Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa
File:                     AS211936.roa (raw, json)
Hash identifier:          yyGjge5+/pwbdRs+1uS3+x0RtuiPqWzmXc4LsTJFL+U=
Subject key identifier:   DA:7C:82:F6:D3:FE:CB:3F:B1:5E:2A:23:3A:6F:B6:04:3E:FF:53:02
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       39E8C3ECA5C325D31E0A910BA18151474294AEDC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa
Signing time:             Mon 23 Sep 2024 09:48:59 +0000
ROA not before:           Mon 23 Sep 2024 09:43:59 +0000
ROA not after:            Mon 22 Sep 2025 09:48:59 +0000
asID:                     211936
IP address blocks:        104.234.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e8:c3:ec:a5:c3:25:d3:1e:0a:91:0b:a1:81:51:47:42:94:ae:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 23 09:43:59 2024 GMT
            Not After : Sep 22 09:48:59 2025 GMT
        Subject: CN=DA7C82F6D3FECB3FB15E2A233A6FB6043EFF5302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:e3:69:8a:4b:54:d1:20:21:9e:67:e8:9c:
                    b0:87:52:81:0c:5a:e6:33:0b:da:52:37:d4:d5:65:
                    f1:30:55:ff:4d:85:96:37:2b:dc:d8:e8:92:0b:de:
                    e6:60:19:57:3b:9d:b7:81:20:dd:9b:23:19:d6:6a:
                    82:c6:2f:cd:f5:ee:f3:45:78:12:8d:a0:08:00:63:
                    cc:99:51:42:7a:49:7e:39:3a:a9:d5:d2:47:d3:b6:
                    22:b7:4c:37:ba:22:31:88:17:6e:94:85:3b:9d:d4:
                    07:68:bb:25:92:9a:c2:06:78:47:51:cc:3f:5e:f1:
                    5a:85:ae:a8:04:b5:99:b2:27:4f:b9:55:b3:10:b9:
                    3d:58:d8:be:fb:b4:9f:9c:e9:54:03:b9:b1:a5:9f:
                    cc:9c:87:aa:00:bf:db:83:97:73:d2:ba:59:69:46:
                    60:ff:1c:ba:e5:54:59:92:a8:34:d6:6e:bc:75:f6:
                    0d:c4:76:f4:63:c9:f9:38:b7:f1:25:d9:4d:17:49:
                    53:82:fe:d8:19:b3:da:66:af:6d:f0:96:57:ce:cc:
                    b2:ff:dc:2f:50:9f:0a:5a:b8:f4:8a:62:75:4a:91:
                    a3:8a:d0:01:bd:9e:69:fb:9e:8b:ee:3c:fe:a3:eb:
                    b8:12:09:d6:1e:80:cf:d7:8c:bc:7f:a2:bb:5b:93:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:82:F6:D3:FE:CB:3F:B1:5E:2A:23:3A:6F:B6:04:3E:FF:53:02
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:c8:04:3b:b3:19:47:f1:fd:39:e7:c8:fb:4b:a4:9e:f9:
         ce:3c:b5:96:86:d7:b3:29:ff:9c:cf:ff:16:d1:8e:07:f8:d0:
         71:11:4b:37:92:90:aa:85:42:03:09:34:ee:10:21:d1:d0:f7:
         c9:78:38:93:b4:41:03:c0:f1:1c:de:4b:18:cf:44:9d:a4:16:
         d4:73:f3:aa:77:46:78:cb:93:74:a2:cd:62:be:bf:4c:19:7c:
         4e:b9:ba:10:78:6a:58:c5:9d:d5:a8:09:9f:e8:29:cd:12:78:
         05:13:5c:ba:fe:1d:71:bb:a2:4b:0b:d8:96:83:23:7c:4c:ac:
         82:5e:45:0d:17:24:95:e1:b7:79:65:5c:9e:2b:f9:3d:5c:86:
         f8:a5:91:44:37:70:8f:39:b3:1d:b1:d8:48:75:5d:62:4a:eb:
         22:d0:09:c9:66:5c:ab:b6:69:d6:7e:fa:91:b6:04:69:76:b8:
         3f:e0:7d:04:56:c2:e3:75:94:c2:fe:c2:ed:09:7f:e4:25:93:
         85:b6:fc:28:11:8b:f7:ff:67:bd:de:ba:cf:4d:27:df:2d:01:
         30:82:7d:23:72:99:ca:8a:88:1a:ae:4b:e2:d1:b8:f2:7d:cb:
         39:65:a3:b2:e4:4b:4a:af:00:55:b1:11:62:02:66:05:bc:cb:
         1f:c2:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org