Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
File:                     AS151106.roa (raw, json)
Hash identifier:          7op0CQOmon6VL0CGj0xzWeF9pMGevDiP8E1Hku9t8rI=
Subject key identifier:   23:33:9F:F4:A9:8D:D7:AE:BA:C4:45:27:2A:2A:D2:F2:46:62:EF:10
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       399F2684FA52ECE68DAC1524ACD4F3BA8DEC6D50
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
Signing time:             Thu 21 Nov 2024 07:43:01 +0000
ROA not before:           Thu 21 Nov 2024 07:38:01 +0000
ROA not after:            Thu 20 Nov 2025 07:43:01 +0000
asID:                     151106
IP address blocks:        104.234.82.0/24 maxlen: 24
                          104.234.104.0/24 maxlen: 24
                          104.234.211.0/24 maxlen: 24
                          104.234.215.0/24 maxlen: 24
                          104.234.237.0/24 maxlen: 24
                          104.234.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9f:26:84:fa:52:ec:e6:8d:ac:15:24:ac:d4:f3:ba:8d:ec:6d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 21 07:38:01 2024 GMT
            Not After : Nov 20 07:43:01 2025 GMT
        Subject: CN=23339FF4A98DD7AEBAC445272A2AD2F24662EF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:41:b2:90:46:32:e1:ed:cd:73:fb:82:74:
                    36:24:24:51:8f:48:20:ad:97:fd:a9:bc:d7:f9:86:
                    5b:12:71:ef:50:47:c2:e9:90:f8:f1:de:df:6f:46:
                    e2:aa:b0:7a:e6:45:bc:ef:b4:bf:58:c4:07:b6:12:
                    21:30:c6:04:d6:1c:b4:45:d8:fa:4b:8c:25:99:e0:
                    19:42:e5:0c:1c:3a:f7:06:ec:e1:e5:b1:c4:67:53:
                    35:12:90:72:c4:c4:8f:e1:d3:5b:f9:76:59:44:f5:
                    b3:13:d4:7f:6d:55:0b:c3:df:63:f8:f8:dc:7a:24:
                    63:38:9a:c5:de:db:5c:f9:03:2b:00:46:2c:1e:ad:
                    b6:3f:d8:26:19:f5:3d:6e:ab:92:c6:1e:bb:19:cf:
                    6e:08:a6:08:4b:b7:62:16:3a:f1:a1:0b:b0:e1:62:
                    c5:e1:e2:98:74:df:cd:3c:f2:29:68:50:fe:ff:d4:
                    50:53:db:65:70:7a:67:a6:af:4d:75:b9:6a:85:d1:
                    50:86:d0:71:7f:4c:cd:a9:b1:63:c9:2f:70:ae:cd:
                    fc:22:20:0f:07:d1:c9:08:89:fe:97:73:2f:2a:10:
                    f4:85:f6:d4:61:8e:e2:f8:da:cf:31:e9:15:58:65:
                    ed:05:1d:b2:34:5f:b4:78:6b:e5:57:81:e4:ba:fe:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:9F:F4:A9:8D:D7:AE:BA:C4:45:27:2A:2A:D2:F2:46:62:EF:10
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.82.0/24
                  104.234.104.0/24
                  104.234.211.0/24
                  104.234.215.0/24
                  104.234.237.0/24
                  104.234.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:bd:1b:29:41:b1:e2:d8:9c:d8:07:20:80:5d:3b:22:a9:8f:
         1b:c7:30:13:06:09:fc:3f:fb:07:51:e3:b8:cb:c9:eb:81:00:
         7e:d8:a3:6e:5a:64:01:ef:55:98:d9:db:62:ab:da:3e:42:66:
         5c:7f:72:46:fa:e6:10:5d:e5:fd:4e:07:9f:98:34:f2:42:31:
         3b:9b:06:17:f7:ed:76:4d:8e:04:20:6a:d9:94:08:ee:e0:fa:
         90:32:d3:d3:0d:e3:7a:7b:ec:8e:f5:e1:eb:3f:8c:5a:93:24:
         c2:4d:b1:c9:27:66:a3:09:69:8c:68:8d:0e:94:6d:c4:f0:a8:
         34:c5:6e:d9:5e:23:03:ce:c9:6a:0b:c4:33:8c:5e:36:cf:32:
         28:0c:0a:91:5e:8a:83:f4:32:cd:07:9f:95:c7:79:05:1f:d0:
         2f:f6:af:43:82:c5:40:eb:5c:e8:bd:11:fc:31:70:b1:82:ff:
         26:1f:0b:db:9e:12:bc:89:c9:d7:2b:15:b7:4c:73:0b:da:46:
         89:4d:5e:c2:cc:ff:21:45:d0:39:0f:55:f6:f2:4e:df:11:e6:
         ac:31:48:f2:ea:87:6a:fa:bd:5b:ae:66:a3:00:25:53:03:8b:
         9e:21:6e:42:27:ef:7e:02:16:de:24:12:cd:96:17:76:80:5e:
         38:91:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:03:47 2024 by rpki-client on console-fra.rpki-client.org