Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
File:                     AS214024.roa (raw, json)
Hash identifier:          2lM7IOPKQPzPkLoJ74H/9FHICtTHtokorNNPp+CKXfY=
Subject key identifier:   60:6E:C4:28:0B:1A:AC:34:82:F5:D1:CA:57:40:58:5E:EA:F1:6A:9A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       775044CBAB8EFE1DAF07A1676B685CDA76290CAD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
Signing time:             Mon 21 Oct 2024 07:38:09 +0000
ROA not before:           Mon 21 Oct 2024 07:33:09 +0000
ROA not after:            Mon 20 Oct 2025 07:38:09 +0000
asID:                     214024
IP address blocks:        104.234.107.0/24 maxlen: 24
                          104.234.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:50:44:cb:ab:8e:fe:1d:af:07:a1:67:6b:68:5c:da:76:29:0c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 21 07:33:09 2024 GMT
            Not After : Oct 20 07:38:09 2025 GMT
        Subject: CN=606EC4280B1AAC3482F5D1CA5740585EEAF16A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:0c:c2:a1:33:b9:a1:c2:ec:ad:ca:db:da:
                    58:43:51:a5:65:ad:c2:a0:19:ed:36:3c:f1:ba:8c:
                    fb:76:6e:c2:64:00:a3:c3:2d:f3:85:f1:46:d0:e5:
                    2f:05:72:4d:df:9c:0c:42:81:e8:bd:2f:20:a7:b4:
                    e9:8c:b9:6e:0f:d0:1d:ff:75:73:a8:31:9b:54:1a:
                    1a:90:c3:fc:8a:a5:3b:38:bb:a8:5f:53:f6:1c:5b:
                    88:00:71:fc:78:33:57:e4:b9:49:bd:00:b4:70:9a:
                    58:42:dd:61:ba:a0:57:47:ed:a2:f0:86:8e:43:48:
                    f2:e4:f6:9f:5b:a2:1c:7d:d2:4c:bc:14:6d:cd:a0:
                    f0:74:16:4c:47:c4:48:8d:58:65:12:97:0d:5e:11:
                    20:52:21:4b:f3:6a:48:06:71:dc:29:d2:64:01:5f:
                    e2:cd:da:f1:ae:06:a7:af:22:fa:14:ee:5a:c0:d2:
                    96:02:f9:cb:bb:dc:c1:95:87:f6:f1:8f:5d:11:74:
                    52:90:f1:34:0b:3c:db:fb:54:90:50:98:06:c6:ab:
                    7e:ff:6b:02:dd:d5:67:02:25:e7:ec:a7:c7:2d:d4:
                    5c:a3:0b:66:db:47:10:db:06:35:15:2f:88:cc:56:
                    1b:16:3e:bd:d1:cb:b5:e7:48:74:d9:c5:eb:90:9b:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6E:C4:28:0B:1A:AC:34:82:F5:D1:CA:57:40:58:5E:EA:F1:6A:9A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.107.0/24
                  104.234.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:b5:41:52:14:62:26:c7:5d:d5:84:36:87:ee:03:58:00:43:
         b3:3e:92:45:36:f7:a0:10:3b:c2:cc:6f:50:d1:41:44:58:d8:
         c0:de:76:6a:e2:45:3a:8f:d4:9c:e6:db:d1:0c:a7:1d:ae:d8:
         66:1d:20:3b:6d:a6:cb:52:1f:bb:4a:56:b8:6b:52:b1:e2:86:
         e7:0e:d1:38:cd:66:53:ea:f1:c5:87:1d:bc:05:cb:88:ba:b1:
         66:cc:0f:46:0f:7b:48:eb:d9:46:a5:17:9f:4d:a2:90:75:4b:
         3a:5c:99:42:21:ff:e5:c2:77:bb:d8:7b:03:e8:52:f3:93:f3:
         50:9a:2a:02:7f:8f:5c:b3:6d:b8:7d:e1:a5:1d:be:82:ca:83:
         49:a5:ce:ed:ba:a1:91:6a:0b:31:cd:89:fd:0d:18:e4:9b:c0:
         3d:d7:70:eb:0c:e7:80:81:15:c0:eb:26:6f:bf:80:d3:4b:06:
         12:4b:c5:34:76:d3:4d:19:dc:54:6d:c0:df:bf:02:22:4d:ca:
         8c:f3:83:55:a8:95:34:4a:32:cf:78:80:a4:02:48:ef:82:25:
         3b:6f:6b:93:5a:1a:d5:7a:64:35:46:1d:ca:47:67:77:c4:33:
         a0:e3:1c:cc:5b:65:f9:f3:21:0d:c5:70:62:43:fe:eb:47:8d:
         fc:39:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org