Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS142111.roa
File:                     AS142111.roa (raw, json)
Hash identifier:          lawm5cf1rEWvIx+Yo+ZGjNLjfJGHMZT0dEGty7optT8=
Subject key identifier:   CD:19:3A:3D:19:36:71:19:77:59:F5:6B:A9:D8:4C:95:EF:5E:A5:D6
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0BFC88964C69440F3DEA3AFD9A9663AB37611576
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS142111.roa
Signing time:             Thu 04 Apr 2024 00:00:09 +0000
ROA not before:           Wed 03 Apr 2024 23:55:09 +0000
ROA not after:            Thu 03 Apr 2025 00:00:09 +0000
asID:                     142111
IP address blocks:        104.234.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fc:88:96:4c:69:44:0f:3d:ea:3a:fd:9a:96:63:ab:37:61:15:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  3 23:55:09 2024 GMT
            Not After : Apr  3 00:00:09 2025 GMT
        Subject: CN=CD193A3D193671197759F56BA9D84C95EF5EA5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:f6:3c:05:ac:e3:cc:cf:70:74:0d:aa:de:
                    d5:ff:64:9a:8e:4c:99:50:f5:80:95:ac:c7:8a:4f:
                    ab:c9:10:fb:68:1d:6f:ad:62:dd:41:70:3e:02:ce:
                    7b:6f:61:66:ef:71:53:92:0d:b9:34:3b:aa:93:96:
                    60:d9:58:1c:d7:62:aa:39:5d:45:40:24:09:3e:a7:
                    e2:03:9d:fc:77:88:5b:1e:ce:ff:21:7d:1c:bb:29:
                    e8:9c:96:21:8a:c2:d5:1c:f5:e5:c0:f5:e4:f2:06:
                    c7:93:36:02:18:9b:b0:06:5d:4e:98:34:b2:d4:59:
                    0f:1e:a2:cf:75:b9:7b:7f:cd:49:0a:ef:6a:01:ad:
                    d4:a0:94:e1:7f:1b:a1:d9:c8:6f:f8:2e:71:94:6b:
                    38:54:89:3c:da:7f:28:65:11:48:2e:09:cb:a2:27:
                    3a:d1:00:8b:be:0e:56:27:75:8f:00:c2:69:93:5d:
                    91:70:65:84:ea:a0:1b:81:f3:f2:95:6a:42:f6:f0:
                    49:25:f0:94:c1:8c:8f:db:80:d3:de:a8:44:04:66:
                    2a:12:31:a2:8b:b4:3d:c9:f2:6a:6b:fa:02:bb:af:
                    1a:e0:4e:6a:fd:a4:49:f8:2a:45:c3:af:fa:2a:21:
                    02:4b:72:f4:c1:0f:62:50:1d:cd:c7:7b:48:d1:da:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:3A:3D:19:36:71:19:77:59:F5:6B:A9:D8:4C:95:EF:5E:A5:D6
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS142111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:12:30:27:99:b3:7d:e9:69:a6:eb:f4:ee:38:51:4c:0c:
         63:99:07:5b:24:21:fa:fd:23:2b:b7:67:ad:e6:ed:41:85:c9:
         b5:fb:75:ec:cf:c9:83:99:ba:a4:4a:61:18:92:03:10:80:d0:
         a2:90:1b:62:91:ba:98:e5:79:2c:56:7d:5e:29:68:7a:f4:12:
         a7:4a:8f:7d:35:8c:6e:0d:61:72:6f:f2:1f:14:ff:dc:28:7c:
         ad:60:51:a0:f6:ea:19:4d:9e:12:32:22:9c:7d:7a:65:da:ad:
         ba:bf:5c:c9:1e:01:6a:ee:ac:f9:10:e0:5a:1e:06:93:7c:d0:
         14:ec:9b:dd:89:16:13:e3:74:87:4e:53:55:41:3c:80:3b:22:
         b6:f5:83:02:35:e5:46:cf:77:5f:1c:db:41:88:8e:a9:ce:96:
         bf:d0:d5:e7:93:6a:01:9d:af:4b:a1:f3:da:a8:af:f2:d8:f1:
         72:72:a1:96:ce:95:8e:fc:2c:66:0d:d2:52:8f:19:70:aa:2d:
         32:09:aa:cc:64:20:6f:4c:b9:09:f6:45:84:5b:c7:77:cf:11:
         8f:08:4f:7a:5e:cf:86:1c:20:78:f1:85:ca:3b:6d:1b:16:57:
         94:89:31:76:25:7e:d5:06:0d:17:4a:5d:c2:db:63:a5:8f:f5:
         da:2c:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:30 2024 by rpki-client on console-fra.rpki-client.org