Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS62904.roa
File:                     AS62904.roa (raw, json)
Hash identifier:          Ygd+225D7bow5lZ+2qqLIdlOurfqChYRghcgY4//ufM=
Subject key identifier:   26:EA:1A:1E:9D:E6:79:7E:6E:44:EB:86:58:F4:76:35:4C:2D:40:C2
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       71C58010725C1E2D5BDE1B8D947355146B686887
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS62904.roa
Signing time:             Sat 16 Nov 2024 06:15:25 +0000
ROA not before:           Sat 16 Nov 2024 06:10:25 +0000
ROA not after:            Sat 15 Nov 2025 06:15:25 +0000
asID:                     62904
IP address blocks:        216.246.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c5:80:10:72:5c:1e:2d:5b:de:1b:8d:94:73:55:14:6b:68:68:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 16 06:10:25 2024 GMT
            Not After : Nov 15 06:15:25 2025 GMT
        Subject: CN=26EA1A1E9DE6797E6E44EB8658F476354C2D40C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:b1:39:2e:53:a1:e8:4f:ea:85:b6:c0:d9:
                    6e:49:3e:33:a2:76:0c:dc:e9:9e:43:3e:1f:a4:fc:
                    a4:d4:00:5f:50:12:d3:8b:14:7a:de:89:9e:a1:70:
                    a9:36:08:ca:ef:08:fa:4d:b7:7d:f0:70:4e:42:2c:
                    9f:c5:19:01:bb:16:ee:28:0a:1d:fd:04:e5:88:86:
                    88:1c:86:60:de:63:f3:5d:16:29:cb:2b:8d:ff:c6:
                    40:86:0b:22:9d:06:31:bb:69:35:d9:99:86:e9:5b:
                    af:d7:79:42:7e:8b:00:58:fd:c9:1b:0c:00:f4:38:
                    a2:27:6b:59:d0:81:6d:10:1e:68:3b:4f:d2:d9:7d:
                    c7:df:02:6d:8c:4b:b9:4f:05:6d:e2:68:ac:cf:d4:
                    72:79:ec:0b:9c:a2:02:0c:bc:b3:ca:28:00:05:40:
                    43:b9:71:56:97:18:73:b8:bb:2b:0d:cc:82:bb:82:
                    0f:3e:e9:1b:19:2f:c3:16:81:d3:ce:7f:46:36:03:
                    da:bc:14:85:d0:b3:61:1a:f4:b9:94:0c:b0:d0:c9:
                    d6:94:6e:ec:69:53:f1:04:97:8b:8b:51:eb:5d:d7:
                    10:ad:0e:73:27:0d:11:5a:bf:cc:d0:1e:53:b9:df:
                    a1:22:e8:07:a6:5f:db:91:fd:07:bb:1c:85:a8:75:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EA:1A:1E:9D:E6:79:7E:6E:44:EB:86:58:F4:76:35:4C:2D:40:C2
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS62904.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fa:97:c2:16:a0:14:b3:c5:a1:d8:82:e3:bd:8f:39:cd:18:
         ea:ff:72:b0:bc:69:25:da:88:8a:5d:15:53:d6:ba:f6:80:c8:
         e4:b5:71:c5:d0:d9:a3:2b:b9:91:b4:9c:65:8f:0f:a0:9a:00:
         e7:a9:f7:2a:40:16:4e:96:6a:d9:96:a8:5c:8e:ce:8e:09:98:
         cd:22:19:59:48:0c:26:51:10:1b:37:19:5a:27:9c:bd:15:e4:
         7d:28:10:59:83:bf:02:75:2c:a9:8f:1d:1d:4b:ef:8e:16:39:
         ee:fe:60:96:fb:0e:05:40:c3:52:9a:bc:95:86:f4:79:2c:15:
         1b:e8:cd:4b:be:19:ab:2b:84:8e:ab:68:80:a6:eb:7e:6d:00:
         25:a8:c6:ce:9f:b8:54:9b:0a:4c:df:ec:dc:67:08:9a:21:c1:
         23:e0:af:65:18:da:db:a2:8b:6e:91:65:85:a7:d3:fd:9e:e0:
         b2:91:e3:db:b2:e6:ba:4d:71:a2:d3:d6:63:aa:d8:ec:a4:2b:
         4e:1c:6c:c3:8c:c6:a5:6d:2b:c7:32:66:d0:a5:05:21:a8:a8:
         fa:13:8c:93:04:b2:b9:ed:eb:1d:7b:85:2f:fe:87:36:f4:f2:
         b6:c0:98:22:05:ff:73:21:d2:c1:db:f9:90:d0:47:ac:a5:b8:
         3c:6b:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:28 2024 by rpki-client on console-fra.rpki-client.org