a8:dc:26:11:52:30:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 28 10:37:53 2024 GMT
            Not After : Aug 27 10:42:53 2025 GMT
        Subject: CN=4E0351CA9A46C7AB591EE7377282959111739DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:cc:22:5e:9d:63:52:d3:9a:a9:26:13:72:
                    be:46:80:ff:58:f7:57:95:06:05:7a:55:d5:f9:e6:
                    a6:89:da:c5:a5:22:c4:fb:5d:42:96:e8:0f:86:7b:
                    57:5e:a6:d7:d4:01:d6:86:3f:bc:af:db:68:55:ed:
                    ae:2f:2b:e6:7c:e0:2e:73:3f:50:8e:00:77:65:7f:
                    39:63:fb:26:90:27:fa:ef:09:5e:88:f0:8c:7e:9d:
                    6d:e3:58:78:f1:12:c1:1d:a8:48:b4:89:26:43:27:
                    ab:c6:7a:04:5e:1d:ae:66:14:52:e5:1c:fc:06:46:
                    79:58:c4:c4:c5:28:07:0b:7c:c8:88:5b:26:7f:bf:
                    ab:f1:19:b6:81:4b:2c:2d:2f:e8:0c:92:b0:a9:33:
                    ee:3d:7f:6e:72:1d:c7:f9:de:7d:68:4b:97:2b:2a:
                    7d:6a:eb:af:64:d2:6e:8c:9b:3a:4d:37:20:db:86:
                    ff:65:43:ff:8f:14:c3:63:07:d8:cc:0b:15:af:e4:
                    fe:87:e8:64:f4:61:b8:80:e8:30:e9:27:72:c8:31:
                    28:81:94:ee:9e:76:a8:a8:d2:a6:d0:e6:0d:ed:bd:
                    49:47:05:54:0f:c8:81:e0:12:90:e2:72:85:a9:b1:
                    75:cf:70:40:15:7d:47:02:de:20:6b:7f:a8:60:8f:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:51:CA:9A:46:C7:AB:59:1E:E7:37:72:82:95:91:11:73:9D:A1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:66:e6:b3:6d:09:d8:e6:6d:b7:98:01:d2:93:06:06:9c:a3:
         9d:3d:d2:ba:29:fc:58:55:06:20:87:71:1f:7e:ea:c4:f1:ef:
         a7:4a:a9:2b:87:a6:93:0a:cf:aa:23:10:bb:82:af:87:da:d3:
         5b:e6:5e:fc:af:1b:b3:fe:44:47:f6:94:c1:52:77:71:35:00:
         90:a0:30:69:1b:a5:da:1a:37:0f:54:88:14:05:fa:64:53:2c:
         b8:33:54:74:29:9c:1f:cc:b1:ac:43:80:10:1c:06:21:8f:49:
         e5:be:3c:55:d1:58:e5:f7:93:15:1d:1b:ae:7f:79:f1:82:f3:
         8b:37:8e:8d:d8:ff:61:bc:96:d7:f1:f5:dd:6d:ce:56:d9:d7:
         da:5a:44:23:19:c0:b9:fb:ac:ca:b3:bb:71:24:cb:c3:bd:27:
         c7:6f:a5:ea:c0:fa:ce:d8:bd:cb:22:e8:bd:aa:f3:dc:77:10:
         a8:2d:e9:1e:d6:1a:13:6d:2f:5d:25:88:3d:a6:37:8a:23:33:
         bc:e2:d3:4a:a9:0a:2d:98:9e:0d:50:f7:30:8b:2d:79:96:ba:
         d4:43:d9:44:8b:ab:c9:02:d3:70:09:0c:f9:61:f4:3a:1a:ed:
         33:8b:b4:08:91:87:11:62:61:09:19:cd:b1:1e:ce:03:9c:9c:
         7a:55:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:39 2024 by rpki-client on console-fra.rpki-client.org