Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32526.roa
File:                     AS32526.roa (raw, json)
Hash identifier:          hkZri3V7jkfm3c+ZXqYH524vsauGSaWFAmEZtyN0nf8=
Subject key identifier:   BB:AB:2F:6A:15:12:EC:72:20:3E:33:D5:71:8D:72:0A:FA:C1:BC:F4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6496F53ADAA01A7C9F1E02006D467B64BB465AA0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32526.roa
Signing time:             Thu 06 Jun 2024 05:55:09 +0000
ROA not before:           Thu 06 Jun 2024 05:50:09 +0000
ROA not after:            Thu 05 Jun 2025 05:55:09 +0000
asID:                     32526
IP address blocks:        104.234.62.0/24 maxlen: 24
                          206.53.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 14:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:96:f5:3a:da:a0:1a:7c:9f:1e:02:00:6d:46:7b:64:bb:46:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  6 05:50:09 2024 GMT
            Not After : Jun  5 05:55:09 2025 GMT
        Subject: CN=BBAB2F6A1512EC72203E33D5718D720AFAC1BCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:04:05:4d:8e:04:ce:33:28:23:1a:0a:83:
                    5b:bf:6d:dc:f2:40:a4:de:b0:5c:0a:35:e5:1f:6a:
                    99:b8:2b:d7:40:a7:8a:c2:93:ed:13:ee:54:74:29:
                    aa:55:a1:db:af:d7:b8:9b:1b:bc:c6:49:7b:68:bd:
                    58:8c:e2:a0:59:d8:e4:76:a3:03:bc:72:50:45:66:
                    bd:db:5d:23:48:5c:9c:08:88:ad:7b:05:6f:d5:22:
                    63:06:77:11:34:5e:65:93:2a:88:8d:90:ab:6a:11:
                    74:a0:ba:d9:e2:48:5a:8c:a9:30:cd:b4:f7:b5:22:
                    b1:e6:44:6c:c4:39:78:3c:d0:0b:b0:73:48:34:40:
                    b1:c9:af:03:d6:51:1c:e4:0a:e7:51:ff:49:86:cd:
                    68:49:3f:ce:46:28:27:7c:dc:d1:85:aa:65:33:50:
                    eb:72:2d:a4:ee:89:dd:9a:18:44:64:a2:84:5a:85:
                    2c:a0:25:ce:91:1d:17:a8:35:16:4a:7e:d4:16:a8:
                    13:59:a4:1d:ba:c7:93:68:ee:3d:43:cd:54:14:bf:
                    5d:13:f1:86:13:4c:5d:a3:f0:24:24:56:52:79:55:
                    97:60:10:5c:65:d9:de:24:97:5e:14:69:e0:72:9f:
                    ac:02:e3:e2:4c:1f:81:1c:1c:c3:9c:27:a5:fc:22:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AB:2F:6A:15:12:EC:72:20:3E:33:D5:71:8D:72:0A:FA:C1:BC:F4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32526.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.62.0/24
                  206.53.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:94:04:ff:4b:8c:8f:85:31:b7:4b:b8:38:8f:1f:bd:e0:
         f2:09:ee:e6:3c:27:7d:5e:9b:24:11:b4:5a:9e:1b:9a:2c:19:
         34:f2:da:02:e3:22:34:ae:35:8b:4b:a4:8c:44:15:47:9d:bf:
         bf:68:af:09:55:93:cb:9b:24:7e:a5:6b:c3:78:57:4b:04:1f:
         88:06:79:88:3c:76:76:d6:5c:dd:f7:a2:40:61:c5:81:86:08:
         44:af:e5:f8:ab:2d:be:8e:1e:93:90:c1:c2:99:a7:d9:e2:d3:
         5a:6e:09:bc:9b:54:13:61:fe:4a:7e:11:ad:b1:c1:5a:8f:32:
         50:84:b0:a4:77:d1:a3:ec:0a:76:61:8f:f8:ca:b0:ac:17:8a:
         75:fb:9d:8d:c2:8f:ed:54:1f:6f:72:0b:fa:d4:ed:2e:06:31:
         1f:07:39:0d:95:12:4e:f4:20:55:4a:63:d8:89:95:a4:ff:e2:
         32:5f:fa:56:bc:3c:42:16:ce:90:f8:fc:4d:33:c3:06:31:ec:
         45:47:d8:89:ba:3f:50:25:06:a0:38:e1:93:d4:c9:a5:a4:3c:
         dc:e0:69:b2:d9:7a:6e:cf:d6:2d:4a:ef:40:60:da:78:b6:81:
         62:be:7b:d4:c0:e5:54:e1:dc:8c:95:2c:75:cd:fb:fb:45:91:
         6b:c5:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:27 2024 by rpki-client on console-fra.rpki-client.org