Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51847.roa
File:                     AS51847.roa (raw, json)
Hash identifier:          YTXf8VOWtfrU6JXvXhzYWBFgC1GixsuuAna3cjig2Ss=
Subject key identifier:   06:2B:D0:69:45:F2:39:A8:EE:A9:68:B2:4E:0B:4D:F1:30:9F:CA:35
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       66FB31A066E95E66AE3DEF7277FFD75E04C48B8D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51847.roa
Signing time:             Sat 23 Aug 2025 03:29:44 +0000
ROA not before:           Sat 23 Aug 2025 03:24:44 +0000
ROA not after:            Sat 22 Aug 2026 03:29:44 +0000
asID:                     51847
IP address blocks:        23.94.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fb:31:a0:66:e9:5e:66:ae:3d:ef:72:77:ff:d7:5e:04:c4:8b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 23 03:24:44 2025 GMT
            Not After : Aug 22 03:29:44 2026 GMT
        Subject: CN=062BD06945F239A8EEA968B24E0B4DF1309FCA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:a9:98:be:68:60:44:71:64:d5:48:07:95:
                    d7:0c:9a:69:7d:11:0c:6a:fc:86:9f:e1:47:89:31:
                    3f:96:fe:2b:55:fd:41:21:f0:7a:68:c1:4f:66:7b:
                    01:24:6b:b9:72:ec:35:54:f4:86:18:a0:22:71:9a:
                    e6:a7:06:1b:20:f5:76:5f:66:78:4e:c1:6d:fa:a6:
                    50:da:7a:b3:d3:75:dd:29:a5:15:6a:3f:a9:e4:39:
                    e2:b5:41:43:66:f5:b0:cb:39:e0:43:f5:4b:5e:06:
                    eb:54:9f:bd:98:bd:10:80:b7:ff:0f:f3:1a:b6:5a:
                    78:d8:bf:27:dc:db:ec:fa:b7:b8:d4:de:f5:c6:ea:
                    79:c8:7c:73:a7:3e:8d:f5:b7:8f:8b:e6:f9:81:c1:
                    b8:b9:2b:09:98:d9:28:13:b4:6e:ae:52:34:40:0c:
                    d3:5a:36:99:85:4a:26:97:19:f0:12:03:fe:78:7b:
                    5f:aa:bc:d1:b4:2a:63:5d:4f:ad:ad:fc:63:86:b9:
                    68:1f:6e:26:d9:4f:24:1e:fd:92:55:ed:be:c1:58:
                    d6:94:fd:44:31:44:e7:1f:25:84:55:72:53:04:91:
                    1f:c1:03:0d:0a:11:90:38:bd:14:f7:71:26:c3:a0:
                    cf:60:da:2f:77:dc:0a:29:9c:d8:8e:cd:88:92:fd:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2B:D0:69:45:F2:39:A8:EE:A9:68:B2:4E:0B:4D:F1:30:9F:CA:35
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b6:a9:4a:d9:83:0d:64:26:90:0c:a7:d6:2d:7f:83:1a:48:
         0f:6f:0a:ad:1e:03:fb:95:06:09:30:11:4f:9c:79:18:99:31:
         82:86:c2:52:1a:6c:93:75:6f:f4:2b:f9:3b:bf:8b:87:64:35:
         de:63:b9:c5:4e:06:3e:3a:5a:2b:a9:38:7d:81:0c:f9:d8:95:
         10:73:41:26:01:a7:ce:ca:b6:ef:dc:0f:03:16:6d:b8:d2:e5:
         a1:d4:7f:3f:5d:8d:97:a1:60:0e:d6:ff:fe:d6:1f:38:a0:aa:
         f0:d5:6c:92:aa:20:46:38:9c:f6:26:e3:2a:f1:1a:2c:9b:31:
         ed:dd:cc:82:4b:da:43:02:06:d4:3b:c4:06:7b:73:2e:f1:02:
         4b:54:fc:69:41:4e:87:40:42:e6:f8:9b:ef:97:77:5a:ac:b8:
         bd:00:f1:53:0a:5e:f7:5f:44:6d:d7:e6:bb:9c:ce:6a:cc:09:
         93:58:5b:27:ff:40:00:5e:1b:f4:2b:9f:04:72:c9:41:ce:2c:
         db:9d:74:cd:b3:7d:cc:37:f8:f8:2b:fc:94:73:05:e5:77:0e:
         ca:48:51:5b:9b:b4:ad:00:7a:68:d3:da:14:46:91:14:82:8b:
         f4:fa:86:70:ee:7c:b4:4a:7e:f9:73:10:fc:a1:71:65:7d:40:
         bb:fd:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:54 2025 by rpki-client