Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133296.roa
File:                     AS133296.roa (raw, json)
Hash identifier:          MzYZ67y3XB0o3tGQ8VpLc8uFGiOCfU+sdrfNoTiYgnM=
Subject key identifier:   FE:89:4C:9E:5F:EA:B4:8C:09:A3:88:D9:AC:02:51:E3:A0:9A:1E:C8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       29091C470E7BB02B4C9A27B6E5FBADA147CE3634
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133296.roa
Signing time:             Fri 15 Nov 2024 11:49:21 +0000
ROA not before:           Fri 15 Nov 2024 11:44:21 +0000
ROA not after:            Fri 14 Nov 2025 11:49:21 +0000
asID:                     133296
IP address blocks:        104.234.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:09:1c:47:0e:7b:b0:2b:4c:9a:27:b6:e5:fb:ad:a1:47:ce:36:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 15 11:44:21 2024 GMT
            Not After : Nov 14 11:49:21 2025 GMT
        Subject: CN=FE894C9E5FEAB48C09A388D9AC0251E3A09A1EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:6b:34:1f:e6:4f:5b:84:9b:f2:09:cf:35:
                    9d:fd:f9:5f:f0:e1:16:b2:63:a3:0d:aa:ad:64:f5:
                    e4:68:64:ab:8e:de:71:9a:b0:08:62:1b:55:41:10:
                    e7:f0:51:07:da:69:ba:ed:21:13:f3:45:95:74:03:
                    94:0f:d0:8a:de:ea:df:17:4e:3e:25:af:eb:98:81:
                    81:f4:11:03:4f:f6:2d:f5:b6:cd:0d:56:92:3a:bf:
                    e7:d8:71:ea:de:22:f7:fe:49:81:da:b6:8c:46:e0:
                    90:0c:d2:1d:d8:d5:ec:82:7c:ad:1f:8c:54:e2:60:
                    71:0c:63:e7:63:18:78:54:25:d0:6b:35:7c:97:e3:
                    a2:1b:00:b2:16:47:1f:81:80:09:b6:c4:11:2b:18:
                    f7:94:e2:7f:60:41:a8:20:54:63:00:fb:0b:5a:3a:
                    79:bc:04:2e:af:bb:74:cf:b2:c6:00:7b:f2:24:18:
                    21:2a:0f:d6:8e:b8:ed:dd:02:69:ca:4d:25:8f:2d:
                    69:62:29:4a:39:2f:8c:06:33:44:1a:3a:9f:25:29:
                    ff:2b:c9:8a:54:9e:0b:5b:84:b0:87:5b:ea:86:af:
                    9e:95:27:26:9a:59:cd:b6:35:1d:c3:0d:45:1c:b0:
                    1f:c3:2d:e4:81:16:bc:38:67:8e:ac:a1:4b:02:4f:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:89:4C:9E:5F:EA:B4:8C:09:A3:88:D9:AC:02:51:E3:A0:9A:1E:C8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:15:b7:44:52:5e:fa:75:be:fe:ca:7a:a8:52:98:b3:37:63:
         ab:84:0b:a1:94:e3:0b:fc:59:ef:c6:c8:50:e4:84:77:8d:70:
         cd:2e:c3:67:06:7e:d1:c8:29:57:11:bb:c2:b0:89:11:11:f3:
         7f:30:b2:be:f0:a6:dd:a5:27:d5:9c:85:a1:3f:53:c1:e1:5a:
         63:1d:60:ab:89:89:b5:a6:cd:64:3e:d1:30:da:08:ee:c3:6b:
         30:1a:aa:3e:c1:53:70:2b:c2:75:01:48:4f:ce:ba:44:c9:e8:
         73:83:98:ac:a7:68:be:ea:0d:ca:23:63:34:13:fd:b3:26:c8:
         6f:05:64:a3:a6:e2:1e:97:c5:8e:cd:c7:77:b9:79:5f:08:7a:
         4d:bd:e1:8c:39:2a:f2:12:3b:8b:72:44:a5:86:c8:0c:43:dd:
         ba:0a:06:80:f5:40:39:f4:06:21:bf:c4:5f:fc:67:b5:73:9d:
         61:1c:79:1e:5a:05:46:33:9b:8b:19:ff:e1:5e:a4:f8:6e:07:
         47:db:01:09:f2:6e:69:93:17:4e:1d:d0:10:03:65:81:85:c7:
         31:46:09:3c:ba:c2:e3:97:fc:48:34:ca:0d:81:aa:f8:ef:bd:
         36:93:6f:4b:ad:95:58:34:61:f0:04:c5:b2:ba:49:17:39:3c:
         2e:ec:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org