Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          zsixA7xRe+kDwCgUbBVhVBnO1UxUz0AdlpDdsI008/o=
Subject key identifier:   08:4E:16:10:5C:59:54:88:DE:11:BE:67:52:34:E2:9A:B7:5E:C1:9A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1D031AA713882CE3F8EE4F752BD3BD5C6699AA5B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa
Signing time:             Thu 31 Oct 2024 00:00:04 +0000
ROA not before:           Wed 30 Oct 2024 23:55:04 +0000
ROA not after:            Thu 30 Oct 2025 00:00:04 +0000
asID:                     19437
IP address blocks:        104.234.162.0/24 maxlen: 24
                          104.234.166.0/24 maxlen: 24
                          104.234.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:1a:a7:13:88:2c:e3:f8:ee:4f:75:2b:d3:bd:5c:66:99:aa:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 30 23:55:04 2024 GMT
            Not After : Oct 30 00:00:04 2025 GMT
        Subject: CN=084E16105C595488DE11BE675234E29AB75EC19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:77:22:68:a5:8a:d8:3e:eb:57:e0:30:73:
                    71:69:75:53:6c:ff:1a:3e:82:2e:c7:01:30:e1:96:
                    d9:2e:ec:4a:95:c3:e9:00:d2:28:27:cd:b5:40:f3:
                    ee:da:eb:a0:09:54:f0:82:8e:25:21:a8:f1:ae:75:
                    9a:b7:9c:22:f7:2e:1c:7c:dd:1a:84:9e:c8:de:22:
                    9c:74:4d:2d:e4:29:18:b4:01:fa:e3:98:1a:1b:9b:
                    b7:b3:6c:d7:82:12:89:14:62:94:31:f5:03:77:53:
                    2a:03:d1:22:b4:ef:5e:02:f7:d2:c1:3b:85:70:f3:
                    1f:45:dd:8e:85:a1:17:bc:5c:08:f0:7e:db:62:b2:
                    ab:d0:e4:e5:41:5b:c8:55:3f:de:32:7c:9c:19:20:
                    cc:de:14:ba:63:1c:f1:b7:d3:51:9e:69:b7:f6:8a:
                    59:66:4f:8d:2b:09:32:17:4f:5c:a3:e4:78:fd:b7:
                    1d:9a:ec:a9:3e:1e:13:44:ee:b5:4c:90:57:08:a5:
                    c4:4b:f5:e6:bf:5e:33:02:d0:a6:2e:2d:bc:59:f9:
                    49:6b:28:6d:10:b9:1a:32:bc:e6:94:b0:cf:c5:fb:
                    fc:ac:fa:74:b3:6d:92:56:aa:c7:c0:f2:14:99:ec:
                    25:f6:93:04:bf:f5:57:89:8d:e7:29:90:dd:f4:1e:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4E:16:10:5C:59:54:88:DE:11:BE:67:52:34:E2:9A:B7:5E:C1:9A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.162.0/24
                  104.234.166.0/24
                  104.234.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:39:d3:ce:95:01:1e:02:b0:47:86:87:0e:2f:a8:d4:bd:32:
         2d:cd:78:d0:62:1f:89:d7:98:f1:49:5d:5d:25:ac:4d:03:44:
         ec:dd:a8:1f:4a:11:f0:85:a2:77:3c:ec:6b:ec:fb:e6:3a:69:
         17:21:96:44:62:72:b6:67:90:c6:f8:d1:08:25:e0:a1:95:44:
         15:a6:21:5b:72:c1:80:7a:5d:48:dc:0f:6a:ca:11:56:79:e4:
         8b:3f:64:0f:2e:ba:57:18:24:34:b8:4b:f3:e3:17:8c:dd:6a:
         e4:fa:3d:50:80:43:3a:c9:8b:25:bd:0e:b9:13:23:cb:35:37:
         c5:d9:3c:71:8c:11:37:65:40:bb:ca:00:9d:1e:63:f6:07:6f:
         fb:39:59:94:8c:e3:dc:50:31:2a:5d:f1:77:c3:aa:e1:cf:b3:
         58:a2:b7:59:71:57:39:41:e5:c8:32:31:cd:08:89:eb:e6:1b:
         9c:17:6a:92:9a:36:5d:ed:6f:39:81:18:28:ec:ee:a9:a4:e0:
         eb:77:04:e2:75:e6:43:9d:04:3a:36:b0:b9:43:f7:04:f8:c2:
         9a:68:d6:48:ae:66:c7:5a:e5:25:d2:9c:22:9e:ac:a5:50:1c:
         3d:e6:be:e2:e6:a9:58:7f:d4:93:a2:f1:94:27:de:4e:23:fc:
         fe:ee:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:07 2024 by rpki-client on console-fra.rpki-client.org