Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16512.roa
File:                     AS16512.roa (raw, json)
Hash identifier:          eg5chTIF41/gOJUkJ5GJRkuW9Mi30nkBq+xrHiAcH6M=
Subject key identifier:   15:C1:21:B0:F2:2A:B6:D5:90:8F:A3:3C:09:6B:BC:F5:21:E8:83:7A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       02D366C15C9F8824E69EED8750B9DC055F419D8F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16512.roa
Signing time:             Tue 13 Feb 2024 21:57:16 +0000
ROA not before:           Tue 13 Feb 2024 21:52:16 +0000
ROA not after:            Tue 11 Feb 2025 21:57:16 +0000
asID:                     16512
IP address blocks:        104.234.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d3:66:c1:5c:9f:88:24:e6:9e:ed:87:50:b9:dc:05:5f:41:9d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 13 21:52:16 2024 GMT
            Not After : Feb 11 21:57:16 2025 GMT
        Subject: CN=15C121B0F22AB6D5908FA33C096BBCF521E8837A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:08:98:27:8a:3b:32:da:b6:6f:8e:ed:d9:
                    00:27:c7:60:67:ec:1a:80:35:09:3f:88:63:f4:07:
                    5f:37:1e:b5:f7:af:72:99:2f:60:7b:db:b0:f5:c9:
                    b5:e1:2a:87:e4:f2:0b:c8:57:b0:71:2c:e7:22:8d:
                    94:33:bd:02:be:e2:88:eb:50:6e:1e:42:7f:54:54:
                    bd:76:6f:20:8b:15:ea:01:6e:80:1e:4f:cc:ce:91:
                    1e:24:61:cd:0d:d9:ce:8c:94:cc:40:3c:d6:74:6f:
                    29:fa:59:a8:ac:65:0d:11:f7:32:19:63:9b:e2:df:
                    95:0f:30:56:1b:87:dc:7d:34:1c:5e:d0:1b:76:00:
                    ac:88:c9:3d:7d:b7:aa:5e:b0:d1:16:8a:e0:6b:6f:
                    d3:a8:8b:72:8f:bc:34:92:34:10:45:ed:e7:4f:33:
                    85:a6:dc:33:c8:4a:1e:d1:a2:cc:a3:a7:a0:e8:04:
                    d5:03:cb:a9:a9:92:22:ec:12:b4:96:36:ba:5e:62:
                    c8:26:04:b9:bf:27:fd:ed:89:15:dc:be:07:86:de:
                    ec:cc:d7:24:15:c4:08:51:52:67:86:d3:96:76:ba:
                    8d:2b:9e:9e:3d:d7:9f:78:55:77:4a:89:10:27:09:
                    83:d0:23:7b:c7:a5:8d:34:c1:ec:ab:54:72:a2:b3:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:21:B0:F2:2A:B6:D5:90:8F:A3:3C:09:6B:BC:F5:21:E8:83:7A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16512.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:52:e2:9c:92:c8:a9:d3:05:d7:24:a1:93:18:76:88:99:9e:
         98:8a:47:96:1a:72:3c:10:e9:f7:8c:cc:fa:a8:46:64:f3:a5:
         9a:79:1e:92:a2:0b:2d:fe:76:f7:4b:c1:3f:6c:e8:ad:f3:e4:
         89:96:a5:a7:b5:67:b8:b6:53:70:ac:78:27:a8:8a:58:0f:09:
         2d:3c:7e:1b:d5:84:cc:7b:7e:3b:b4:66:ac:50:29:3a:52:d6:
         10:cd:a0:bd:7e:1f:c9:16:3e:a8:6e:9f:42:24:1c:78:e9:bf:
         50:87:f2:69:01:85:32:73:63:43:9f:0c:e1:c6:55:3e:52:1f:
         fe:cd:50:a6:05:b2:89:5f:39:6f:c0:b0:03:7b:77:5b:11:b0:
         be:4a:78:d3:21:8e:08:be:31:26:07:93:78:06:c5:40:73:b2:
         ed:0f:c5:63:bf:d6:cc:99:23:35:e9:b7:1d:68:25:b3:b6:02:
         bf:e5:8f:d0:bb:2b:78:92:a1:1b:bf:2c:86:d0:48:ba:d7:09:
         68:fa:dd:be:7e:d8:04:95:6a:a2:79:7f:82:24:af:25:8d:74:
         c6:0e:51:d8:10:0d:0f:4e:b7:2b:af:2d:24:94:09:11:c5:1d:
         ed:a5:81:bd:57:d1:8e:7b:68:87:44:3e:2c:75:62:7e:bb:90:
         58:5d:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:07 2024 by rpki-client on console-fra.rpki-client.org