Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          lzYsn9b6rnFGM8vorh4Euws+yU4S8QnCaecOW2l6qAo=
Subject key identifier:   57:26:6D:74:BC:77:64:54:1B:7A:A4:74:15:E0:A4:3B:D5:7C:14:EC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3EBD9DEC227E3E47706379515486D5B7CFCD2AB6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
Signing time:             Thu 17 Oct 2024 00:00:07 +0000
ROA not before:           Wed 16 Oct 2024 23:55:07 +0000
ROA not after:            Thu 16 Oct 2025 00:00:07 +0000
asID:                     174
IP address blocks:        104.234.12.0/24 maxlen: 24
                          104.234.85.0/24 maxlen: 24
                          104.234.97.0/24 maxlen: 24
                          104.234.158.0/23 maxlen: 24
                          104.234.246.0/24 maxlen: 24
                          206.53.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bd:9d:ec:22:7e:3e:47:70:63:79:51:54:86:d5:b7:cf:cd:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 16 23:55:07 2024 GMT
            Not After : Oct 16 00:00:07 2025 GMT
        Subject: CN=57266D74BC7764541B7AA47415E0A43BD57C14EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:d5:f0:ff:0d:49:cf:4e:cb:72:7b:8b:24:
                    a5:7f:c2:a9:f5:f7:b3:86:e7:6c:e2:78:65:79:8c:
                    d2:96:28:5c:af:7d:2d:0c:39:31:09:09:ee:d5:09:
                    0d:05:28:04:25:75:7e:8e:ad:d5:36:ab:2b:2d:39:
                    45:55:99:03:87:bf:fe:2c:d5:c4:e8:1c:23:8c:a5:
                    cd:a8:9b:da:b6:43:10:ce:a9:e6:ba:4a:4d:a1:a7:
                    3b:3b:0f:52:a1:ae:a8:6a:5a:d3:c8:62:40:bd:57:
                    81:64:79:a2:d4:90:71:42:09:3d:e9:65:74:38:b8:
                    c1:d5:95:d0:4b:8e:95:cc:2b:ca:c7:9c:84:ea:d0:
                    1c:4e:01:e5:dd:ac:37:fc:79:fa:97:ac:30:6c:ab:
                    c3:c1:61:60:8e:e4:ef:5d:8b:58:4a:84:28:36:5b:
                    b5:6f:55:ab:f4:74:82:4a:df:3e:5d:00:2f:b1:b8:
                    bb:4e:16:19:b8:00:4e:57:ce:16:fc:12:0f:be:af:
                    0d:7c:1d:ba:ee:0b:23:b9:fe:c0:84:66:5d:67:f9:
                    e8:4b:ee:1e:d1:1a:50:ee:0a:d6:bb:84:df:be:47:
                    1c:a6:0a:ae:10:bf:f7:3b:08:76:0f:8d:5e:8c:f6:
                    15:fd:9f:4e:31:1e:57:e5:56:6a:c9:4c:da:54:e8:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:26:6D:74:BC:77:64:54:1B:7A:A4:74:15:E0:A4:3B:D5:7C:14:EC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.12.0/24
                  104.234.85.0/24
                  104.234.97.0/24
                  104.234.158.0/23
                  104.234.246.0/24
                  206.53.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:3c:6d:cf:3b:2c:7f:eb:62:bc:c6:f0:d7:af:a9:d4:89:
         8c:2e:8a:29:b1:b8:d4:1a:b8:c4:b2:6f:1f:1b:9e:63:93:a9:
         51:81:98:9e:2c:90:0d:c3:86:da:b0:9b:82:e5:09:5f:f5:0c:
         d4:0a:97:eb:ad:dd:47:a2:68:cd:e5:16:ff:c9:39:b7:5a:99:
         2b:6e:43:1a:18:b9:42:d5:54:e3:76:37:41:34:71:5b:81:d1:
         5e:9a:e5:23:10:c3:8b:2b:39:a7:6f:e2:11:92:97:26:49:26:
         48:72:34:51:47:b9:e5:5a:0a:de:5e:00:f8:4c:dd:cf:56:f7:
         0f:ef:26:5b:e6:a6:f0:84:f7:85:b1:2f:64:18:13:2b:80:15:
         17:04:d9:f4:fd:4e:96:4e:48:ab:8e:58:13:0b:db:5b:65:09:
         3a:63:8a:d8:2d:7d:be:16:30:b1:9d:2c:10:8f:2a:a3:cb:8b:
         c5:aa:b7:05:e6:62:14:ee:7f:84:e6:ee:61:00:88:15:d5:56:
         b2:85:ca:47:48:56:a0:b5:17:06:aa:95:52:69:d6:10:f0:e4:
         87:9d:88:af:a7:06:8f:7d:66:bb:9f:d9:92:b8:8d:7f:f3:e9:
         68:9e:a1:af:5f:51:4b:4a:18:d6:80:a8:ff:39:29:c8:55:03:
         c1:69:68:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:13 2024 by rpki-client on console-fra.rpki-client.org