Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          9UHAFNFo8Aog8afhnVzz575GV6dDlxRE0+ICJlJE7Q0=
Subject key identifier:   7E:6A:41:19:D0:C8:56:61:16:5E:29:42:21:74:5D:4B:B0:E7:A9:94
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2CB2B9823A7DC1F64E71CCAAE8998F915CECC41D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa
Signing time:             Sat 23 Sep 2023 02:05:46 +0000
ROA not before:           Sat 23 Sep 2023 02:00:46 +0000
ROA not after:            Sat 21 Sep 2024 02:05:46 +0000
asID:                     13335
IP address blocks:        104.234.63.0/24 maxlen: 24
                          104.234.65.0/24 maxlen: 24
                          104.234.189.0/24 maxlen: 24
                          104.234.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 18:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b2:b9:82:3a:7d:c1:f6:4e:71:cc:aa:e8:99:8f:91:5c:ec:c4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 23 02:00:46 2023 GMT
            Not After : Sep 21 02:05:46 2024 GMT
        Subject: CN=7E6A4119D0C85661165E294221745D4BB0E7A994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:38:7a:95:5b:27:77:fe:9e:31:40:3e:9b:81:
                    4f:24:5f:ee:e4:91:30:53:48:32:e2:95:d1:b0:42:
                    31:2f:b5:91:cd:6c:9c:7c:b4:83:73:c5:20:65:bc:
                    ef:63:be:0c:7d:51:00:28:46:07:1b:30:a7:03:5a:
                    21:24:37:40:80:68:87:70:f0:8b:53:89:cb:28:69:
                    e2:2d:6c:74:de:15:f2:7f:99:00:59:c5:51:7d:76:
                    e0:aa:2c:15:8d:01:b9:46:33:be:60:37:04:e3:91:
                    86:5a:a4:08:53:fe:32:1e:cb:f0:2f:23:c4:12:d8:
                    78:a2:37:85:be:02:e5:c5:ac:7a:6a:90:01:98:47:
                    f5:7f:98:62:ba:44:75:17:5d:05:ce:5b:f2:68:6c:
                    8e:bc:1d:50:ca:e9:c3:4f:f7:29:22:60:76:e4:14:
                    00:09:5c:52:85:13:1b:ac:5b:ad:90:49:98:f4:73:
                    21:37:84:c7:62:98:f0:18:65:9f:bb:3c:46:2e:21:
                    8f:24:d1:2e:bc:72:2c:bf:e8:62:f4:2c:69:1d:15:
                    fd:6a:f3:72:20:7a:a0:93:4a:9e:20:0f:36:ac:26:
                    b9:84:89:2c:1c:fc:c7:db:28:7f:f6:38:e9:84:f7:
                    5e:e7:1c:bd:cc:24:d4:f9:9d:ba:a8:45:fc:ff:08:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:41:19:D0:C8:56:61:16:5E:29:42:21:74:5D:4B:B0:E7:A9:94
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.63.0/24
                  104.234.65.0/24
                  104.234.189.0/24
                  104.234.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:60:aa:2f:96:7f:0d:1c:5e:d8:00:20:7b:47:c8:e5:f1:
         f0:40:b6:c1:e1:2a:3a:d3:1c:ac:56:b8:03:ae:7c:87:cd:b0:
         5e:5b:db:2e:39:93:4e:85:27:2e:1f:ba:7e:02:d8:6e:4c:93:
         61:56:7d:fe:0a:24:b0:11:78:5e:fa:eb:7d:87:c2:9d:41:57:
         3e:c5:46:22:9a:2a:80:02:68:d5:c0:f4:9b:86:32:60:84:d5:
         a1:4c:8f:a9:2a:27:e7:31:8f:74:36:b9:22:4c:7c:3b:f0:38:
         ff:f9:7f:b8:45:86:88:2e:02:36:9d:7a:d3:c8:e1:1a:83:30:
         1d:97:b2:b0:28:e3:22:0a:62:e1:3b:a3:8e:2f:7b:87:22:54:
         0e:73:63:ae:92:de:1d:b8:9e:04:12:cc:af:a8:78:2c:cd:81:
         41:e0:0b:60:67:d5:81:74:d8:91:87:e8:0a:71:b0:6a:84:a6:
         ad:91:af:0a:56:cb:58:95:4e:2d:b6:b5:07:a3:3a:59:9e:77:
         c9:05:3a:75:d4:7d:5b:60:3d:3d:bf:a8:c0:5f:e1:f4:eb:65:
         a2:9f:b2:06:39:4f:b8:ea:fa:be:f0:f7:2d:3e:f1:98:d9:05:
         cf:b3:f7:a1:cd:95:15:13:de:13:33:22:6f:f8:45:7e:cd:1b:
         96:e1:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:08:11 2024 by rpki-client on console-fra.rpki-client.org