Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          OxqeubesEurQ4d4Ys6ACXRwy0VOsEldCYZhflJ3uyPQ=
Subject key identifier:   F6:11:B7:10:98:D5:54:BD:D9:15:D5:93:6D:16:6B:50:28:BC:20:51
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4BC50D3D2B70E453D82B01B3F4032EC49C4BAAC6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
Signing time:             Sat 06 Apr 2024 01:24:52 +0000
ROA not before:           Sat 06 Apr 2024 01:19:52 +0000
ROA not after:            Sat 05 Apr 2025 01:24:52 +0000
asID:                     174
IP address blocks:        104.234.12.0/24 maxlen: 24
                          104.234.85.0/24 maxlen: 24
                          104.234.86.0/24 maxlen: 24
                          104.234.97.0/24 maxlen: 24
                          104.234.158.0/23 maxlen: 24
                          104.234.246.0/24 maxlen: 24
                          206.53.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c5:0d:3d:2b:70:e4:53:d8:2b:01:b3:f4:03:2e:c4:9c:4b:aa:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  6 01:19:52 2024 GMT
            Not After : Apr  5 01:24:52 2025 GMT
        Subject: CN=F611B71098D554BDD915D5936D166B5028BC2051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:19:bf:cd:d2:7c:11:51:e2:6f:16:d2:1b:
                    fa:cc:f8:1c:42:db:ab:b9:87:27:a8:88:0e:d6:57:
                    cf:4c:1c:e0:02:8c:91:19:5b:fc:dc:8f:26:6e:77:
                    90:b4:b6:c2:11:bc:6b:b4:01:9b:3b:b5:54:0c:cb:
                    a2:82:92:90:7f:30:fc:f9:14:5d:0b:82:b4:45:54:
                    83:1e:2f:09:96:6a:cf:00:43:d5:41:4e:b9:e8:f0:
                    4e:11:92:98:28:5a:64:cf:93:a4:c8:aa:c7:8a:ac:
                    db:35:70:9b:06:55:45:fe:19:5e:22:81:bf:a1:81:
                    46:7d:43:d3:73:3d:09:b8:a7:20:26:5b:a6:59:27:
                    cb:c3:96:5c:7f:b6:cd:0d:d0:74:87:9c:06:4d:66:
                    47:75:05:d2:0f:77:4d:5c:38:eb:af:e9:d0:39:28:
                    b9:9d:6e:45:ab:6a:82:b7:c9:66:74:f3:a7:10:d3:
                    9f:b3:99:2d:e3:c9:37:86:c4:2c:31:96:5b:94:0f:
                    14:85:81:39:a0:36:db:03:d2:ff:04:42:e7:8a:a9:
                    23:bc:06:d2:e1:b5:82:02:ac:81:14:9a:88:37:12:
                    aa:02:fc:bc:52:f3:11:54:a6:28:76:6a:9c:a0:ca:
                    61:71:48:36:8b:37:ca:a1:b6:8d:8b:1d:3d:f8:c0:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:11:B7:10:98:D5:54:BD:D9:15:D5:93:6D:16:6B:50:28:BC:20:51
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.12.0/24
                  104.234.85.0-104.234.86.255
                  104.234.97.0/24
                  104.234.158.0/23
                  104.234.246.0/24
                  206.53.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:75:0c:33:c1:fa:7d:45:e9:66:50:17:c0:f3:56:8e:d6:0d:
         59:21:43:1f:b8:86:d6:c4:c1:c9:5c:bd:b5:34:c1:70:d2:b9:
         19:a8:9a:9d:b2:27:e5:2a:94:26:58:1e:fd:8f:fc:08:d2:21:
         83:7a:95:59:50:80:13:d0:df:5e:a8:07:2f:46:40:1a:78:1d:
         e2:33:65:d5:38:77:3a:a0:c7:4d:5a:da:d1:2e:d4:5e:41:9f:
         5d:96:f6:01:6d:87:79:02:40:b3:8a:e3:16:43:11:a3:9c:43:
         3f:22:30:8d:30:46:29:98:eb:1c:d4:1f:77:40:51:da:f2:8a:
         5f:4d:87:97:18:a4:59:79:6a:f9:60:19:b5:60:48:ff:bd:41:
         24:2a:9a:d2:d0:f9:1b:89:74:dc:e1:56:71:22:5d:81:8d:03:
         16:3f:f3:a9:8b:b3:3c:28:6a:00:d2:73:24:9f:85:40:c9:36:
         7c:6a:65:a0:98:d6:70:05:cb:86:e4:93:ed:1f:e9:44:f7:3f:
         ea:67:da:66:f0:53:c6:c9:b1:f7:00:96:98:0d:bf:6c:a9:96:
         98:76:ee:ba:ec:87:e4:21:0f:24:15:11:80:6d:45:7b:21:b0:
         37:9a:fc:b2:c2:93:43:02:fa:2b:97:8e:b4:6c:ce:53:cc:5b:
         2b:8a:4a:0a
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIUS8UNPStw5FPYKwGz9AMuxJxLqsYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNDA2MDExOTUyWhcNMjUwNDA1MDEyNDUy
WjAzMTEwLwYDVQQDEyhGNjExQjcxMDk4RDU1NEJERDkxNUQ1OTM2RDE2NkI1MDI4
QkMyMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+IZv83SfBFR
4m8W0hv6zPgcQturuYcnqIgO1lfPTBzgAoyRGVv83I8mbneQtLbCEbxrtAGbO7VU
DMuigpKQfzD8+RRdC4K0RVSDHi8JlmrPAEPVQU656PBOEZKYKFpkz5OkyKrHiqzb
NXCbBlVF/hleIoG/oYFGfUPTcz0JuKcgJlumWSfLw5Zcf7bNDdB0h5wGTWZHdQXS
D3dNXDjrr+nQOSi5nW5Fq2qCt8lmdPOnENOfs5kt48k3hsQsMZZblA8UhYE5oDbb
A9L/BELniqkjvAbS4bWCAqyBFJqINxKqAvy8UvMRVKYodmqcoMphcUg2izfKobaN
ix09+MBTjwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPYRtxCY1VS92RXVk20Wa1Ao
vCBRMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE3NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBFBggr
BgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAGjqDDAMAwQAaOpVAwQAaOpWAwQAaOph
AwQBaOqeAwQAaOr2AwQAzjU6MA0GCSqGSIb3DQEBCwUAA4IBAQCDdQwzwfp9Relm
UBfA81aO1g1ZIUMfuIbWxMHJXL21NMFw0rkZqJqdsiflKpQmWB79j/wI0iGDepVZ
UIAT0N9eqAcvRkAaeB3iM2XVOHc6oMdNWtrRLtReQZ9dlvYBbYd5AkCziuMWQxGj
nEM/IjCNMEYpmOsc1B93QFHa8opfTYeXGKRZeWr5YBm1YEj/vUEkKprS0PkbiXTc
4VZxIl2BjQMWP/Opi7M8KGoA0nMkn4VAyTZ8amWgmNZwBcuG5JPtH+lE9z/qZ9pm
8FPGybH3AJaYDb9sqZaYdu667IfkIQ8kFRGAbUV7IbA3mvyywpNDAvorl460bM5T
zFsrikoK
-----END CERTIFICATE-----
Generated at Sun Apr 28 00:50:07 2024 by rpki-client on console-ams.rpki-client.org