Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS204729.roa
File:                     AS204729.roa (raw, json)
Hash identifier:          SAlBlUhKRGKF6+WPpzLLHQAbY3+qhIYJISz+4tb5PAw=
Subject key identifier:   F4:89:54:F3:50:3B:EB:98:93:42:04:C7:BF:7F:B1:19:3A:8D:F8:B2
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3ED8AAEACEF371EB4957C44C9225109BE3C814F9
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS204729.roa
Signing time:             Wed 28 Feb 2024 21:18:40 +0000
ROA not before:           Wed 28 Feb 2024 21:13:40 +0000
ROA not after:            Wed 26 Feb 2025 21:18:40 +0000
asID:                     204729
IP address blocks:        23.156.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d8:aa:ea:ce:f3:71:eb:49:57:c4:4c:92:25:10:9b:e3:c8:14:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 28 21:13:40 2024 GMT
            Not After : Feb 26 21:18:40 2025 GMT
        Subject: CN=F48954F3503BEB98934204C7BF7FB1193A8DF8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:33:05:cb:ca:53:3f:68:ed:00:43:13:9d:13:
                    4a:db:1e:f1:bf:2c:e0:7a:21:e2:6e:c2:25:df:03:
                    fa:92:d1:62:6d:06:8d:53:6f:a9:7e:7a:21:a9:d6:
                    e4:6e:96:46:69:b8:f8:c0:4f:1b:73:93:e2:9f:1f:
                    f9:0a:36:29:6c:35:66:db:2f:b1:22:e4:82:4b:df:
                    82:c7:cf:1d:62:02:9b:c2:43:8d:b3:a5:99:05:7d:
                    f0:dd:2f:d3:15:e2:0e:8c:41:7f:db:7b:dc:c1:16:
                    57:ad:c7:1b:09:ce:25:09:ce:18:ca:22:0a:13:6d:
                    53:2d:70:08:66:06:a7:22:ba:b1:81:bc:58:eb:df:
                    c5:2b:7d:a1:89:68:41:82:88:1a:2e:18:57:3f:de:
                    89:cd:cb:b1:18:8f:b0:09:32:4c:65:ce:3d:46:da:
                    3a:9e:29:86:85:99:ac:12:13:56:d2:8b:87:ee:73:
                    95:78:7c:9c:56:f5:53:9a:1f:49:b2:c8:47:6c:09:
                    69:82:6c:c9:aa:5c:51:62:f0:2d:ce:5a:e1:9f:91:
                    a2:97:ef:85:93:5c:3f:25:06:16:77:02:a3:74:15:
                    3a:f5:a1:76:1f:1f:14:e7:46:0e:86:8e:1b:26:63:
                    99:9d:b5:b6:1d:27:d7:54:36:0b:59:b5:55:61:9f:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:54:F3:50:3B:EB:98:93:42:04:C7:BF:7F:B1:19:3A:8D:F8:B2
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS204729.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:09:9c:39:c7:a6:ac:dd:1b:a5:6b:f0:66:4f:86:77:0c:f5:
         66:99:b1:f6:c7:f7:bf:74:9b:37:8a:94:c2:0d:51:3c:e1:8d:
         fd:f3:31:34:ec:9e:13:c7:c5:8c:ef:37:07:b1:f3:60:5b:e2:
         1a:31:e0:17:eb:f3:c0:72:22:94:d0:e1:70:b5:97:e0:47:55:
         a1:e0:e0:c0:33:db:ac:e1:a9:e1:4c:fc:bd:d9:5d:a8:a7:00:
         2d:95:9d:39:b7:95:f2:80:f5:58:e2:64:0a:37:0b:9d:05:b0:
         d3:b1:b0:06:b2:77:30:23:77:34:ae:fe:17:87:10:f9:b5:c1:
         d3:22:25:8d:16:86:4d:cf:41:39:95:4f:96:da:7f:4d:bc:45:
         b8:0c:50:b7:97:32:0c:ee:91:d9:a3:05:a1:6a:ca:e8:0a:a2:
         f5:4b:1f:5e:ee:06:8d:d7:2f:2f:d6:eb:cc:38:ef:a2:cc:00:
         e9:db:8b:8e:0e:ef:d1:dc:3c:30:67:78:ba:0d:5f:c0:37:f7:
         87:14:64:6f:73:1a:54:a0:56:bd:2b:9a:05:53:a7:fd:4e:5c:
         8a:31:2a:b2:fd:fe:61:e0:99:7b:06:f3:26:33:99:fc:ad:fc:
         45:ac:d4:69:01:ef:03:5b:10:d8:c4:3e:f7:14:c3:b0:b1:7d:
         3d:df:a3:3f
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUPtiq6s7zcetJV8RMkiUQm+PIFPkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwMjI4MjExMzQwWhcNMjUwMjI2MjExODQw
WjAzMTEwLwYDVQQDEyhGNDg5NTRGMzUwM0JFQjk4OTM0MjA0QzdCRjdGQjExOTNB
OERGOEIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jMFy8pTP2jt
AEMTnRNK2x7xvyzgeiHibsIl3wP6ktFibQaNU2+pfnohqdbkbpZGabj4wE8bc5Pi
nx/5CjYpbDVm2y+xIuSCS9+Cx88dYgKbwkONs6WZBX3w3S/TFeIOjEF/23vcwRZX
rccbCc4lCc4YyiIKE21TLXAIZganIrqxgbxY69/FK32hiWhBgogaLhhXP96Jzcux
GI+wCTJMZc49Rto6nimGhZmsEhNW0ouH7nOVeHycVvVTmh9JsshHbAlpgmzJqlxR
YvAtzlrhn5Gil++Fk1w/JQYWdwKjdBU69aF2Hx8U50YOho4bJmOZnbW2HSfXVDYL
WbVVYZ8Z+QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPSJVPNQO+uYk0IEx79/sRk6
jfiyMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIwNDcyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABec8DANBgkqhkiG9w0BAQsFAAOC
AQEARQmcOcemrN0bpWvwZk+Gdwz1Zpmx9sf3v3SbN4qUwg1RPOGN/fMxNOyeE8fF
jO83B7HzYFviGjHgF+vzwHIilNDhcLWX4EdVoeDgwDPbrOGp4Uz8vdldqKcALZWd
ObeV8oD1WOJkCjcLnQWw07GwBrJ3MCN3NK7+F4cQ+bXB0yIljRaGTc9BOZVPltp/
TbxFuAxQt5cyDO6R2aMFoWrK6Aqi9UsfXu4GjdcvL9brzDjvoswA6duLjg7v0dw8
MGd4ug1fwDf3hxRkb3MaVKBWvSuaBVOn/U5cijEqsv3+YeCZewbzJjOZ/K38RazU
aQHvA1sQ2MQ+9xTDsLF9Pd+jPw==
-----END CERTIFICATE-----
Generated at Mon May 6 05:55:37 2024 by rpki-client on console-ams.rpki-client.org