Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          EMyRcoDWl4tMPfDE3/4l6xPOKgPQPTFhNiowcmIFERU=
Subject key identifier:   66:4A:20:B6:74:34:A2:83:14:E0:A3:F1:A8:7E:91:94:B7:16:88:4C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2927757C40A5C0901A103F5A34C1E0B4ED878695
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
Signing time:             Sun 11 Aug 2024 20:30:39 +0000
ROA not before:           Sun 11 Aug 2024 20:25:39 +0000
ROA not after:            Sun 10 Aug 2025 20:30:39 +0000
asID:                     16276
IP address blocks:        104.234.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:27:75:7c:40:a5:c0:90:1a:10:3f:5a:34:c1:e0:b4:ed:87:86:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 11 20:25:39 2024 GMT
            Not After : Aug 10 20:30:39 2025 GMT
        Subject: CN=664A20B67434A28314E0A3F1A87E9194B716884C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:06:57:ee:23:73:6f:20:d9:07:7e:48:50:
                    62:fe:dc:a0:94:41:69:e6:fe:42:e6:dd:d4:4c:ad:
                    e9:16:11:0f:ae:bc:27:b7:a3:b3:10:83:56:0d:da:
                    38:f1:a3:f6:48:84:7e:be:42:17:f9:a4:74:b6:28:
                    18:61:e5:b6:00:f4:f2:ae:41:7a:74:14:b8:03:37:
                    fd:df:73:c5:5d:a6:a6:8e:d7:11:17:0d:74:fa:55:
                    30:37:55:2d:6b:87:ff:f4:5e:b1:8f:e4:30:5e:62:
                    b3:e1:0a:0a:b1:3f:61:d9:bb:32:9b:9b:34:2c:ea:
                    19:b2:6d:a5:ac:fe:5c:46:71:29:22:1d:a9:46:11:
                    8b:fa:62:3d:58:6b:d3:3e:d6:d5:ad:04:3a:81:0b:
                    b3:a0:22:f4:36:de:83:d7:59:b8:4d:19:df:9b:b0:
                    c8:c7:8a:d5:26:36:7e:aa:21:42:3f:df:33:3e:2d:
                    c6:d0:7d:00:1e:69:62:ea:3a:f9:81:4b:c4:2e:39:
                    53:a3:2c:12:28:3e:77:f4:cc:89:6a:90:0f:61:47:
                    4e:5f:6f:f8:dd:ab:52:54:50:85:50:84:d2:63:3d:
                    8c:93:3d:45:21:cf:7f:fa:ab:94:85:0d:20:79:20:
                    81:1a:a9:49:65:d4:e0:c4:a7:cc:ca:63:ba:aa:af:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4A:20:B6:74:34:A2:83:14:E0:A3:F1:A8:7E:91:94:B7:16:88:4C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:8c:ed:33:ee:27:bc:b8:01:36:f8:75:1f:d5:95:cc:b5:b0:
         3a:90:12:59:b4:cd:81:1a:40:7e:52:c2:e4:b3:8f:5e:ba:ba:
         f4:bf:30:7a:02:9d:59:7f:e7:a6:82:e6:ea:07:83:a1:e4:70:
         e1:3f:ee:96:68:06:d0:23:6a:c4:c8:57:a8:51:7b:14:31:8b:
         18:0d:f9:f6:7f:13:01:95:a8:5b:00:db:f9:fe:2c:d4:d8:79:
         43:ad:2c:cc:f5:59:e3:7d:66:65:e6:c5:88:32:8d:5e:2d:fd:
         83:2e:ee:9a:e7:87:29:08:9d:b4:fd:6a:83:e2:32:8c:8a:ff:
         f2:79:aa:3c:63:04:c7:4b:cd:31:c6:2c:93:5f:fd:9d:da:7d:
         4d:c1:2d:a8:7d:ef:50:26:c2:16:c2:d3:6d:6a:25:c0:b3:30:
         3d:8e:0a:e5:12:7c:4f:ca:22:49:76:24:3c:85:e8:de:2e:2a:
         d9:ed:7d:0c:29:59:6d:e5:c0:09:62:96:65:4c:31:2c:51:2c:
         8f:fa:7d:69:19:ad:37:09:f5:88:77:ec:a3:b1:20:d8:99:33:
         c6:14:b7:a9:da:0e:41:c0:a4:c1:2f:7c:da:5a:af:3a:cf:9d:
         aa:16:14:ac:30:15:62:13:42:1e:61:82:6a:4e:84:00:d8:bb:
         aa:52:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:07 2024 by rpki-client on console-fra.rpki-client.org