Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS59711.roa
File:                     AS59711.roa (raw, json)
Hash identifier:          4MXZZycivSeaZcONorC9EYXRxTafitUvE9RxuL6JTDA=
Subject key identifier:   BC:7F:8B:28:1D:74:8F:BE:79:FB:3D:92:71:1B:1D:35:8E:11:5F:14
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7DA603EAC024E626F794BE97528590D98398F6BE
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS59711.roa
Signing time:             Fri 17 Jan 2025 14:27:36 +0000
ROA not before:           Fri 17 Jan 2025 14:22:36 +0000
ROA not after:            Fri 16 Jan 2026 14:27:36 +0000
asID:                     59711
IP address blocks:        204.93.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 23:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:03:ea:c0:24:e6:26:f7:94:be:97:52:85:90:d9:83:98:f6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Jan 17 14:22:36 2025 GMT
            Not After : Jan 16 14:27:36 2026 GMT
        Subject: CN=BC7F8B281D748FBE79FB3D92711B1D358E115F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:20:3f:09:55:37:ed:41:2d:09:c7:46:61:
                    fb:1d:97:0a:6d:07:1e:ca:d6:91:0d:38:26:bd:bc:
                    dc:14:31:b7:39:be:d5:8d:a5:82:4f:ea:bc:f9:cf:
                    39:8b:24:28:17:1f:0d:e1:44:39:96:f0:f0:8f:69:
                    c8:95:71:18:ba:3d:30:ba:28:65:89:5f:84:19:fd:
                    a4:4c:37:07:45:86:ac:50:9e:bc:84:ad:43:76:39:
                    85:2f:eb:5e:f9:f4:89:cb:de:35:c8:ec:45:63:e6:
                    52:6c:6b:f7:bc:48:0b:ed:9c:ef:a7:7d:2b:9d:89:
                    02:b9:5b:b2:bd:02:c6:c1:17:b8:fa:b6:1b:fe:3f:
                    ee:0f:17:c7:f4:9b:6f:04:b7:ae:e2:20:9a:b2:ad:
                    58:01:be:3d:ad:17:c3:53:40:17:5a:71:06:a1:76:
                    d8:70:b1:e1:69:42:56:f4:0b:97:7a:95:76:b5:87:
                    6e:2c:f4:43:f7:3a:4b:6e:47:d0:c5:4a:c0:5d:29:
                    9c:ae:dd:29:e7:ff:c7:29:e7:64:63:36:9f:76:28:
                    a5:34:44:d0:fa:3d:eb:fd:42:27:c2:71:fc:eb:35:
                    8f:de:57:21:2b:ae:ab:07:8b:dd:99:e1:4f:7d:30:
                    b7:26:3f:70:f7:ea:10:ff:86:27:a4:5e:7b:d3:9c:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7F:8B:28:1D:74:8F:BE:79:FB:3D:92:71:1B:1D:35:8E:11:5F:14
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS59711.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:27:9e:a4:54:03:01:fa:65:3a:82:56:c3:c2:af:fe:fa:
         cd:31:2c:2c:ac:e4:3e:75:eb:66:fc:24:82:24:2e:34:ed:58:
         30:a9:c8:27:53:bc:50:57:f3:97:cd:5a:4c:e0:10:60:54:bd:
         dc:b6:64:01:ee:fd:11:19:55:f8:f5:ab:39:b9:4e:28:60:55:
         9c:29:dd:35:02:b3:d4:35:8d:65:42:23:4b:e3:31:19:b7:7b:
         1c:bc:d6:e0:ba:b6:70:9c:3c:c7:3e:31:21:e5:cb:20:90:29:
         d9:96:e6:b7:52:14:6b:4a:ec:cb:fd:61:60:c4:22:56:37:0d:
         31:b1:bb:66:ff:a2:72:dd:7b:98:10:0c:9c:0f:e7:c4:d0:5b:
         5b:dd:ee:51:a3:10:2c:a2:74:46:6e:fc:fd:f0:63:b0:2f:2f:
         39:96:27:97:0e:29:f5:ed:1c:30:f8:b3:1d:21:86:8a:f8:a2:
         4e:99:58:70:68:5d:b0:73:1d:9a:26:f3:b9:4a:1f:36:8a:22:
         f6:dc:6e:df:c4:50:e2:dc:0b:54:9f:41:f8:b4:ed:cd:76:87:
         d6:88:26:29:f6:4c:13:14:87:b1:83:f6:71:89:e2:17:9a:fa:
         5b:e1:78:0b:f3:46:80:22:58:f1:bc:10:aa:b6:fa:a7:18:2d:
         b4:de:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:04:09 2025 by rpki-client