Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139482.roa
File:                     AS139482.roa (raw, json)
Hash identifier:          7vFo653/qai0oBXxBKNXw4ZRST+rRg552bsK6gs+1G4=
Subject key identifier:   56:52:BE:F2:65:25:F7:B9:19:CC:8A:D4:5D:AA:D6:D5:48:27:7D:5B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       61A44368F1064E80120373F3798C346B88B636D4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139482.roa
Signing time:             Sat 06 Jan 2024 15:05:58 +0000
ROA not before:           Sat 06 Jan 2024 15:00:58 +0000
ROA not after:            Sat 04 Jan 2025 15:05:58 +0000
asID:                     139482
IP address blocks:        104.234.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:43:68:f1:06:4e:80:12:03:73:f3:79:8c:34:6b:88:b6:36:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan  6 15:00:58 2024 GMT
            Not After : Jan  4 15:05:58 2025 GMT
        Subject: CN=5652BEF26525F7B919CC8AD45DAAD6D548277D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:6b:0c:71:02:c5:77:90:19:ec:18:75:af:
                    b9:9f:ad:b5:f8:e1:b3:47:67:48:af:2b:03:e2:6c:
                    24:65:3b:c6:5b:61:88:c7:29:bb:f8:1e:d0:cd:3e:
                    88:05:40:37:00:f4:70:42:57:c3:4c:91:e0:53:9b:
                    18:35:e2:e6:f4:13:d5:bc:d2:cf:54:05:d3:03:a3:
                    9a:30:f3:ed:52:99:9b:94:31:06:89:d9:81:24:13:
                    aa:38:1d:ed:7f:71:38:9e:2b:d8:0e:2b:f9:65:f2:
                    c7:95:0c:82:ff:d6:9c:be:4c:01:13:0c:5f:c6:d9:
                    11:b9:79:29:b3:c7:0b:a1:a2:47:d9:f0:de:9f:69:
                    23:0a:d1:02:e6:26:c8:71:5a:01:1b:62:1a:0f:b9:
                    42:4f:c2:90:56:53:48:aa:0f:ef:40:de:c7:9d:ee:
                    51:32:a2:3c:9b:25:b6:0b:52:1c:19:e2:d1:13:fd:
                    1a:19:48:bd:de:2a:fe:1d:33:a0:ef:12:ed:ba:4e:
                    3a:31:e4:67:03:17:da:1b:c0:a5:ac:51:e6:01:cb:
                    ae:a3:5a:67:c5:9c:f9:fc:c0:ec:7b:92:31:23:05:
                    fa:e0:a3:2b:53:96:6e:82:5b:d5:ea:44:ad:7d:fa:
                    4a:f9:de:40:0d:92:10:eb:ff:db:5a:5c:d8:80:b1:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:BE:F2:65:25:F7:B9:19:CC:8A:D4:5D:AA:D6:D5:48:27:7D:5B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:e8:8f:25:eb:47:05:cf:23:3e:b9:6f:a7:cc:02:a6:9b:
         ee:78:64:6d:62:32:69:40:74:62:03:d7:e3:42:44:6e:8d:d0:
         fa:57:84:58:1f:71:59:9e:77:4a:c1:bd:8a:fd:fb:e3:58:36:
         f2:f9:e0:42:2d:50:c2:0f:91:eb:35:d8:19:b0:85:81:be:a2:
         21:57:ed:87:57:87:c7:69:00:a3:f5:05:bd:b0:b2:67:82:53:
         71:f7:20:2a:91:4f:c5:43:dd:e2:62:09:15:bc:bf:de:8d:0a:
         6d:2c:f0:b4:d5:fb:3a:c5:ca:70:a1:26:a7:d5:92:26:f9:b9:
         62:0a:59:5d:b0:12:04:88:aa:8d:1e:4a:bd:6f:f4:d3:7f:80:
         1e:c4:cd:1f:41:ea:96:5d:d7:24:e1:fe:43:2f:cf:98:42:cf:
         ed:62:f7:d9:62:e9:00:8c:16:21:02:87:8f:65:56:a8:a6:30:
         77:0a:cf:29:14:25:a8:b4:68:dd:83:c7:c6:ea:0a:4f:2f:60:
         ad:f0:6e:28:09:df:3d:71:19:e2:ac:5d:4d:bf:8c:60:49:b2:
         da:98:1f:31:1f:c5:a8:fa:96:e2:ec:23:00:93:af:21:0d:1c:
         af:ef:b8:85:72:51:4f:54:86:27:6f:70:1b:5b:ad:6a:31:aa:
         b0:98:c0:9e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUYaRDaPEGToASA3PzeYw0a4i2NtQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMTA2MTUwMDU4WhcNMjUwMTA0MTUwNTU4
WjAzMTEwLwYDVQQDEyg1NjUyQkVGMjY1MjVGN0I5MTlDQzhBRDQ1REFBRDZENTQ4
Mjc3RDVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFZrDHECxXeQ
GewYda+5n621+OGzR2dIrysD4mwkZTvGW2GIxym7+B7QzT6IBUA3APRwQlfDTJHg
U5sYNeLm9BPVvNLPVAXTA6OaMPPtUpmblDEGidmBJBOqOB3tf3E4nivYDiv5ZfLH
lQyC/9acvkwBEwxfxtkRuXkps8cLoaJH2fDen2kjCtEC5ibIcVoBG2IaD7lCT8KQ
VlNIqg/vQN7Hne5RMqI8myW2C1IcGeLRE/0aGUi93ir+HTOg7xLtuk46MeRnAxfa
G8ClrFHmAcuuo1pnxZz5/MDse5IxIwX64KMrU5ZuglvV6kStffpK+d5ADZIQ6//b
WlzYgLGYLwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFZSvvJlJfe5GcyK1F2q1tVI
J31bMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzOTQ4Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqszANBgkqhkiG9w0BAQsFAAOC
AQEAbL7ojyXrRwXPIz65b6fMAqab7nhkbWIyaUB0YgPX40JEbo3Q+leEWB9xWZ53
SsG9iv3741g28vngQi1Qwg+R6zXYGbCFgb6iIVfth1eHx2kAo/UFvbCyZ4JTcfcg
KpFPxUPd4mIJFby/3o0KbSzwtNX7OsXKcKEmp9WSJvm5YgpZXbASBIiqjR5KvW/0
03+AHsTNH0Hqll3XJOH+Qy/PmELP7WL32WLpAIwWIQKHj2VWqKYwdwrPKRQlqLRo
3YPHxuoKTy9grfBuKAnfPXEZ4qxdTb+MYEmy2pgfMR/FqPqW4uwjAJOvIQ0cr++4
hXJRT1SGJ29wG1utajGqsJjAng==
-----END CERTIFICATE-----
Generated at Thu May 16 18:25:39 2024 by rpki-client on console-fra.rpki-client.org