Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401314.roa
File:                     AS401314.roa (raw, json)
Hash identifier:          sIuPsWvKXhoyHPcPdXMuX6hiPZcUfQfbv1srLqT4UWI=
Subject key identifier:   88:AE:00:DD:A5:8C:A8:A3:65:DA:34:10:2B:C5:C8:58:A9:BC:55:86
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       20401C36093411D6964E7F099BCDE15FF5DBEAB2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401314.roa
Signing time:             Tue 29 Apr 2025 23:49:37 +0000
ROA not before:           Tue 29 Apr 2025 23:44:37 +0000
ROA not after:            Tue 28 Apr 2026 23:49:37 +0000
asID:                     401314
IP address blocks:        64.50.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 05:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:40:1c:36:09:34:11:d6:96:4e:7f:09:9b:cd:e1:5f:f5:db:ea:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 29 23:44:37 2025 GMT
            Not After : Apr 28 23:49:37 2026 GMT
        Subject: CN=88AE00DDA58CA8A365DA34102BC5C858A9BC5586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:35:3b:58:f5:1e:2f:4a:88:b9:f6:6f:3d:c4:
                    f6:5e:45:9b:ff:b3:de:75:ca:5f:0b:2f:ab:3b:6d:
                    60:eb:bc:8d:58:72:9a:6b:b5:5b:c3:ab:3b:e7:0c:
                    8d:7b:c9:36:ed:2a:5b:c8:57:ba:15:79:f9:2d:fd:
                    53:80:af:68:85:e3:55:e5:e9:d3:64:a6:85:a0:89:
                    0e:4a:19:57:1c:7e:ad:53:94:aa:2e:5a:e4:aa:46:
                    1b:73:1c:82:83:ac:3e:69:2d:0b:8b:5e:4f:09:be:
                    30:61:f7:51:67:7a:44:73:2b:a0:b8:7e:2f:8a:5d:
                    7c:54:a1:ee:02:6c:e5:82:13:92:ad:1b:21:03:e9:
                    16:24:0a:13:09:90:59:40:eb:35:c8:99:51:1d:6a:
                    bf:4a:a0:8f:a1:51:32:3f:b9:73:2f:6a:fd:bf:aa:
                    df:31:5a:ed:24:de:88:13:0f:8b:35:02:38:d2:be:
                    66:ba:98:2e:66:17:c4:f8:62:a9:f2:1f:d6:d3:e6:
                    61:1a:fc:50:89:07:ff:f0:cf:95:16:28:bb:f4:b1:
                    dc:be:73:72:20:bb:04:ff:87:3b:de:87:4e:a7:84:
                    05:3c:d3:5a:f5:61:f1:b6:ee:8f:fe:47:ee:2b:b7:
                    a5:4b:c0:c1:c8:7f:1d:d3:4d:15:a9:fe:66:7d:12:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:00:DD:A5:8C:A8:A3:65:DA:34:10:2B:C5:C8:58:A9:BC:55:86
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401314.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:3b:26:2d:09:02:de:f4:e1:93:80:d5:27:ea:34:78:cf:
         06:c1:5d:82:64:f6:03:1c:37:cc:09:74:8a:4c:e3:7c:68:63:
         ab:cd:b1:c4:8a:e8:af:f9:e1:d2:01:ee:60:9e:ee:bd:27:1c:
         02:73:93:53:30:02:0c:da:42:83:a9:31:ad:90:3f:6a:b8:07:
         e0:f3:7f:64:ed:77:e3:a4:f6:e7:a7:f7:5d:66:f5:22:4a:32:
         87:03:88:0f:fd:5b:f6:3f:31:6a:4d:88:fb:f4:9a:11:cc:97:
         47:69:dd:63:29:5f:ee:9e:44:a9:62:91:26:9d:0c:0a:3d:de:
         80:6e:36:33:3f:e8:3e:df:76:1b:37:98:b4:f4:2c:25:50:7c:
         8b:3c:5b:7a:c6:22:0d:a6:6b:90:6f:43:21:8d:48:e6:31:b9:
         92:de:f2:70:f7:98:8c:62:47:52:1a:0c:fe:6b:d6:9c:89:b7:
         c7:5b:53:b9:3e:06:42:cc:b3:a3:19:a3:40:99:46:77:99:9f:
         4e:50:d0:b4:71:ce:78:e6:ee:6b:a2:f4:78:08:ac:29:c4:d7:
         38:9e:da:e5:bb:bc:ec:e3:0c:82:c8:99:d9:92:d9:b8:4e:fb:
         8c:f7:fa:40:3a:8d:56:12:48:0d:e0:b9:ef:81:79:b4:7a:88:
         96:04:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:02:49 2025 by rpki-client