Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa
File:                     AS211373.roa (raw, json)
Hash identifier:          3CEdkayGcy6DBS7MxKRnXecUpDNCBFxx7xvE9SGCJKY=
Subject key identifier:   B1:94:83:DD:C1:60:CA:40:C5:88:34:A5:7E:91:02:3F:28:7D:33:8B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5B64BB0F3CF6FE19A4AEBCF94C32F032C3718777
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa
Signing time:             Wed 04 Oct 2023 11:38:54 +0000
ROA not before:           Wed 04 Oct 2023 11:33:54 +0000
ROA not after:            Wed 02 Oct 2024 11:38:54 +0000
asID:                     211373
IP address blocks:        104.234.130.0/24 maxlen: 24
                          206.53.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:64:bb:0f:3c:f6:fe:19:a4:ae:bc:f9:4c:32:f0:32:c3:71:87:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  4 11:33:54 2023 GMT
            Not After : Oct  2 11:38:54 2024 GMT
        Subject: CN=B19483DDC160CA40C58834A57E91023F287D338B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:ae:7c:f2:dd:0e:87:2d:f3:d6:1b:ab:9c:
                    e3:2f:12:9c:f4:c7:0f:ff:6e:ef:10:67:43:1a:f8:
                    52:c1:52:ed:1c:91:92:36:ce:a3:fa:17:ba:d7:67:
                    64:6d:9f:19:08:f6:21:1d:d6:25:98:c7:53:d0:b9:
                    45:a3:78:48:7e:f1:de:67:68:43:17:92:39:0b:c2:
                    17:16:52:49:4f:db:f4:c5:04:ab:8c:f0:9f:07:79:
                    7f:84:a6:82:d3:45:99:08:76:2d:61:3f:7c:1e:d6:
                    ce:4e:73:3f:00:05:b9:21:0c:4c:11:2c:77:d9:67:
                    8b:0e:58:6f:69:a8:64:b6:29:2e:71:7e:ce:2a:c1:
                    01:bb:84:69:44:13:f0:61:6c:2d:ff:ae:db:12:d4:
                    30:c4:06:4f:39:56:ab:20:0d:5e:ed:78:f6:83:2d:
                    9c:21:71:e4:a0:21:fd:5d:e4:e2:cd:46:34:17:c0:
                    51:ef:63:9c:28:85:59:76:66:0a:d5:4d:be:1c:a2:
                    80:8f:b7:63:ec:d5:e2:d2:4a:1a:5d:09:6f:41:21:
                    bd:5e:56:0b:da:5a:0f:24:bd:04:78:70:8b:8c:7b:
                    f4:76:e2:16:12:50:61:69:fc:f7:f3:80:00:1b:9f:
                    93:fe:9a:5c:98:e0:d1:8d:5e:64:77:f2:73:cc:2e:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:94:83:DD:C1:60:CA:40:C5:88:34:A5:7E:91:02:3F:28:7D:33:8B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.130.0/24
                  206.53.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f9:83:1e:97:12:2e:a9:6e:d4:4b:5b:d4:63:c9:52:75:56:
         82:81:6f:2e:25:97:ed:3a:13:6d:5e:ee:f8:82:6a:c4:d3:72:
         23:fc:08:26:c8:59:f0:3c:c8:68:87:1a:63:e4:1f:3b:4f:1b:
         ae:d4:e2:4e:52:a6:37:3e:e2:37:2f:7e:91:65:0a:47:12:60:
         74:6a:ed:85:05:99:56:55:37:50:41:86:a4:32:e8:65:e1:12:
         db:b2:ea:12:27:5e:63:48:b9:e2:36:3d:28:a4:95:ae:ec:30:
         ac:92:60:60:6d:0b:6e:03:40:7b:cd:51:bf:70:17:43:17:5d:
         c0:5c:c9:30:77:14:da:b5:f3:0f:f2:1c:cb:3e:1c:12:25:f9:
         47:f1:e9:d8:a6:f8:8d:2b:eb:ff:b0:08:73:8e:c1:6d:58:37:
         c2:6a:f6:3c:1d:0a:50:77:73:46:2e:80:40:25:8d:61:25:75:
         22:ce:4a:c4:94:d7:6e:dd:9b:01:ef:23:50:8c:53:66:70:b2:
         5d:95:c4:63:34:06:5e:cc:d2:86:9b:02:a2:34:3b:cf:83:61:
         1e:fd:89:f1:94:55:26:21:e5:88:41:24:0b:e4:13:c3:96:cc:
         92:3c:c1:33:5e:0b:cd:32:bf:a4:f2:21:6e:d4:1d:8d:01:80:
         34:8c:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:27 2024 by rpki-client on console-ams.rpki-client.org