Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          Vd1914CqWK6fyG1OWyhCEgIJBKvCx0mU7mFgdqe2uaI=
Subject key identifier:   2D:CF:7B:59:1A:85:CA:CC:E5:AA:E1:72:A7:C6:C7:A8:1F:FC:EC:3C
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       1E63E9A07B650C478712B8C9953E1E8911E1E17A
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20473.roa
Signing time:             Fri 15 Nov 2024 18:38:37 +0000
ROA not before:           Fri 15 Nov 2024 18:33:37 +0000
ROA not after:            Fri 14 Nov 2025 18:38:37 +0000
asID:                     20473
IP address blocks:        205.234.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 10:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:63:e9:a0:7b:65:0c:47:87:12:b8:c9:95:3e:1e:89:11:e1:e1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:37 2024 GMT
            Not After : Nov 14 18:38:37 2025 GMT
        Subject: CN=2DCF7B591A85CACCE5AAE172A7C6C7A81FFCEC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:a3:d1:b9:49:4f:52:54:4e:72:1e:fb:20:
                    d6:ae:71:ff:5e:49:f0:a8:03:1d:fc:d9:d3:e3:da:
                    f5:10:a3:63:1b:5f:9d:1a:7a:c3:80:84:9f:aa:7a:
                    1b:36:f2:87:32:98:70:df:8d:e6:a5:a1:45:a1:3d:
                    46:40:d8:8a:9c:36:19:9a:5e:18:3f:cf:10:d1:42:
                    e7:aa:87:a0:72:de:15:d1:da:9e:19:c4:7f:76:8e:
                    f8:b7:c0:a8:e9:b2:68:6a:e5:91:3d:2f:95:93:c1:
                    67:8c:df:b8:31:8a:40:95:2d:29:21:79:62:94:53:
                    06:bc:0e:7b:d4:2c:36:6d:4a:f0:f0:7d:be:ab:85:
                    09:62:7d:00:10:39:47:2f:0e:f6:8d:6c:8f:ec:90:
                    3b:fa:e4:13:3f:92:64:b8:0f:48:b2:dc:77:b9:64:
                    27:df:24:6e:d1:77:06:75:2a:97:10:f5:6c:f7:e0:
                    b2:77:14:db:55:6f:2f:c6:08:ff:61:78:e5:d1:a7:
                    c2:b4:6e:76:fb:55:57:96:75:95:f7:5f:72:f5:74:
                    8f:6f:bb:25:f7:26:28:61:0d:8a:20:94:fb:36:90:
                    15:51:82:89:10:ce:e8:f6:b4:3d:9b:b7:ec:89:eb:
                    70:66:dd:02:a1:7c:01:66:98:2b:7c:39:a0:f2:00:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CF:7B:59:1A:85:CA:CC:E5:AA:E1:72:A7:C6:C7:A8:1F:FC:EC:3C
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:a5:ce:b8:f7:73:01:3d:d0:51:14:fb:8e:5a:39:72:fa:
         c3:aa:66:99:f2:16:b9:67:6a:4f:b2:52:9e:5c:17:19:10:e0:
         37:f4:ff:2d:61:5a:6d:76:99:f8:55:ab:f9:17:e6:5a:d9:98:
         cd:52:b8:56:95:97:71:10:a8:76:2d:51:19:3e:02:ee:61:2b:
         30:fe:76:22:f3:40:fd:f2:01:f9:4a:28:60:7d:77:24:5a:99:
         91:f1:89:1f:60:de:f3:ef:f8:45:a0:98:04:93:58:ff:5c:f3:
         f8:68:53:2e:61:4a:8e:06:4e:a9:cf:83:80:25:52:56:f2:eb:
         f7:fd:8c:97:e6:bc:6a:21:ad:f2:e5:c9:76:8a:26:b8:19:74:
         0c:dd:02:55:ee:9c:c4:43:ff:3f:81:98:6e:74:eb:35:38:26:
         5d:d9:f6:10:c5:0d:c4:93:20:3b:62:23:62:5c:8f:d5:bf:6c:
         30:17:94:96:5f:6e:19:1c:1b:48:76:1f:69:ac:a6:93:7b:d2:
         22:85:5a:b7:ea:5b:27:85:63:b3:34:c1:ab:a9:16:0b:2f:11:
         b2:cc:f8:2a:f5:8c:b1:ea:e3:40:5e:fa:a8:ab:7c:5d:34:66:
         f8:fa:f4:7e:14:63:c8:19:aa:bb:1f:fb:19:ff:4a:48:9e:5a:
         c1:09:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:41 2024 by rpki-client on console-fra.rpki-client.org