Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa
File:                     AS152672.roa (raw, json)
Hash identifier:          DzBFddn7BECaHxbDABnq8KAHVQyT+z7tqR9pgrGRMDM=
Subject key identifier:   27:CC:F8:D5:86:00:36:4D:0C:54:E9:00:BA:B5:CC:DB:E9:81:09:91
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       540E937EED8C3A7D8B1E9DAE5F418AD81E0B3490
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa
Signing time:             Sun 12 May 2024 03:29:02 +0000
ROA not before:           Sun 12 May 2024 03:24:02 +0000
ROA not after:            Sun 11 May 2025 03:29:02 +0000
asID:                     152672
IP address blocks:        104.234.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:93:7e:ed:8c:3a:7d:8b:1e:9d:ae:5f:41:8a:d8:1e:0b:34:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 12 03:24:02 2024 GMT
            Not After : May 11 03:29:02 2025 GMT
        Subject: CN=27CCF8D58600364D0C54E900BAB5CCDBE9810991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:cb:36:79:c3:7c:5e:5a:e2:53:fb:51:de:
                    ef:05:bf:14:62:4d:10:b6:0a:22:44:1e:a5:0c:cd:
                    97:94:15:6a:ee:cb:a8:a0:8c:bd:c2:f3:6e:03:96:
                    02:a1:bb:1a:b0:7d:14:7a:c3:01:8d:74:9d:72:f1:
                    87:af:4b:ee:8d:c5:a6:63:f0:23:4b:97:6f:6e:49:
                    59:cb:58:dc:88:b9:52:5e:c3:77:39:34:dd:d4:09:
                    b9:72:2f:a6:1f:81:94:1c:36:25:af:cb:c3:61:88:
                    65:c3:ce:bc:d1:18:e6:86:d1:d1:11:4d:f4:0c:d9:
                    99:7c:4d:4d:f7:21:40:88:5c:e5:b2:ec:0d:b1:c4:
                    71:a1:07:52:c1:bf:e8:74:f3:c1:3b:64:6b:48:5b:
                    c0:ac:b1:30:af:54:59:22:27:d0:6a:c1:28:27:6f:
                    0b:70:da:03:c8:dd:df:e1:4e:3a:65:90:1e:24:ea:
                    70:8d:9a:3e:e0:65:fa:f8:c1:4e:22:a1:46:4e:9c:
                    07:a6:56:be:b6:4b:79:a2:bd:20:c8:f1:dd:cb:1a:
                    5f:1e:93:0d:e0:36:cc:f2:1d:7c:c8:fa:2c:e5:91:
                    31:91:0a:77:fe:eb:41:a1:ad:df:8c:05:02:a8:3c:
                    72:d3:93:64:97:46:a5:6e:23:c4:63:2d:84:7b:d3:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CC:F8:D5:86:00:36:4D:0C:54:E9:00:BA:B5:CC:DB:E9:81:09:91
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:47:89:b1:47:cc:0a:19:46:0c:ec:35:7d:d7:a9:8f:2f:35:
         06:55:56:ef:63:91:fb:5e:e2:07:e4:7a:5d:23:76:60:c9:11:
         5d:a7:56:22:e7:e7:1f:f2:c3:22:fc:3d:b7:c3:d1:b3:79:cc:
         df:a4:fb:72:e7:e4:6f:43:42:d3:4d:98:88:c8:f3:57:09:bf:
         b1:57:3b:37:47:db:23:85:0b:b4:f7:16:3a:6c:cd:ed:dc:8d:
         0b:ee:8b:96:dd:51:ed:76:9b:d4:20:00:37:45:11:18:52:d7:
         0d:d1:25:bd:a8:52:49:a2:67:3e:eb:ed:9b:04:76:91:44:06:
         9f:b0:e2:25:f0:97:b2:de:08:47:13:64:17:5a:bb:a6:25:f5:
         4f:3e:b6:a1:07:e2:81:a1:62:48:3b:33:a2:d9:42:58:ed:f2:
         3b:56:0d:e3:36:42:2a:04:a7:f5:af:23:25:2a:e2:6d:5a:6e:
         70:c0:0a:92:64:ba:0f:05:f4:2d:12:2c:a4:de:e3:58:ae:f1:
         d2:38:7c:78:e8:ae:00:7a:ce:db:0a:b9:05:2d:a8:19:fa:5c:
         9b:02:51:80:ea:b7:96:a9:58:0b:da:c1:4a:88:41:4a:7e:4c:
         15:1d:92:6a:e4:73:0b:79:c7:b8:4b:c3:34:b7:25:82:b5:3e:
         41:1f:4d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:16:14 2024 by rpki-client on console-ams.rpki-client.org