Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          gaeUzcCb6o0QLsi0gj6K7OSs4EXTAopP9wrnL6kY9ac=
Subject key identifier:   1B:1C:6E:32:48:F9:4E:D4:AA:0F:3C:CC:AF:C6:83:0D:10:50:E9:A4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1817A47704383225EBC61300417B165391D89F91
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa
Signing time:             Mon 31 Jul 2023 15:00:04 +0000
ROA not before:           Mon 31 Jul 2023 14:55:04 +0000
ROA not after:            Mon 29 Jul 2024 15:00:04 +0000
asID:                     16509
IP address blocks:        104.234.137.0/24 maxlen: 24
                          104.234.141.0/24 maxlen: 24
                          104.234.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Aug 2023 15:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:a4:77:04:38:32:25:eb:c6:13:00:41:7b:16:53:91:d8:9f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 31 14:55:04 2023 GMT
            Not After : Jul 29 15:00:04 2024 GMT
        Subject: CN=1B1C6E3248F94ED4AA0F3CCCAFC6830D1050E9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:01:3d:2f:8f:96:65:07:e8:53:41:fa:b0:
                    47:78:3f:7a:a9:59:36:ca:8a:0e:d0:5f:2f:58:d2:
                    da:1f:c1:3e:25:4b:f8:56:17:b6:d9:bc:21:01:cb:
                    31:11:60:9e:52:84:64:62:d7:de:88:93:15:4c:71:
                    68:dd:46:46:39:7c:74:fa:0c:a2:e0:9c:69:2b:6d:
                    7d:d0:b7:0b:0e:36:06:a0:a1:a2:55:f0:75:f1:b9:
                    e8:e0:8b:cb:09:95:e7:3d:c0:d9:f5:8c:ce:d9:44:
                    a7:25:53:5c:98:a9:9f:87:00:f6:c8:0b:37:c5:65:
                    64:32:8d:c0:77:4e:29:a5:60:8f:7e:85:ab:63:3f:
                    04:7f:f2:55:eb:29:82:75:d0:3e:51:0d:94:24:4e:
                    b7:07:b1:f6:94:1f:54:dc:ba:af:d8:f5:b4:12:a3:
                    30:2b:b7:17:5e:5c:50:3e:60:e2:59:f0:22:1b:7a:
                    37:d9:54:8f:32:ea:1b:a0:3b:ef:b1:ab:f1:0b:90:
                    b7:7f:cd:ba:cc:33:14:5f:2f:5c:10:96:63:63:4a:
                    87:00:8e:df:9e:e9:d9:7c:00:11:12:7e:87:33:a8:
                    d1:f6:de:36:5d:97:bb:a7:a2:b2:bc:25:94:3f:4e:
                    54:72:18:30:ee:34:29:7f:10:22:56:d0:09:e5:1d:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1C:6E:32:48:F9:4E:D4:AA:0F:3C:CC:AF:C6:83:0D:10:50:E9:A4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.137.0/24
                  104.234.141.0/24
                  104.234.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:dd:bc:3c:18:ad:3a:9e:8b:58:30:20:4e:46:e8:cf:29:
         9c:a6:37:3c:75:5a:cd:b8:f9:33:ab:3b:86:99:70:48:e1:29:
         d0:b5:c1:02:e0:fd:73:06:15:49:f7:e2:37:7d:9b:1e:b2:d0:
         87:e6:25:c1:94:0c:a7:d6:48:31:fd:00:17:0d:ab:a9:8c:69:
         aa:bf:15:6f:4b:74:f5:5e:b6:47:0e:66:bb:eb:38:87:6a:da:
         7a:0a:eb:80:32:ec:80:3c:74:42:c0:a6:1b:71:4c:9a:72:02:
         3b:7b:51:3f:26:29:cc:f8:44:18:fc:ef:42:44:b7:8d:ef:06:
         d9:36:de:76:89:f8:e4:1c:a4:b5:1e:97:d3:df:1b:82:2c:ab:
         61:97:5b:65:c0:87:a9:4a:a6:67:b1:98:61:e0:d4:7e:df:6a:
         e9:5a:7f:9e:11:50:fd:cc:64:24:4e:91:81:ce:29:c0:d3:67:
         30:2a:c8:eb:81:1b:2c:35:a6:33:37:00:61:fa:05:46:19:20:
         5f:5f:d3:b7:1f:da:1d:ce:bb:1b:8b:02:2f:c9:79:8d:2e:97:
         60:12:b5:74:33:86:b6:98:46:58:b1:3b:ef:df:f5:64:5d:65:
         5d:47:81:96:a9:0e:d8:bc:f2:f3:51:65:f5:b2:21:fa:6b:9b:
         ee:ad:01:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:21:10 2023 by rpki-client on console-fra.rpki-client.org