Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa
File:                     AS211373.roa (raw, json)
Hash identifier:          m69VsV8RRXfAxFJWm2aq2RGgK3Dm/123imcq6GmNt7g=
Subject key identifier:   E8:64:4E:5C:19:E9:18:85:F9:B4:22:DA:F1:34:30:34:40:5E:BA:ED
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6AF835ECC641FF8F1089DCFD22D7DE8F8CB28B8C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa
Signing time:             Wed 04 Sep 2024 11:48:59 +0000
ROA not before:           Wed 04 Sep 2024 11:43:59 +0000
ROA not after:            Wed 03 Sep 2025 11:48:59 +0000
asID:                     211373
IP address blocks:        104.234.130.0/24 maxlen: 24
                          206.53.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Dec 2024 11:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:35:ec:c6:41:ff:8f:10:89:dc:fd:22:d7:de:8f:8c:b2:8b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  4 11:43:59 2024 GMT
            Not After : Sep  3 11:48:59 2025 GMT
        Subject: CN=E8644E5C19E91885F9B422DAF1343034405EBAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:52:b6:fa:3e:1b:95:f7:f2:e7:ca:44:71:
                    1f:4c:58:3d:76:ff:80:36:05:eb:1e:11:64:3f:e9:
                    b1:71:64:65:37:53:6f:ad:9d:84:e6:fb:36:65:82:
                    e8:a3:eb:85:03:0e:71:a8:ae:8c:1f:bb:38:2b:d7:
                    e8:12:0d:68:96:6c:04:32:9e:c0:19:92:40:b9:6f:
                    1e:3a:e4:ab:28:be:3f:3a:25:4f:90:33:13:4c:c9:
                    b1:22:79:2b:23:81:bc:2a:61:b2:02:43:61:73:a7:
                    da:ed:be:29:5e:55:21:c9:3e:cf:81:51:2d:f8:fa:
                    c9:88:50:b0:d6:96:cf:45:e5:ef:2e:d4:b6:54:18:
                    d1:03:4c:e7:25:c5:55:ef:33:bc:e8:93:c3:1f:15:
                    6f:ba:9a:b5:19:e0:59:c9:b1:b6:98:7f:a2:54:16:
                    d9:72:c5:d3:bd:77:69:54:07:e6:bf:eb:b9:3c:bc:
                    1e:36:69:33:dc:88:21:c8:99:69:0a:3f:97:94:7e:
                    6b:19:f8:34:ad:fd:45:d6:19:22:b8:a1:62:17:e3:
                    80:b2:6a:cf:cc:94:80:4f:3c:2f:fb:5d:18:d3:ab:
                    ab:4f:73:9b:2c:26:c7:c2:16:83:61:c0:e1:19:e0:
                    6b:84:1e:3f:93:2c:08:aa:e5:05:c4:18:78:90:2f:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:4E:5C:19:E9:18:85:F9:B4:22:DA:F1:34:30:34:40:5E:BA:ED
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.130.0/24
                  206.53.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:92:23:1a:0e:81:ee:5b:95:66:35:ca:87:42:1b:bd:9f:
         83:ea:95:2a:2c:b6:61:8c:b3:7c:f2:c6:8d:5c:bd:1a:b9:45:
         5f:c3:3b:0f:d5:2b:13:ec:27:08:71:91:30:2e:9f:eb:33:99:
         c7:a7:7a:06:e7:8d:4c:67:f0:3a:f4:79:a8:47:06:ac:d1:33:
         ae:8a:20:0d:7c:2e:0f:a5:80:e7:c6:d3:c2:60:56:86:34:10:
         b9:f6:cd:ca:6e:38:c8:0c:ab:a1:04:18:71:5f:d4:c1:76:57:
         c6:a2:66:fa:fd:be:f3:b8:c6:6c:7c:70:88:a1:08:c8:99:21:
         6a:d9:0e:08:4b:89:8f:18:5f:41:fa:66:3f:ef:1e:b1:e6:64:
         0e:ae:f8:52:05:11:e1:0d:ec:84:c8:27:27:3b:d2:15:99:3f:
         04:19:ff:90:14:5f:35:bf:27:75:da:e2:9a:33:2e:1a:33:67:
         0d:ab:d2:e2:3e:f5:b8:85:68:1f:48:58:f0:74:63:2d:0f:05:
         f8:f7:be:3e:6d:a3:85:d3:76:e5:c4:61:45:65:bd:fe:07:c0:
         0a:b1:81:bb:ed:ea:a1:27:89:ad:a2:ae:25:66:72:a0:bd:57:
         0c:17:f1:ab:de:12:83:96:d4:88:2d:4f:ba:5f:92:a1:c3:37:
         35:f5:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 11:22:44 2024 by rpki-client on console-fra.rpki-client.org