Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
File:                     AS133398.roa (raw, json)
Hash identifier:          UdIsZ7Q55n53ZBW4b6IP6uDkkzmrQ6rvr68w1eFUWzA=
Subject key identifier:   51:80:80:57:A8:FC:AA:FF:35:C2:61:C6:5E:C4:7F:AD:5F:B9:14:03
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       13884527590A9CE04B87AA4263F6672857B025C8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
Signing time:             Thu 01 Feb 2024 11:56:56 +0000
ROA not before:           Thu 01 Feb 2024 11:51:56 +0000
ROA not after:            Thu 30 Jan 2025 11:56:56 +0000
asID:                     133398
IP address blocks:        104.234.58.0/24 maxlen: 24
                          104.234.198.0/24 maxlen: 24
                          104.234.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 21:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:88:45:27:59:0a:9c:e0:4b:87:aa:42:63:f6:67:28:57:b0:25:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb  1 11:51:56 2024 GMT
            Not After : Jan 30 11:56:56 2025 GMT
        Subject: CN=51808057A8FCAAFF35C261C65EC47FAD5FB91403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:fe:98:d1:dd:9f:71:a5:54:b6:fd:9b:af:
                    bd:0b:9e:3a:d4:67:31:4a:8b:25:6f:9f:e9:9c:f1:
                    8b:b8:0c:f2:2f:66:d2:f0:4a:48:f4:e6:9c:e6:87:
                    e3:24:a7:20:ff:92:28:fd:00:c5:be:bc:f1:0a:c0:
                    dc:47:dc:03:89:40:39:b7:64:d1:ca:08:96:c7:b7:
                    ec:6a:5b:f7:7d:2e:c7:74:bb:32:21:21:2a:bb:6a:
                    71:ab:ba:e1:8c:97:1b:bc:06:d1:a8:5b:3d:11:2e:
                    5a:d2:cc:46:a0:a0:3f:01:16:7c:02:13:a7:7c:a4:
                    4c:63:04:1d:4a:af:96:9d:f0:1d:44:9d:f9:ed:b8:
                    ef:72:7e:25:69:92:0f:be:a2:5d:fb:2e:f7:66:2e:
                    74:55:79:0a:63:6c:4f:3a:c1:db:ca:4a:0a:95:41:
                    77:47:a3:ef:99:3c:f2:bc:b4:da:ca:64:4a:2b:f4:
                    e1:25:f5:03:e4:e4:e3:50:bf:88:1e:38:37:ac:af:
                    d5:b7:d2:67:7f:07:91:eb:9c:a2:52:bc:72:1c:5a:
                    49:84:2a:21:d6:84:b5:70:cc:d0:3f:ec:69:8c:3a:
                    a3:40:3d:63:15:33:99:23:2c:b3:d6:f0:ee:21:15:
                    4e:b8:12:1c:cb:c1:67:e3:49:3e:e0:a8:15:ff:80:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:80:80:57:A8:FC:AA:FF:35:C2:61:C6:5E:C4:7F:AD:5F:B9:14:03
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.58.0/24
                  104.234.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:7c:75:cc:2f:a4:96:cd:91:ae:c6:32:96:10:ba:99:c1:
         0c:7a:05:f4:6c:00:11:04:d0:29:eb:61:14:82:29:3d:e8:78:
         92:47:d4:21:9a:2b:02:2c:0f:d9:c8:c1:0a:6f:6c:2b:d5:d1:
         4d:34:4e:af:86:e4:f5:b9:25:d9:bc:95:19:98:5d:26:aa:50:
         3b:f0:11:75:8d:c6:c0:b1:e2:e2:04:61:05:07:19:c1:44:3c:
         40:8d:3e:4d:10:12:ea:eb:72:2a:cf:08:01:dc:18:4a:c1:5c:
         a1:f0:f0:fd:7a:e1:7c:a7:32:21:02:d0:20:65:98:ea:3b:f7:
         d3:04:c5:25:1e:d6:df:ee:66:7a:b5:6e:14:f0:b1:3f:ae:94:
         33:ee:85:ab:b5:ee:50:e2:ee:14:8d:aa:c4:f4:e1:a2:95:09:
         57:fe:e6:0c:38:65:5c:6c:1d:77:d2:c5:fa:b9:8f:b1:82:67:
         30:57:81:00:7d:4a:4b:d8:97:dd:13:c5:ea:51:bb:40:74:25:
         d7:53:44:df:87:f3:f9:97:04:29:35:e6:3f:cd:2a:94:85:31:
         88:41:01:c9:35:57:db:be:64:fb:1e:f6:a1:c4:32:41:47:f0:
         3b:30:a9:e3:55:51:f4:84:63:9e:d0:1c:e3:b4:79:09:48:d1:
         4a:53:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:11:52 2024 by rpki-client on console-fra.rpki-client.org