Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          FUmCA2H3Hgen/9sYk+vHdAhoaUvlSfN9mnXHie1d614=
Subject key identifier:   AB:26:6F:DD:35:7B:33:EF:01:D4:D4:E9:7B:CD:F1:8E:8E:35:B2:37
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6A32BA984F70143F4AE00D8584B3B95368F75937
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20454.roa
Signing time:             Wed 04 Oct 2023 11:45:08 +0000
ROA not before:           Wed 04 Oct 2023 11:40:08 +0000
ROA not after:            Wed 02 Oct 2024 11:45:08 +0000
asID:                     20454
IP address blocks:        104.234.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:32:ba:98:4f:70:14:3f:4a:e0:0d:85:84:b3:b9:53:68:f7:59:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  4 11:40:08 2023 GMT
            Not After : Oct  2 11:45:08 2024 GMT
        Subject: CN=AB266FDD357B33EF01D4D4E97BCDF18E8E35B237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:2e:e6:8d:ab:50:27:58:cb:a0:0a:1a:d2:
                    5a:2c:9f:d7:68:07:a9:da:9d:46:94:44:81:ba:03:
                    5c:e5:af:25:6d:bc:31:cf:53:55:ee:60:54:2c:a7:
                    1c:c0:f6:df:5f:be:b6:73:b5:ed:81:34:ec:d9:de:
                    0f:e2:0a:d6:23:c8:ba:99:19:29:a7:0f:bc:bc:0c:
                    16:d7:34:74:92:33:ac:30:f3:57:4a:f4:5e:a1:11:
                    06:b8:60:38:d2:aa:bc:27:c8:98:64:9f:d8:c8:2a:
                    b7:ef:3d:86:15:00:40:c6:41:25:b2:b5:c5:54:06:
                    2f:c9:ca:be:2b:23:f0:47:2d:e0:80:1b:fc:35:67:
                    d5:ce:98:fa:6d:13:fc:98:8e:39:9b:11:e5:4d:91:
                    3d:87:6c:90:59:10:08:2a:30:e4:5b:90:6e:ac:c9:
                    70:bf:0b:20:03:a1:59:88:2d:de:05:bb:ea:95:51:
                    33:42:d2:f6:66:23:dc:56:39:b3:42:12:65:96:1c:
                    be:f7:4d:18:45:0f:e9:99:80:f0:fc:77:fe:54:4e:
                    c8:48:b9:88:68:6f:e3:cf:1c:d6:71:a4:5c:88:3f:
                    00:a0:0f:1c:8f:5b:19:89:d7:bb:42:e9:82:0e:23:
                    81:1f:b5:df:32:28:21:31:7b:93:74:12:e8:3f:1a:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:26:6F:DD:35:7B:33:EF:01:D4:D4:E9:7B:CD:F1:8E:8E:35:B2:37
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:11:60:b0:b1:9c:4b:99:74:a4:70:19:8b:f7:c1:59:41:bb:
         1e:6f:6e:4d:65:c2:1c:c1:a0:91:84:ae:9b:f9:fc:04:74:4a:
         b9:e4:fb:1e:0f:57:64:c4:24:01:85:e5:4b:93:c7:df:9b:f0:
         7c:b5:2d:a0:4c:fa:bb:1d:2e:19:35:18:ab:77:f0:ef:a1:b8:
         65:f0:76:2e:42:fa:22:7d:b3:26:e7:cc:a9:be:ea:97:c6:10:
         d5:38:01:09:b3:ed:dc:e5:5e:da:e8:a6:27:05:15:08:a3:de:
         da:fc:18:67:38:f1:02:23:df:75:9e:21:58:af:58:4c:a9:25:
         57:b4:cc:ce:58:46:cf:57:82:26:48:aa:b5:52:0c:09:a7:63:
         98:43:28:76:14:c4:54:23:40:4e:a7:9a:3f:c2:96:7d:26:d1:
         58:12:15:8c:3a:b1:af:a9:bf:e2:22:69:ad:9a:42:84:76:ce:
         37:51:c3:ed:34:27:37:f8:62:28:0a:9f:65:25:65:cf:7c:1f:
         a7:7f:a2:a4:2c:d4:3f:46:c1:4e:29:b4:b4:63:36:33:96:88:
         b3:83:30:73:34:7d:75:51:62:f4:90:8b:17:d9:e6:73:97:4d:
         0c:8e:0f:19:c9:08:64:a1:bf:9a:64:9a:66:1b:78:9f:b3:44:
         bd:dc:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:05:54 2024 by rpki-client on console-ams.rpki-client.org