Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137517.roa
File:                     AS137517.roa (raw, json)
Hash identifier:          nBKnZ33M8keV9iLf5apFAK+kJKrwgcDSfTKYMpqJKW4=
Subject key identifier:   4C:26:51:0F:D4:AE:76:35:56:F1:33:31:F7:E3:4A:DD:08:F4:76:E6
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       093C9B94E7DA75242A9AEBAB8C295B6425EB5A2C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137517.roa
Signing time:             Thu 08 Aug 2024 11:39:36 +0000
ROA not before:           Thu 08 Aug 2024 11:34:36 +0000
ROA not after:            Thu 07 Aug 2025 11:39:36 +0000
asID:                     137517
IP address blocks:        104.234.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3c:9b:94:e7:da:75:24:2a:9a:eb:ab:8c:29:5b:64:25:eb:5a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  8 11:34:36 2024 GMT
            Not After : Aug  7 11:39:36 2025 GMT
        Subject: CN=4C26510FD4AE763556F13331F7E34ADD08F476E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:dd:81:72:ef:e9:70:a7:93:9f:8a:6b:29:
                    e4:ba:fa:73:aa:97:96:81:8a:5c:a1:72:c9:58:82:
                    60:14:2a:09:04:56:09:51:14:4b:67:52:aa:11:e6:
                    d4:76:5e:d3:22:e0:10:26:10:f9:92:ac:36:df:bf:
                    0e:cf:3e:c4:6e:1a:50:fe:d8:01:1e:91:85:ee:6f:
                    84:d0:34:3c:6b:be:af:b1:ed:28:06:a3:e2:cb:99:
                    ee:ec:73:04:04:c9:57:76:eb:ed:47:ff:14:ea:35:
                    36:d3:db:b5:d1:e7:67:99:d4:8e:f1:8e:3d:d7:5a:
                    e6:f1:4e:fa:c2:94:6b:68:f5:25:1f:5f:1b:ea:55:
                    7b:be:f2:aa:4f:2f:e0:04:b0:68:37:74:33:58:46:
                    8f:57:b7:2d:3c:89:59:77:0c:0c:41:b9:ac:f2:7d:
                    3b:92:40:22:25:9d:e9:51:7b:6d:4e:cf:9a:1a:30:
                    1a:b8:87:8a:56:27:ae:92:47:ae:e6:2e:a3:e2:8a:
                    55:d8:b2:db:84:21:22:2b:ee:2a:98:4f:b2:68:65:
                    34:9f:dc:f8:f6:a4:9b:01:8e:2b:97:1e:10:f4:e6:
                    8a:f1:4d:b1:de:3e:c2:d9:cb:92:4b:26:66:bc:d8:
                    63:41:24:10:68:f8:cc:ad:20:0a:d6:3a:25:b9:9d:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:26:51:0F:D4:AE:76:35:56:F1:33:31:F7:E3:4A:DD:08:F4:76:E6
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137517.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:12:00:8e:a2:c7:28:52:cf:df:4a:83:fb:a3:15:32:47:b1:
         15:6e:70:93:f3:14:11:6f:72:25:0e:32:0a:5d:b4:e7:ff:30:
         49:fa:5b:04:62:a9:53:bf:40:fe:7f:ec:d5:f4:cc:e2:8e:f6:
         3a:bd:e8:9e:8b:ea:0b:4a:4f:8e:1f:94:8e:92:86:bd:91:ab:
         f0:e6:75:8e:c8:44:5f:09:b4:86:d1:bc:fe:25:7b:81:3e:82:
         5e:6c:b2:4c:77:59:d8:73:40:b0:ac:c8:23:01:c2:bc:ea:7d:
         5d:22:be:b7:f0:1e:60:0f:fb:e6:0c:78:e5:62:b7:e3:21:0e:
         21:b9:2f:cf:09:c1:b3:ad:ad:99:66:1f:02:c6:75:f3:21:e7:
         fa:da:1f:f0:8d:95:88:5e:76:05:9c:2b:61:5d:9d:ce:a2:2a:
         58:dd:03:b0:e1:b2:af:07:22:09:4d:8e:40:cb:24:92:82:fe:
         c3:d1:3b:1d:8b:1a:45:08:a7:87:24:a1:78:fb:6e:44:15:84:
         75:c2:d8:26:21:3a:4b:c6:6f:0c:3c:41:e7:89:3d:84:cf:26:
         5a:af:32:00:10:4f:24:6f:14:25:29:ec:36:13:4c:45:fe:03:
         0b:33:64:0f:d9:4d:fc:b8:28:20:e1:bd:5d:40:48:24:b6:c6:
         41:a2:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org