Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa
File:                     AS151487.roa (raw, json)
Hash identifier:          uuHjrMgcRYrs6bJyDTqEzvTWS8Fl0d2QpPs4szVcH2M=
Subject key identifier:   5B:35:5A:ED:97:2E:71:9E:D3:38:1B:4C:14:74:82:50:1B:97:53:F5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       07CC9AE1A627AB134DC45A48BB2718E594D883E6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa
Signing time:             Sun 24 Mar 2024 08:45:45 +0000
ROA not before:           Sun 24 Mar 2024 08:40:45 +0000
ROA not after:            Sun 23 Mar 2025 08:45:45 +0000
asID:                     151487
IP address blocks:        104.234.102.0/24 maxlen: 24
                          104.234.155.0/24 maxlen: 24
                          104.234.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cc:9a:e1:a6:27:ab:13:4d:c4:5a:48:bb:27:18:e5:94:d8:83:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 24 08:40:45 2024 GMT
            Not After : Mar 23 08:45:45 2025 GMT
        Subject: CN=5B355AED972E719ED3381B4C147482501B9753F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a2:60:2b:4c:0f:69:34:d4:5c:c4:f2:a3:eb:
                    a4:17:3e:a1:76:eb:f9:41:9d:af:5a:38:51:52:a4:
                    86:b9:b7:8e:ec:e2:33:0e:43:fe:56:85:0d:42:f6:
                    67:79:b0:a4:3b:5e:3c:5e:f9:b7:dc:ac:26:56:9f:
                    3e:cf:d3:de:6f:ef:64:15:aa:25:b9:b7:c5:08:cb:
                    89:b2:e6:2c:9b:27:bb:d6:f9:47:2f:af:23:69:66:
                    54:71:0e:cf:1a:0c:f9:59:53:2b:e8:39:75:05:39:
                    65:14:6f:69:ea:17:02:90:e9:a1:70:ac:a8:51:22:
                    66:a9:a0:3c:ed:ee:81:be:35:45:97:08:41:06:5b:
                    30:9d:be:62:29:73:38:89:4c:82:b0:3d:c8:e8:89:
                    7d:27:71:03:4d:bb:a8:84:e6:47:5c:ce:15:fb:c5:
                    91:3e:b4:a6:44:f1:80:3d:4c:85:5e:35:fb:0b:72:
                    2a:d2:95:7f:0d:dc:86:d9:31:bb:00:43:e8:de:32:
                    23:b1:2e:d7:d7:66:2c:0b:dc:58:b9:1a:b5:34:18:
                    6f:7c:58:70:5b:8c:12:cd:8a:d5:73:9b:e2:e1:fd:
                    f6:f7:e0:0c:70:99:f3:48:b7:94:56:89:0c:9f:c9:
                    9f:c6:aa:b2:8e:9e:9a:da:61:37:06:27:03:0e:ba:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:5A:ED:97:2E:71:9E:D3:38:1B:4C:14:74:82:50:1B:97:53:F5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.102.0/24
                  104.234.155.0/24
                  104.234.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:91:59:78:af:a8:71:f7:fc:bd:ce:b6:39:c0:93:db:f5:0c:
         93:2f:07:cf:42:c0:ac:ad:73:bc:a3:cf:cf:d5:7c:96:ab:8a:
         02:11:c1:c5:09:70:a9:0d:2a:57:b5:9a:92:97:74:71:b2:2a:
         2c:93:df:ef:fb:3f:12:c5:10:64:d1:49:51:20:19:7f:09:6b:
         23:5a:d5:1f:bf:00:74:fb:ab:47:a7:f9:df:07:45:80:68:29:
         c7:30:80:57:7e:c6:6c:c1:fe:8b:0d:04:8f:9d:18:50:88:b6:
         76:e8:71:d1:91:a0:cf:f8:7b:a1:12:2c:69:d9:92:df:9f:45:
         67:d8:0c:64:da:b2:ea:da:ab:6d:94:3e:12:ff:97:a1:63:58:
         59:0a:28:47:14:71:a4:4a:1c:cd:86:b8:b1:1e:0c:1b:28:91:
         cf:f3:fa:b4:f1:df:63:48:03:08:5a:d7:00:e3:42:7a:33:e8:
         98:92:7c:cf:ac:85:fa:c6:32:24:0a:a4:8a:d2:57:10:a9:5e:
         9f:db:8f:3a:8c:9a:a2:cf:23:03:7c:7c:b4:34:9c:32:4f:7c:
         bd:ae:0c:58:12:d8:23:32:20:36:c2:59:0f:a0:f4:5e:40:9c:
         ae:37:d8:7f:33:27:6d:df:65:b5:77:af:e7:63:93:ca:a2:34:
         ec:cd:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:03:47 2024 by rpki-client on console-fra.rpki-client.org