Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147003.roa
File:                     AS147003.roa (raw, json)
Hash identifier:          mteYmoQmLrtJgYIJ35jLUlIHVwnu160SkLyAKIme/ss=
Subject key identifier:   23:8D:51:BC:86:7C:A8:1B:CC:48:C1:5B:6C:18:C9:F5:59:F3:4E:8D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       313CFE12BA530D09AC6A25D7BF5B2B323BEC2428
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147003.roa
Signing time:             Thu 16 May 2024 15:59:15 +0000
ROA not before:           Thu 16 May 2024 15:54:15 +0000
ROA not after:            Thu 15 May 2025 15:59:15 +0000
asID:                     147003
IP address blocks:        104.234.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 09:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3c:fe:12:ba:53:0d:09:ac:6a:25:d7:bf:5b:2b:32:3b:ec:24:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 16 15:54:15 2024 GMT
            Not After : May 15 15:59:15 2025 GMT
        Subject: CN=238D51BC867CA81BCC48C15B6C18C9F559F34E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:ea:f8:44:43:c7:9f:d4:26:f4:b6:f8:3b:
                    3d:6a:78:a7:cc:09:75:1b:a0:02:73:1d:51:65:53:
                    2d:bc:9d:b4:af:12:32:28:5a:8f:da:26:96:8d:72:
                    93:30:0f:5a:0a:1c:dd:bc:79:16:d0:dd:fd:31:62:
                    6d:3d:8b:6e:4c:5e:81:a0:e4:ea:8a:b6:62:a7:23:
                    e4:3d:d5:2f:be:61:1d:cf:21:57:bb:2d:4d:6d:8f:
                    e9:1c:6c:55:28:d9:51:c9:2d:81:38:de:ee:d3:e8:
                    d0:d0:82:01:b1:96:c9:4e:79:13:c3:d9:e8:c6:4c:
                    00:32:44:f4:58:22:10:1f:10:8a:37:f7:ae:d6:c9:
                    38:f4:d5:51:fc:de:84:86:fa:be:28:71:aa:df:3b:
                    e3:76:1a:fd:8f:93:87:2c:0e:59:86:fc:40:6f:8e:
                    2a:78:3a:03:a6:49:42:32:6a:56:41:a8:77:bf:3c:
                    02:b9:e3:d7:af:cc:a7:ad:77:0d:a5:e9:5e:44:53:
                    96:19:2e:31:1f:b8:47:80:cc:bc:9e:09:dd:fb:a0:
                    8f:f6:c2:48:59:31:98:da:7c:0d:1f:28:42:1d:37:
                    42:90:68:8a:5a:93:b8:c4:4b:fc:45:8e:00:54:85:
                    4a:e2:45:8a:3e:3b:43:ef:54:e2:98:5b:86:00:09:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:51:BC:86:7C:A8:1B:CC:48:C1:5B:6C:18:C9:F5:59:F3:4E:8D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147003.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:cf:4d:65:a5:0e:78:d2:33:a1:71:c5:7c:a7:b9:85:b0:
         81:73:24:b9:57:05:14:09:2f:d7:36:49:36:66:7d:42:d3:be:
         a5:ce:1e:e8:f0:54:a5:72:58:15:48:ac:64:57:80:ce:98:2c:
         51:7e:02:ba:2a:b3:be:0d:85:4d:b3:00:d5:3d:3b:9f:4b:f3:
         bf:2a:5d:12:b7:dc:5b:79:21:11:50:8a:1f:52:94:5e:c0:23:
         15:c3:77:b9:82:b5:46:10:3d:6c:39:1a:1c:3e:28:e2:5b:bc:
         23:e6:82:81:77:d4:be:a2:1f:7a:22:8c:0a:d2:c2:fc:94:60:
         6e:be:01:21:6a:1f:22:cf:fe:6a:59:ab:16:6d:3b:0e:71:77:
         84:00:97:42:ca:0d:66:31:2f:b4:af:be:02:2a:d5:f2:89:30:
         85:10:eb:b0:e4:7e:30:5d:9c:89:a8:ad:1e:8c:7e:a5:7d:77:
         37:de:aa:22:f0:04:e7:78:50:3d:de:6a:14:a8:76:1f:76:88:
         2f:39:5d:9a:86:c3:21:26:6d:15:41:67:0a:12:c6:4c:72:43:
         59:9c:d6:95:a4:88:37:60:b9:04:5f:4a:13:92:53:c5:93:e6:
         52:02:21:d8:87:48:87:97:1a:e5:5d:b2:70:ac:00:25:63:f7:
         79:14:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:52 2024 by rpki-client on console-fra.rpki-client.org