Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa
File:                     AS19786.roa (raw, json)
Hash identifier:          YkD+ePTIR+N2rGt0HLkiFWvpeH40dd2Ez4qbKMwIj20=
Subject key identifier:   B7:77:34:BA:57:01:D2:D8:3C:97:34:BF:66:4E:90:CE:C5:5A:C7:23
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       319CE5BB36D5B865D4D929293CB7744854F082BC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa
Signing time:             Wed 10 Jan 2024 03:33:59 +0000
ROA not before:           Wed 10 Jan 2024 03:28:59 +0000
ROA not after:            Wed 08 Jan 2025 03:33:59 +0000
asID:                     19786
IP address blocks:        104.234.40.0/24 maxlen: 24
                          104.234.41.0/24 maxlen: 24
                          104.234.42.0/24 maxlen: 24
                          104.234.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9c:e5:bb:36:d5:b8:65:d4:d9:29:29:3c:b7:74:48:54:f0:82:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 10 03:28:59 2024 GMT
            Not After : Jan  8 03:33:59 2025 GMT
        Subject: CN=B77734BA5701D2D83C9734BF664E90CEC55AC723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:2d:03:76:70:b6:d3:4c:60:f3:12:fd:6a:
                    cf:25:1c:c7:a8:9a:98:e5:bc:7f:ed:0e:e7:80:63:
                    19:41:3c:a5:a5:de:1b:fb:45:36:0b:60:e0:d7:a0:
                    c0:f1:35:65:16:29:b4:8c:02:88:19:b8:1c:38:e7:
                    9f:0e:f9:c8:54:f1:9f:db:8f:fc:5d:18:06:8f:4b:
                    b1:7c:df:58:52:6b:ad:46:c0:09:28:95:56:ef:fa:
                    77:a2:b5:b4:47:0d:28:f1:58:4c:81:04:fc:c0:c5:
                    81:dc:9d:41:ea:b4:1f:62:dd:9f:e4:76:3b:75:3d:
                    bb:67:5f:51:d2:0d:5b:03:99:f4:46:fb:d1:23:c8:
                    4a:55:a5:fe:34:6a:d4:3b:77:1a:6b:f3:1a:f0:e3:
                    30:35:57:ea:d2:4a:04:86:87:f9:f1:07:fe:76:5f:
                    f0:ff:f2:be:ce:2c:c1:76:ae:f1:17:c8:2a:28:32:
                    e4:67:98:0c:ef:0c:6e:c9:c7:6d:88:49:3e:e4:cc:
                    9d:c8:5d:f4:1a:14:2f:4d:2f:72:dd:05:e2:40:3e:
                    5f:5d:21:38:46:27:a2:07:2a:02:81:fa:49:fc:ae:
                    d4:fd:a2:64:6b:52:d5:27:c1:2f:27:49:c0:7a:20:
                    b8:ca:d1:53:8a:c1:10:3b:f3:22:0c:ea:00:8f:97:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:77:34:BA:57:01:D2:D8:3C:97:34:BF:66:4E:90:CE:C5:5A:C7:23
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.40.0-104.234.42.255
                  104.234.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:47:1e:e9:28:e6:3e:8e:48:20:9d:17:73:fb:55:ec:4c:a6:
         fa:98:70:b1:28:80:bf:99:1c:96:08:f5:fc:65:d5:7b:36:e0:
         f5:d0:7b:46:54:75:18:d7:aa:68:da:dd:b3:56:9d:1b:9c:63:
         70:aa:23:c8:94:00:83:0e:82:f8:e6:b1:99:2b:df:1b:d7:e5:
         fb:da:83:df:3f:b3:16:0d:d0:b5:9c:72:a6:9e:d5:a2:18:04:
         e1:d7:b8:f2:24:b0:91:3c:44:b5:f6:62:f3:c2:38:a6:08:ff:
         74:5b:17:39:96:99:45:91:82:f5:a5:63:f0:35:d2:d5:2d:05:
         fb:65:6d:cb:9b:a7:60:e4:59:83:6f:0c:41:3b:13:2b:5c:26:
         be:6f:33:db:c1:34:2a:9f:c6:7f:a5:d7:c5:b0:9a:cc:81:ff:
         75:0f:ea:25:da:90:8d:f9:17:23:64:5f:a3:7f:a1:9d:b0:cc:
         1d:07:46:9c:c0:ab:e2:38:81:a0:88:97:f8:b6:64:64:ba:b6:
         ed:34:55:cb:fd:c5:2d:da:92:1e:bc:6c:55:09:31:24:18:33:
         53:a8:dc:ca:33:66:13:f4:c0:08:27:35:aa:ec:14:54:d7:d1:
         c2:7f:07:2f:a9:0f:fd:be:84:97:79:48:43:70:a8:c6:2d:2e:
         99:41:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org