Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133296.roa
File:                     AS133296.roa (raw, json)
Hash identifier:          uHO2jxQVWQWgSMA46b/OnC1V/e2O4u6fITVBQeg14no=
Subject key identifier:   55:F3:C2:6F:BE:45:09:91:D0:FD:17:A6:B7:4A:7A:A6:AB:8F:1C:3E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       28842E368D70A6D27A28FE93005FF94789452585
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133296.roa
Signing time:             Fri 15 Dec 2023 11:29:33 +0000
ROA not before:           Fri 15 Dec 2023 11:24:33 +0000
ROA not after:            Fri 13 Dec 2024 11:29:33 +0000
asID:                     133296
IP address blocks:        104.234.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:2e:36:8d:70:a6:d2:7a:28:fe:93:00:5f:f9:47:89:45:25:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 15 11:24:33 2023 GMT
            Not After : Dec 13 11:29:33 2024 GMT
        Subject: CN=55F3C26FBE450991D0FD17A6B74A7AA6AB8F1C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:f9:02:d1:9f:87:76:ce:3d:5d:5a:21:74:
                    6d:4f:8b:13:57:b5:e5:1e:39:d1:a0:27:fc:9d:bb:
                    77:f1:75:d3:4e:31:ad:56:ec:00:0a:fa:55:89:ac:
                    c3:3c:8f:c5:13:58:f7:09:44:25:9a:6e:49:da:07:
                    81:1d:cf:fd:d9:71:0c:39:80:7a:b3:df:3e:54:d7:
                    b8:69:07:25:01:a0:37:5a:4f:19:58:43:00:50:95:
                    09:85:2c:43:7c:ea:7f:87:0f:e6:77:f8:e2:e4:bc:
                    dd:f5:4e:5b:14:56:40:1a:81:ea:f3:7c:86:16:06:
                    95:3e:d2:a7:46:66:89:28:85:08:e5:0f:1a:9b:d1:
                    d0:0c:ab:3c:a7:dc:7c:33:46:cc:d6:64:07:6a:16:
                    64:3c:6e:28:3d:b6:9b:f6:08:10:a4:80:88:b9:59:
                    a8:43:4e:37:c5:3a:af:79:5a:31:fd:05:32:65:b7:
                    a1:c2:8b:76:9b:e1:5a:20:d9:eb:41:01:5b:65:67:
                    35:4e:60:d8:5b:80:68:61:f2:e8:90:0e:62:53:8c:
                    77:02:79:08:1c:90:20:ed:0c:67:a5:c8:53:c8:36:
                    ea:d6:b6:3d:8f:ea:4d:b6:10:df:b7:73:60:e1:b4:
                    a7:70:fe:c1:ec:d6:2d:4e:f4:15:70:e1:1f:13:37:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F3:C2:6F:BE:45:09:91:D0:FD:17:A6:B7:4A:7A:A6:AB:8F:1C:3E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:a7:71:91:40:60:c2:8d:d6:83:26:3f:11:7b:1d:7b:05:
         41:df:10:52:24:9a:02:45:5c:b3:c3:f6:95:97:19:f6:98:f7:
         3a:66:4d:6d:88:fa:b2:ea:46:ea:04:a7:7f:8c:7b:bc:27:de:
         33:3a:11:0c:fa:cd:0a:9a:83:fe:80:60:65:90:b2:ae:80:2c:
         63:24:06:a3:ca:ca:fc:23:4c:a0:ef:16:30:00:a4:ea:c3:42:
         6a:11:5d:38:dc:b4:e3:26:70:b7:50:da:72:6e:e7:3c:19:fd:
         56:d2:ac:58:ce:1f:e7:fd:76:b7:d1:d0:73:ac:1a:67:17:0d:
         6a:6a:83:30:f6:4f:18:cd:19:47:fd:58:cf:05:1b:1a:b5:c3:
         fd:d4:4c:61:34:c7:4a:94:e5:0e:e2:2e:92:d7:66:2e:08:94:
         5a:4b:35:95:76:c0:a8:9c:70:0d:65:5c:60:3b:d0:cf:5c:1c:
         26:1a:d4:e0:22:d4:5e:ee:04:d0:30:c7:c8:6a:d0:2e:91:b0:
         c2:aa:7e:56:19:c5:aa:77:52:1a:91:62:b0:8d:30:26:cd:a9:
         91:38:92:4e:4c:12:a2:8d:3e:9f:97:83:e9:db:8b:73:bd:4e:
         69:57:d9:bc:e0:b2:e5:78:05:b2:6b:d4:8e:0c:6f:39:2e:c6:
         3b:bf:04:60
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUKIQuNo1wptJ6KP6TAF/5R4lFJYUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMjE1MTEyNDMzWhcNMjQxMjEzMTEyOTMz
WjAzMTEwLwYDVQQDEyg1NUYzQzI2RkJFNDUwOTkxRDBGRDE3QTZCNzRBN0FBNkFC
OEYxQzNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvz5AtGfh3bO
PV1aIXRtT4sTV7XlHjnRoCf8nbt38XXTTjGtVuwACvpViazDPI/FE1j3CUQlmm5J
2geBHc/92XEMOYB6s98+VNe4aQclAaA3Wk8ZWEMAUJUJhSxDfOp/hw/md/ji5Lzd
9U5bFFZAGoHq83yGFgaVPtKnRmaJKIUI5Q8am9HQDKs8p9x8M0bM1mQHahZkPG4o
Pbab9ggQpICIuVmoQ043xTqveVox/QUyZbehwot2m+FaINnrQQFbZWc1TmDYW4Bo
YfLokA5iU4x3AnkIHJAg7QxnpchTyDbq1rY9j+pNthDft3Ng4bSncP7B7NYtTvQV
cOEfEzc4wQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFXzwm++RQmR0P0XprdKeqar
jxw+MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzMzI5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjquDANBgkqhkiG9w0BAQsFAAOC
AQEAerGncZFAYMKN1oMmPxF7HXsFQd8QUiSaAkVcs8P2lZcZ9pj3OmZNbYj6supG
6gSnf4x7vCfeMzoRDPrNCpqD/oBgZZCyroAsYyQGo8rK/CNMoO8WMACk6sNCahFd
ONy04yZwt1Dacm7nPBn9VtKsWM4f5/12t9HQc6waZxcNamqDMPZPGM0ZR/1YzwUb
GrXD/dRMYTTHSpTlDuIuktdmLgiUWks1lXbAqJxwDWVcYDvQz1wcJhrU4CLUXu4E
0DDHyGrQLpGwwqp+VhnFqndSGpFisI0wJs2pkTiSTkwSoo0+n5eD6duLc71OaVfZ
vOCy5XgFsmvUjgxvOS7GO78EYA==
-----END CERTIFICATE-----
Generated at Thu May 16 18:25:39 2024 by rpki-client on console-fra.rpki-client.org