Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20057.roa
File:                     AS20057.roa (raw, json)
Hash identifier:          SOoadBbC/QxG5rIaomwkicaQ2UJYFTCtaDl2yK4DWJ0=
Subject key identifier:   06:00:FB:00:09:40:F5:F7:84:8D:3D:31:8B:8F:F1:DB:B8:08:02:2A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1505816EEB9DB7AF137D2174B350D18007C51EC8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20057.roa
Signing time:             Sat 24 Aug 2024 14:34:37 +0000
ROA not before:           Sat 24 Aug 2024 14:29:37 +0000
ROA not after:            Sat 23 Aug 2025 14:34:37 +0000
asID:                     20057
IP address blocks:        104.234.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 18:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:05:81:6e:eb:9d:b7:af:13:7d:21:74:b3:50:d1:80:07:c5:1e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 24 14:29:37 2024 GMT
            Not After : Aug 23 14:34:37 2025 GMT
        Subject: CN=0600FB000940F5F7848D3D318B8FF1DBB808022A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:56:ca:41:38:08:89:f0:f6:a3:f9:a6:55:
                    72:92:ab:b2:e2:6b:d0:46:9f:15:0b:a0:cc:4d:01:
                    b5:81:eb:10:d4:0c:4e:85:d8:e7:f1:1a:99:4a:8f:
                    6d:e1:2f:77:80:4b:50:c3:e1:1c:ab:43:df:6b:22:
                    d1:29:3c:eb:2f:5d:50:cb:4e:a9:16:e5:2f:4a:b6:
                    b8:c2:ee:00:5a:9b:9a:4c:5e:2c:51:c9:97:82:24:
                    36:2c:e0:21:78:01:83:5e:bf:1e:83:bf:d5:7c:a2:
                    cc:ab:65:49:d6:61:cc:76:c4:8b:54:1c:30:31:ed:
                    a6:ca:2b:a1:c5:db:ba:d2:10:89:97:e3:2c:32:e6:
                    04:86:f5:ff:6e:23:84:d2:93:f5:ab:b9:4f:a7:b1:
                    50:47:b0:e2:ac:af:cf:a0:68:f4:24:9a:5b:de:71:
                    32:44:a9:29:47:a0:28:f2:59:c3:45:30:c5:51:55:
                    68:3e:3a:ad:e2:fb:50:a8:3f:92:53:b4:d7:cf:5d:
                    77:7c:46:82:13:9c:d6:62:21:ca:86:76:a4:38:1e:
                    16:e8:5a:d2:0c:79:df:ba:39:10:8e:22:0f:46:1e:
                    e8:89:9a:66:5f:79:15:4b:9f:35:95:56:b6:08:ed:
                    b3:f4:0d:9a:8c:63:a8:7d:6c:76:19:bd:87:38:eb:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:FB:00:09:40:F5:F7:84:8D:3D:31:8B:8F:F1:DB:B8:08:02:2A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:c2:f6:87:ab:d3:b9:21:d5:a5:1f:d8:9e:aa:1c:8c:34:
         c1:13:5f:ef:f0:43:35:6d:94:de:7f:0c:d4:63:b3:cb:1e:63:
         ed:19:c9:04:e9:9d:e5:6b:89:2b:f5:92:bb:a4:0f:b2:9f:85:
         d7:3b:0e:48:53:19:7b:4e:1e:66:93:92:19:20:40:d4:59:8d:
         e9:e6:9e:8c:f4:b7:d8:3e:43:60:c8:15:ad:c7:4f:30:d7:75:
         d7:7d:42:b1:02:4c:43:bb:f7:ef:69:96:6a:47:79:c4:a6:f8:
         2c:71:82:a1:43:8f:1e:9d:ca:78:8a:82:e7:dc:76:6a:65:88:
         6a:53:83:d9:a7:03:da:87:8a:f0:74:43:02:29:05:96:4a:81:
         f6:f7:63:56:a0:15:62:1c:21:dc:0e:6c:1d:5a:f5:a4:09:61:
         2f:fe:d9:8a:41:66:57:22:c8:f2:b5:eb:c9:e8:64:96:c3:01:
         60:65:32:a8:f5:39:18:19:60:b3:ee:97:0f:1a:33:20:13:bb:
         71:0b:ad:80:72:9b:42:c7:c7:b8:b3:4b:8a:f2:6e:e8:db:1e:
         7c:9a:59:a0:42:76:10:f5:eb:e3:42:ca:22:4f:46:d3:fa:8d:
         4d:1f:ec:a3:7f:6e:a6:e1:37:b0:f3:58:66:f2:57:df:ed:5e:
         d5:96:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:21:39 2024 by rpki-client on console-ams.rpki-client.org