Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62564.roa
File:                     AS62564.roa (raw, json)
Hash identifier:          cha46gjzLoekL6WXiQZgp7TlwmXqjoLHSUMd0csucKY=
Subject key identifier:   CD:70:FF:63:88:BF:4D:FE:9F:0E:F9:35:33:84:EC:55:E2:5C:23:19
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1A7F2EA50AC470AB610A11F00CDA16F89535DE3F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62564.roa
Signing time:             Thu 19 Jun 2025 14:29:44 +0000
ROA not before:           Thu 19 Jun 2025 14:24:44 +0000
ROA not after:            Thu 18 Jun 2026 14:29:44 +0000
asID:                     62564
IP address blocks:        23.95.134.0/24 maxlen: 24
                          172.245.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7f:2e:a5:0a:c4:70:ab:61:0a:11:f0:0c:da:16:f8:95:35:de:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 19 14:24:44 2025 GMT
            Not After : Jun 18 14:29:44 2026 GMT
        Subject: CN=CD70FF6388BF4DFE9F0EF9353384EC55E25C2319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:49:ae:a1:ad:b3:50:e5:e3:0c:a2:5e:39:
                    43:41:1e:91:63:58:6f:5d:0e:17:56:53:d6:cb:77:
                    47:d8:1f:79:a0:c2:a9:58:0a:cc:6e:77:79:94:fa:
                    0f:7c:ea:aa:60:c5:f0:00:c2:3e:87:c5:9b:5e:e8:
                    32:47:92:df:43:db:fa:d7:c5:7a:93:3f:fe:df:32:
                    d6:e4:44:4c:9f:45:9c:d8:55:b1:02:fb:4b:81:dc:
                    35:54:aa:8e:cb:01:f5:06:73:ed:38:3e:41:99:d0:
                    90:26:b1:86:35:3f:ea:67:24:08:ad:ad:e4:12:b6:
                    6a:c8:24:4a:92:a6:46:6b:be:10:23:f3:f2:26:81:
                    a4:60:73:89:b5:e9:2e:7f:62:b7:97:aa:61:21:a1:
                    72:21:09:98:6b:e8:1e:d1:60:39:14:76:1a:9b:ad:
                    e9:da:8a:5e:a5:b4:0e:7f:1e:bc:80:1c:40:f6:ea:
                    c4:12:65:7e:fe:80:24:b8:bb:be:d3:fb:2e:15:02:
                    d1:57:67:46:d8:bc:60:13:3b:ea:5c:d4:26:e8:eb:
                    bb:c7:a8:21:fa:97:7a:71:5c:83:68:23:bc:22:8b:
                    66:74:80:1b:15:6d:ff:86:51:19:74:a0:0d:d2:e2:
                    99:e5:06:57:3f:38:b1:5b:6f:2b:b1:9f:02:4b:38:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:FF:63:88:BF:4D:FE:9F:0E:F9:35:33:84:EC:55:E2:5C:23:19
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62564.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.134.0/24
                  172.245.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:6e:3d:b3:07:e8:87:ec:01:7f:02:be:53:f6:c3:35:1b:5d:
         13:1d:e4:ea:ee:8a:98:d1:89:1c:92:a9:3d:0f:d9:77:b7:b5:
         5c:fa:4e:e0:cf:e1:cf:16:c8:c3:21:10:eb:98:85:61:2e:02:
         df:c7:28:03:c0:86:7d:00:52:f2:6b:e2:3f:81:93:e1:0c:39:
         8b:50:1b:ce:37:e3:08:71:76:cc:54:91:80:a4:ea:8a:ac:48:
         ce:ea:54:63:74:3e:b6:28:b7:c8:92:08:b3:9e:2f:5f:c0:69:
         43:ea:a0:da:4f:cc:95:3a:d1:98:5d:08:47:f1:fc:98:18:72:
         50:2b:62:b7:6f:cf:a7:0b:15:8a:0c:84:cd:15:ea:06:93:36:
         28:81:41:71:a4:81:5c:6a:01:4b:8b:e6:dc:e8:d7:e4:21:d6:
         37:39:05:19:b7:aa:6d:4b:8c:8a:17:55:9e:4d:09:1d:47:fd:
         25:77:a7:4b:88:2a:e9:36:1b:77:78:ef:64:d8:df:05:b7:45:
         d2:ca:b0:b5:1f:8d:a3:cf:10:cb:40:d4:c0:dd:61:87:21:20:
         d1:d8:fd:ed:c7:94:06:7e:e3:e9:52:ae:40:8d:af:71:c7:f4:
         f9:ab:75:b7:a6:20:7a:54:39:90:a6:62:3a:9b:8c:7a:9d:0a:
         43:44:c4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:44:51 2025 by rpki-client