Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63473.roa
File:                     AS63473.roa (raw, json)
Hash identifier:          j7/8p+y7xUI3GUSnDzjdhwR0rh1+m3Q4F36evOpovJw=
Subject key identifier:   0E:05:C0:CD:94:D5:2F:62:02:75:BF:B8:B3:E2:93:33:B7:BF:B4:79
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7DA95EC4A1AAC7DDBC123CA16585D298FA1253E7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63473.roa
Signing time:             Wed 26 Jun 2024 10:04:32 +0000
ROA not before:           Wed 26 Jun 2024 09:59:32 +0000
ROA not after:            Wed 25 Jun 2025 10:04:32 +0000
asID:                     63473
IP address blocks:        157.254.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a9:5e:c4:a1:aa:c7:dd:bc:12:3c:a1:65:85:d2:98:fa:12:53:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 26 09:59:32 2024 GMT
            Not After : Jun 25 10:04:32 2025 GMT
        Subject: CN=0E05C0CD94D52F620275BFB8B3E29333B7BFB479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:4e:8c:3b:e7:2e:0d:40:35:fd:89:84:48:
                    44:4f:14:d4:6a:f7:76:10:11:62:34:ea:40:e4:c4:
                    95:61:8c:c5:65:53:02:7c:40:23:14:f6:18:9f:44:
                    d3:5c:45:98:96:7d:a5:7a:91:df:d7:c5:34:1c:b3:
                    d3:a9:9b:0e:ef:e4:78:b3:ee:28:88:af:87:5d:a8:
                    93:1d:47:ba:99:55:d6:9c:7c:a2:7f:3a:09:92:53:
                    cf:88:7b:11:6a:3d:a0:73:48:4f:a5:b0:d0:ec:52:
                    89:e9:76:0c:0c:d8:ae:a3:a3:21:16:5d:48:5f:5a:
                    43:f9:0f:e4:aa:44:fb:55:b3:0a:8c:cf:3e:b8:1b:
                    4a:aa:df:e6:1f:de:03:e2:f8:56:e3:f6:0e:75:93:
                    70:62:4a:96:db:b5:61:89:6b:a1:0e:be:0d:86:29:
                    0e:12:bb:5f:09:79:61:94:0e:a7:82:26:3a:48:bf:
                    52:6d:67:8c:1e:97:c4:3a:24:90:f3:36:3b:b2:c7:
                    e4:8a:6e:9b:f9:8a:6b:2e:f3:64:04:71:1f:d0:a2:
                    ff:52:5f:76:3c:62:9c:03:01:71:84:03:38:dd:a9:
                    b9:c2:4f:a5:02:0f:5e:61:65:4b:8c:e5:08:ab:9d:
                    0f:d2:76:3e:57:47:1d:fb:20:dd:80:13:29:1f:d1:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:C0:CD:94:D5:2F:62:02:75:BF:B8:B3:E2:93:33:B7:BF:B4:79
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:80:13:0b:25:41:d6:cb:95:a7:81:9e:65:06:c6:52:7d:ad:
         e2:7e:50:0f:fb:35:02:6d:8d:e6:92:e0:e9:26:c7:51:6f:58:
         92:94:c5:26:b4:69:f5:4d:99:15:d8:c1:ca:33:51:c5:e0:b6:
         82:24:99:db:d9:d2:ff:96:03:1c:c1:81:02:f5:dc:35:2b:74:
         37:e2:ef:e6:be:85:a7:f2:ff:a2:dd:01:5b:38:88:9f:7f:c1:
         35:49:50:30:f1:da:e5:18:72:03:e7:a5:41:f7:44:35:9d:36:
         e1:a4:24:cf:b6:78:4b:11:71:97:7e:24:51:04:63:d3:31:a5:
         c6:5d:62:db:37:d9:2e:98:95:a0:73:ef:5c:ec:7f:e5:ac:5e:
         77:36:09:b9:03:50:47:88:49:83:67:c7:7f:aa:d7:a5:7d:17:
         e9:f4:3e:b8:2f:2c:98:6c:97:ce:76:22:72:1e:cb:6d:3d:eb:
         84:a1:9e:a8:d1:25:40:ad:0f:2c:05:f4:5b:dd:1f:27:da:42:
         be:dc:05:11:d2:00:c0:77:89:f5:3e:d8:8a:a7:77:ad:fc:86:
         f2:62:7d:b8:ce:01:0c:77:28:4e:0f:e5:8e:2f:88:28:d8:47:
         3f:b8:da:85:b4:b6:2d:19:05:2a:51:75:8e:ff:e5:2c:7f:8f:
         71:7f:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org