Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa
File:                     AS13737.roa (raw, json)
Hash identifier:          Sdk812Sd7KfpKw+WtkSH4pSCZMYlIotTD2ZlOD+Wq9Q=
Subject key identifier:   F5:5D:69:61:01:CA:1D:94:0A:DA:BC:A3:0B:53:0D:73:9A:6E:CA:4B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       46C4F5B378380CFFBED8535F154E07AF7516381B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa
Signing time:             Tue 14 May 2024 22:01:15 +0000
ROA not before:           Tue 14 May 2024 21:56:15 +0000
ROA not after:            Tue 13 May 2025 22:01:15 +0000
asID:                     13737
IP address blocks:        104.234.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c4:f5:b3:78:38:0c:ff:be:d8:53:5f:15:4e:07:af:75:16:38:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 14 21:56:15 2024 GMT
            Not After : May 13 22:01:15 2025 GMT
        Subject: CN=F55D696101CA1D940ADABCA30B530D739A6ECA4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:a4:1d:46:9c:88:38:a2:5c:82:4c:4b:da:
                    a6:78:bf:8c:8f:56:f9:d9:fe:94:f6:c6:32:c8:da:
                    3f:74:60:f6:6e:ae:8f:7e:a3:ab:48:18:cb:78:7f:
                    1d:f8:c2:a8:1f:e3:57:77:c9:a8:2d:04:40:e1:23:
                    1a:9e:e1:d5:04:fc:f8:e5:f9:6c:4d:27:2d:74:f2:
                    8e:03:f1:b0:e1:df:87:1b:3b:41:7c:0f:5b:69:e5:
                    bc:0f:df:42:68:2a:d7:64:61:7d:25:30:55:a2:bc:
                    0f:fb:b4:e6:a4:37:cc:66:cd:94:71:45:d0:af:74:
                    c4:2e:68:4c:42:82:fd:2c:6f:c6:ec:c7:de:19:08:
                    c3:13:57:01:68:0b:24:f2:aa:5e:02:84:87:c4:55:
                    54:96:bc:78:e1:5b:d3:a4:ea:da:9d:c8:db:37:0a:
                    88:16:9a:15:79:20:5b:87:3d:33:47:e9:a3:15:e9:
                    d3:4b:d9:38:03:5a:c6:00:6b:6f:39:30:e6:f3:6a:
                    50:71:06:a9:0b:e5:3f:78:fd:41:ce:5f:c9:70:8d:
                    32:1e:1e:76:89:96:8b:89:ea:dc:c6:7b:68:d4:72:
                    48:f9:7d:a3:73:28:8b:d7:34:eb:0f:5b:7a:9e:64:
                    d5:97:4c:c8:1c:39:6d:b6:b2:3a:0e:de:40:af:f9:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:69:61:01:CA:1D:94:0A:DA:BC:A3:0B:53:0D:73:9A:6E:CA:4B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:c7:9f:43:c3:70:6f:8e:4d:7f:70:7d:64:3b:41:57:8f:
         12:c9:b8:04:e8:31:9f:2e:f1:28:d2:59:f1:89:d8:df:d8:38:
         44:11:bc:2e:bc:8e:15:9b:c4:5a:a4:37:93:e9:8b:48:9a:89:
         5b:70:02:f1:21:db:f6:3f:7c:85:f7:cf:07:0b:f8:a2:65:f3:
         22:0f:70:7c:92:d1:5e:a8:ac:a7:7f:ea:f4:1b:12:3d:9a:64:
         38:99:f9:19:46:e3:b2:0f:4d:d5:20:5c:11:0e:a8:f9:5f:fd:
         da:58:d0:12:ec:2d:ca:15:3e:f5:17:6b:48:20:a9:79:1a:ab:
         d6:be:07:aa:34:5e:6a:16:18:54:0b:44:18:9a:1c:17:0e:61:
         d5:56:8a:c7:81:2a:77:7d:7f:7e:ff:dd:9d:74:61:e8:21:95:
         26:1f:4b:ad:4d:8c:d9:d0:ff:c9:06:30:f2:37:b4:f9:61:29:
         be:11:49:8f:c9:cd:ad:87:77:89:26:c6:f8:23:ef:24:49:29:
         b4:f5:4b:0a:94:38:aa:be:34:60:44:6a:bb:27:c4:4d:c9:91:
         00:4b:50:5c:d6:77:95:fe:57:62:3d:2d:43:4e:1c:b6:9f:90:
         52:87:78:c4:6c:9b:36:7d:b7:c5:8b:61:c6:2d:db:2e:3a:42:
         23:09:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:07 2024 by rpki-client on console-fra.rpki-client.org