Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
File:                     AS151106.roa (raw, json)
Hash identifier:          jDOPOataHEY5/8ItSz1NkP0veg2H6zACadnnhuaCll8=
Subject key identifier:   DC:B6:A8:C0:50:C7:11:65:3B:3F:99:84:50:FF:54:B1:2B:DC:98:EC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1533BCF1061D1D117F54D28A66B369AB46AFFF9C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
Signing time:             Fri 14 Mar 2025 00:01:55 +0000
ROA not before:           Thu 13 Mar 2025 23:56:55 +0000
ROA not after:            Fri 13 Mar 2026 00:01:55 +0000
asID:                     151106
IP address blocks:        104.234.211.0/24 maxlen: 24
                          104.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 21:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:33:bc:f1:06:1d:1d:11:7f:54:d2:8a:66:b3:69:ab:46:af:ff:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 13 23:56:55 2025 GMT
            Not After : Mar 13 00:01:55 2026 GMT
        Subject: CN=DCB6A8C050C711653B3F998450FF54B12BDC98EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:32:2c:b2:dc:e3:ad:4a:3b:0d:df:03:41:
                    79:1e:3a:87:34:c1:25:43:31:96:0a:ff:9b:0a:f0:
                    1e:cb:6d:02:10:08:33:ce:7a:49:00:5f:52:1b:b0:
                    30:56:0c:3f:b1:5d:09:b4:3e:81:1d:c7:30:15:2d:
                    22:8f:01:a0:3b:1c:34:f6:f1:0b:5d:69:bb:4f:91:
                    8e:19:ff:bb:22:39:ce:8a:76:84:6f:fc:53:7e:3b:
                    d1:48:29:96:a5:76:89:20:ed:af:f1:3b:ac:51:83:
                    c5:f4:a7:15:98:5c:74:9d:f5:b5:74:41:a0:8f:f0:
                    47:5c:6d:be:80:68:1f:bb:e6:8a:5a:ba:7a:a4:4b:
                    f0:92:23:3d:86:81:c8:9c:13:1c:27:04:ba:87:e1:
                    94:03:cc:62:0d:68:c3:10:8a:07:70:de:c2:9d:d9:
                    68:e0:93:5f:16:ae:ae:75:4f:37:c7:98:aa:28:46:
                    ed:6f:69:2b:81:08:4e:56:d8:35:c9:c9:33:0d:83:
                    0b:72:1b:9f:37:ae:5e:20:8a:06:c7:db:93:e9:3e:
                    d8:b0:6e:f3:12:07:da:fe:4d:10:ec:b9:f3:85:4c:
                    c6:cc:83:18:10:0e:f0:47:37:6e:89:60:a8:6a:c6:
                    79:d7:13:b7:d0:0f:59:a4:49:49:ea:67:87:aa:18:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:A8:C0:50:C7:11:65:3B:3F:99:84:50:FF:54:B1:2B:DC:98:EC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.211.0/24
                  104.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:02:fb:03:82:24:95:02:83:8a:70:7e:ac:1a:27:36:ad:
         6e:0c:b7:73:6c:87:89:5f:49:af:19:79:46:cf:cd:0b:b9:a9:
         16:20:df:06:78:d5:d0:e1:9a:22:3f:9c:4a:de:a1:a3:de:1d:
         13:98:69:fe:3f:16:72:f4:0c:a2:f5:cb:4e:0a:de:3d:65:5f:
         84:57:3f:ce:69:f1:09:5e:27:f3:95:90:09:5b:0c:2e:05:88:
         50:6a:0d:14:b8:8e:c2:84:80:e7:81:fe:49:b1:81:fd:7e:75:
         53:3e:e7:bd:0e:7a:de:48:c8:28:8b:86:3c:b1:f1:bc:48:ac:
         1c:67:b7:93:5b:1a:98:e4:ed:e4:79:ff:d5:92:b7:47:c8:3f:
         28:c2:7c:3a:68:44:a8:bd:b7:fe:5a:7a:02:26:29:60:63:fd:
         92:2a:9a:21:69:19:27:7a:bd:fd:5e:42:02:20:57:b9:43:9c:
         cb:2e:cd:06:c3:24:fc:44:63:9e:86:1d:a7:11:a7:1e:22:4c:
         90:07:d7:41:2c:51:4e:05:92:d6:6e:4d:71:92:f8:6e:da:9c:
         17:d7:83:7e:48:ca:3c:b9:cb:59:be:7b:b0:5d:2d:c4:97:f3:
         85:f3:5f:af:d1:01:cd:32:0f:36:2f:c3:f1:31:c0:e0:eb:17:
         a2:9b:e9:a6
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUFTO88QYdHRF/VNKKZrNpq0av/5wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzEzMjM1NjU1WhcNMjYwMzEzMDAwMTU1
WjAzMTEwLwYDVQQDEyhEQ0I2QThDMDUwQzcxMTY1M0IzRjk5ODQ1MEZGNTRCMTJC
REM5OEVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9AyLLLc461K
Ow3fA0F5HjqHNMElQzGWCv+bCvAey20CEAgzznpJAF9SG7AwVgw/sV0JtD6BHccw
FS0ijwGgOxw09vELXWm7T5GOGf+7IjnOinaEb/xTfjvRSCmWpXaJIO2v8TusUYPF
9KcVmFx0nfW1dEGgj/BHXG2+gGgfu+aKWrp6pEvwkiM9hoHInBMcJwS6h+GUA8xi
DWjDEIoHcN7Cndlo4JNfFq6udU83x5iqKEbtb2krgQhOVtg1yckzDYMLchufN65e
IIoGx9uT6T7YsG7zEgfa/k0Q7LnzhUzGzIMYEA7wRzduiWCoasZ51xO30A9ZpElJ
6meHqhgrFQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFNy2qMBQxxFlOz+ZhFD/VLEr
3JjsMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE1MTEwNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjq0wMEAGjq1zANBgkqhkiG9w0B
AQsFAAOCAQEAFKsC+wOCJJUCg4pwfqwaJzatbgy3c2yHiV9Jrxl5Rs/NC7mpFiDf
BnjV0OGaIj+cSt6ho94dE5hp/j8WcvQMovXLTgrePWVfhFc/zmnxCV4n85WQCVsM
LgWIUGoNFLiOwoSA54H+SbGB/X51Uz7nvQ563kjIKIuGPLHxvEisHGe3k1samOTt
5Hn/1ZK3R8g/KMJ8OmhEqL23/lp6AiYpYGP9kiqaIWkZJ3q9/V5CAiBXuUOcyy7N
BsMk/ERjnoYdpxGnHiJMkAfXQSxRTgWS1m5NcZL4btqcF9eDfkjKPLnLWb57sF0t
xJfzhfNfr9EBzTIPNi/D8THA4OsXopvppg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:35 2025 by rpki-client