Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          KQbCfTwq8iC77/LprYvYtzGDQN8CLf7+TGD2srZ+AO4=
Subject key identifier:   94:83:B7:46:84:EF:09:3A:17:04:56:BA:BC:6B:4B:80:47:96:3F:DF
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       21B3355A980A49E708F1111D41438CB3AAA9B511
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63023.roa
Signing time:             Mon 22 Jan 2024 14:08:37 +0000
ROA not before:           Mon 22 Jan 2024 14:03:37 +0000
ROA not after:            Mon 20 Jan 2025 14:08:37 +0000
asID:                     63023
IP address blocks:        157.254.227.0/24 maxlen: 24
                          157.254.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Dec 2024 11:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:35:5a:98:0a:49:e7:08:f1:11:1d:41:43:8c:b3:aa:a9:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 22 14:03:37 2024 GMT
            Not After : Jan 20 14:08:37 2025 GMT
        Subject: CN=9483B74684EF093A170456BABC6B4B8047963FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:da:71:c7:30:f6:39:47:fb:8a:74:8b:c2:
                    5b:30:b0:40:9a:c8:1a:c3:71:28:ff:5a:b7:d3:62:
                    34:bd:81:3f:4b:71:48:71:d2:2a:6d:42:3d:c5:86:
                    79:0c:63:5c:83:a9:42:4a:c4:44:94:53:08:66:f7:
                    f6:d9:5a:11:54:07:fe:76:46:01:fb:83:f4:4b:70:
                    65:3a:aa:56:f2:5e:25:f6:e0:6d:40:bb:9e:dd:1b:
                    dc:18:84:af:cb:1b:d1:59:0a:36:66:78:07:6d:3d:
                    ed:99:40:82:03:04:5b:d7:cc:bd:fd:bd:57:e1:d6:
                    70:93:2e:d4:8b:2e:7a:16:74:d2:bb:03:af:36:17:
                    ff:49:61:74:ab:74:a7:af:24:b7:ab:53:0f:db:93:
                    8b:de:e1:1b:46:e1:6c:b0:f3:e4:71:55:56:ae:cd:
                    5e:e8:e8:77:e2:16:4b:21:e1:b2:87:fd:3d:fb:fa:
                    8b:33:94:a9:16:5d:97:fc:52:42:15:e3:bc:9d:a3:
                    76:2d:df:27:99:40:7b:39:b5:5d:a6:b9:3a:d8:67:
                    f6:34:a3:8d:c9:8e:69:b1:de:05:40:c1:1a:ff:fb:
                    a0:50:5c:41:68:bb:ae:33:65:23:01:8b:ea:cb:5e:
                    0e:97:85:9f:02:38:12:9b:25:4a:14:92:65:59:37:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:B7:46:84:EF:09:3A:17:04:56:BA:BC:6B:4B:80:47:96:3F:DF
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:84:5c:86:49:f4:5e:c5:b7:b6:b9:84:b4:6c:9f:c2:01:56:
         97:94:6b:90:73:1c:f5:fc:2a:dd:8d:c0:98:27:7f:11:96:42:
         6e:60:ad:c2:ea:ee:db:0e:2c:5d:94:50:9b:ac:24:cc:13:81:
         8e:0e:8d:82:45:38:d3:52:9b:22:3b:eb:a1:06:ce:2c:89:af:
         7c:ed:6e:78:a4:f2:0b:6a:73:63:42:5a:6b:ad:4b:b2:36:5a:
         d1:38:3e:30:e3:86:2d:dd:e1:9b:5d:8a:96:0e:35:76:63:11:
         67:b5:9a:2d:d6:1f:e4:f7:85:a9:f8:36:81:be:ab:96:54:87:
         87:64:80:89:4d:01:28:7b:1f:d9:5e:da:79:0d:c1:bb:d4:87:
         98:ec:74:25:5e:b1:0b:58:f0:12:4b:55:34:06:15:de:c6:db:
         42:c7:fe:de:c5:cc:82:1a:43:8e:56:a7:49:b3:2d:1a:a4:a9:
         0a:a3:31:66:92:9c:20:52:d7:ed:f8:7f:e5:3c:d7:b3:c6:14:
         d7:fd:7a:17:15:4c:af:6c:a6:0e:67:71:86:72:2f:b2:02:57:
         cf:af:6c:5e:2a:1a:34:17:e8:63:50:21:8c:a7:d9:30:a0:00:
         5b:74:78:f5:1b:10:fb:4e:af:ce:6d:f3:72:ab:08:18:dd:b8:
         2d:3c:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 15:06:47 2024 by rpki-client on console-ams.rpki-client.org