Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199925.roa
File:                     AS199925.roa (raw, json)
Hash identifier:          vf3tVgkc1+bwnUme/9RBUYqztvqQvaP1wpo8ZCaZVwQ=
Subject key identifier:   71:4A:B1:51:DE:42:9F:9C:D7:47:CD:B6:BF:61:57:9C:50:A7:CC:1B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7E0DE1990880523A943B929B87E82619BC93A9BC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199925.roa
Signing time:             Wed 08 Nov 2023 07:13:23 +0000
ROA not before:           Wed 08 Nov 2023 07:08:23 +0000
ROA not after:            Wed 06 Nov 2024 07:13:23 +0000
asID:                     199925
IP address blocks:        104.234.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0d:e1:99:08:80:52:3a:94:3b:92:9b:87:e8:26:19:bc:93:a9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov  8 07:08:23 2023 GMT
            Not After : Nov  6 07:13:23 2024 GMT
        Subject: CN=714AB151DE429F9CD747CDB6BF61579C50A7CC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:4e:23:cd:09:a3:19:03:73:9e:8c:10:9f:
                    8e:05:45:82:cc:df:34:c4:de:6c:7a:37:5b:cb:3b:
                    da:3c:36:3e:39:7f:7a:c3:36:4e:6f:ae:b8:00:fb:
                    bf:ec:a3:2e:d4:4e:33:d6:8f:bb:98:a5:98:d2:4b:
                    bb:8f:61:8e:2f:0b:b9:82:36:16:5c:a1:36:80:ac:
                    4c:d9:74:6d:c5:eb:59:08:88:53:9e:d3:af:6b:8d:
                    1e:20:e8:a0:a6:03:5c:cc:7c:d6:db:91:5e:a0:8b:
                    03:fe:92:49:a7:20:a1:e2:2b:f7:1f:0f:15:4f:8c:
                    07:2b:26:1b:11:39:ae:8b:10:19:e7:f8:d9:eb:4f:
                    e5:da:56:b7:53:90:81:a8:30:70:e7:d6:13:ec:95:
                    72:25:63:0b:c1:3c:d7:3a:fe:d4:35:00:54:c3:47:
                    7f:b6:4a:7e:6d:0a:e6:2a:ee:53:3d:57:18:c7:48:
                    d8:3a:8c:0f:46:22:40:7b:b7:03:62:dc:9e:dd:f8:
                    9f:3c:db:5f:5b:b0:49:c2:b3:4e:9e:55:05:7e:1c:
                    00:b6:f5:f8:ed:ca:85:df:03:42:59:2f:66:bd:2a:
                    f5:92:0d:0d:88:77:22:8a:26:1e:92:e3:8d:be:ec:
                    4f:ae:90:9e:dd:82:2c:85:11:1a:02:ee:3c:5e:1e:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:B1:51:DE:42:9F:9C:D7:47:CD:B6:BF:61:57:9C:50:A7:CC:1B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:29:89:e6:a3:35:c7:ea:f2:ec:d8:59:0f:ec:7c:a1:5e:
         9b:47:0c:7e:2a:cd:cb:1e:8d:f6:8e:5f:eb:4c:72:95:11:be:
         3a:ad:36:56:e0:ab:55:74:cb:34:c3:60:17:e5:9c:c6:16:e5:
         82:9f:45:3c:54:cf:71:8a:3b:e4:73:1e:a8:a9:16:9f:74:77:
         66:b9:4d:a5:4a:b1:00:b4:87:e6:bb:f9:69:52:6b:56:72:18:
         be:8a:11:48:81:0e:09:fe:3e:67:57:05:8e:d4:1a:dd:9f:b4:
         9f:b2:0f:7a:73:ab:42:ef:66:ce:66:31:39:37:0a:b1:10:98:
         5d:72:c7:a4:e5:28:06:7d:a4:72:a3:0d:43:0b:88:21:2d:67:
         91:00:2e:32:df:8c:15:0a:62:67:5f:7f:38:d6:cd:15:c2:1e:
         58:e5:3a:a1:a3:7f:21:f0:45:43:99:7d:a8:d6:75:7c:f1:b7:
         b2:4f:b3:e0:43:13:70:f5:66:7e:9b:ec:ec:3f:e6:58:2d:76:
         81:f9:7d:67:04:ac:ba:a6:a1:ab:05:aa:ea:1f:f5:80:43:58:
         54:3f:09:02:ef:a0:66:c0:65:87:2b:ed:12:39:ca:cb:cf:0a:
         fa:af:08:61:e4:bb:ae:c1:d7:c0:f1:1b:1d:e4:97:05:99:5a:
         e6:b4:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:27 2024 by rpki-client on console-ams.rpki-client.org