Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa
File:                     AS211936.roa (raw, json)
Hash identifier:          GszNZJbVqYjbm8jg7tWpwcDnnfNLaPcXEM51Z9PTBzU=
Subject key identifier:   62:47:23:99:40:36:38:45:F1:4A:D9:7A:CB:87:20:DE:E0:26:B4:4A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       23E1DB49A3EE23CAD099A173407E6C5468204916
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa
Signing time:             Mon 23 Oct 2023 09:28:59 +0000
ROA not before:           Mon 23 Oct 2023 09:23:59 +0000
ROA not after:            Mon 21 Oct 2024 09:28:59 +0000
asID:                     211936
IP address blocks:        104.234.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e1:db:49:a3:ee:23:ca:d0:99:a1:73:40:7e:6c:54:68:20:49:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 23 09:23:59 2023 GMT
            Not After : Oct 21 09:28:59 2024 GMT
        Subject: CN=6247239940363845F14AD97ACB8720DEE026B44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:34:ae:69:40:3d:2a:45:45:6b:4e:e5:3e:
                    da:fd:fe:a7:e0:9f:43:29:30:59:02:a2:6f:ec:06:
                    25:58:24:d5:73:b4:26:d3:fc:ec:cc:5f:2e:1a:c8:
                    c3:01:a9:76:7a:b6:06:94:dd:bf:ae:5f:30:b9:13:
                    a6:86:c8:dc:66:80:ac:20:13:8c:1e:8e:bb:10:de:
                    17:f7:db:93:74:92:cc:ac:d1:e1:ed:3e:4f:df:96:
                    3b:22:c1:37:43:8f:9c:0f:2f:89:29:50:a4:87:5f:
                    78:5b:f1:49:b1:c8:9e:fc:a8:62:db:ae:4b:17:1e:
                    9e:c2:68:c8:2e:28:70:a3:7a:21:62:d4:3e:9d:a3:
                    58:87:63:ad:f6:eb:ed:78:38:fb:4c:87:31:47:39:
                    70:48:80:3d:7c:1f:29:37:7d:cf:55:f6:02:08:82:
                    66:80:46:6b:4e:d2:83:71:28:3d:b0:0e:bb:72:76:
                    da:f6:1e:a8:b8:c7:a5:f0:d3:c2:d5:2d:cd:d5:02:
                    1c:d0:aa:c5:31:d0:1b:7e:c1:91:4d:f5:85:ed:e2:
                    95:ad:d1:f2:40:5b:65:ce:29:c5:05:17:27:bd:37:
                    a7:d0:17:66:97:1b:ff:0a:f9:29:a3:08:41:15:d8:
                    f7:77:9f:53:65:c2:88:98:6a:55:67:d0:3f:39:31:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:47:23:99:40:36:38:45:F1:4A:D9:7A:CB:87:20:DE:E0:26:B4:4A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:14:50:b9:3a:82:d5:0c:f6:c8:bd:60:64:42:08:34:b0:99:
         a2:f6:21:98:2a:19:d1:78:e0:f9:40:67:7c:48:ce:a5:24:e1:
         a9:65:18:6f:0e:c4:4f:e8:c6:52:ca:d8:d9:52:39:a0:ac:a4:
         ba:7f:3a:c7:b3:c7:8e:ec:47:48:b6:65:f4:a9:af:db:48:66:
         31:d5:4d:37:22:bb:e3:37:b8:d8:d9:6c:d2:15:50:34:6c:66:
         5e:b3:1f:68:11:56:7e:85:7d:02:bf:19:15:40:1a:2c:8a:41:
         41:58:53:5f:1e:ca:b5:f5:0b:32:6b:3b:92:f0:dd:02:87:b3:
         3c:70:62:e7:ee:e8:f1:fa:c0:e2:12:9f:a4:02:c4:ca:8c:86:
         3c:bb:89:8f:87:ee:53:6a:52:20:1a:22:38:ca:c8:49:45:8c:
         75:ae:f5:c9:e3:c0:22:1f:a8:aa:58:6a:da:e9:ce:40:c1:7f:
         57:27:57:0a:7e:07:d1:b2:a0:9d:79:3b:be:c4:4f:50:cb:85:
         1c:5b:74:a6:40:a4:ce:c6:e8:d5:4e:d2:c0:ed:63:d0:34:e1:
         a6:69:b0:4f:bb:98:ed:61:a6:dd:f1:2a:cd:e5:7c:d2:f1:53:
         fe:85:19:ca:fd:c4:80:11:d5:92:3c:7e:94:4a:df:dc:82:af:
         71:6e:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org