Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
File:                     AS214025.roa (raw, json)
Hash identifier:          8FQ2NSA2GeYoYNx2dFEx0Y0Xhm22tjCdMIlvyVuJo+M=
Subject key identifier:   90:A2:FE:37:CA:39:4A:E9:F5:8B:1A:66:6E:A0:AF:2B:7F:98:6F:1E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       01007277CF27008597DC1EC3B0EA335C0B617DFE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
Signing time:             Mon 21 Oct 2024 07:38:09 +0000
ROA not before:           Mon 21 Oct 2024 07:33:09 +0000
ROA not after:            Mon 20 Oct 2025 07:38:09 +0000
asID:                     214025
IP address blocks:        104.234.107.0/24 maxlen: 24
                          104.234.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:00:72:77:cf:27:00:85:97:dc:1e:c3:b0:ea:33:5c:0b:61:7d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 21 07:33:09 2024 GMT
            Not After : Oct 20 07:38:09 2025 GMT
        Subject: CN=90A2FE37CA394AE9F58B1A666EA0AF2B7F986F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:92:cd:4d:04:da:d7:1a:22:49:b8:5d:b9:
                    1c:fd:cf:ae:5f:f3:22:72:92:8f:67:c0:0c:2b:ee:
                    99:5f:b2:ea:31:91:b8:b9:5f:bc:f5:23:a4:81:1b:
                    30:0d:cc:eb:bc:b7:2d:79:e4:7c:98:d5:12:43:b9:
                    b8:0e:63:c4:24:14:4f:34:5d:77:6f:ed:64:79:a0:
                    1a:30:e3:27:8d:02:80:46:bb:1f:e6:5b:89:35:68:
                    11:e6:5b:e9:35:7d:8f:69:46:75:d6:81:19:db:0a:
                    e9:b6:3f:aa:e7:e0:d9:12:68:d2:a6:cd:30:e8:99:
                    06:17:06:9a:b9:70:69:42:08:0c:f5:f8:2f:83:1a:
                    34:e2:3d:27:77:e3:06:db:6d:51:0a:c4:58:e7:e7:
                    45:83:c1:00:ed:91:a3:1f:2c:86:20:0d:0f:c4:f6:
                    0e:ca:3a:90:bc:c2:2a:3f:c0:c4:d4:57:a7:40:84:
                    9c:51:df:8c:65:de:fb:61:46:52:0c:1a:98:01:a3:
                    15:59:6a:f6:8a:96:f2:af:80:ea:41:0b:8b:46:76:
                    2a:67:3c:22:2f:c4:c3:94:11:ce:48:d3:a3:e9:c8:
                    1f:2d:20:10:bf:fa:09:42:6f:7c:f8:a0:61:52:90:
                    80:46:33:d5:6e:43:e7:3f:c7:d8:d9:67:72:e5:fd:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:FE:37:CA:39:4A:E9:F5:8B:1A:66:6E:A0:AF:2B:7F:98:6F:1E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.107.0/24
                  104.234.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:96:0a:c6:d7:a2:2c:43:1c:09:a5:1e:b7:74:b2:39:ce:
         ac:45:2a:05:be:8e:b6:07:64:60:fd:48:a3:e3:53:fc:9e:00:
         1d:cd:1c:70:62:4b:d8:12:d4:35:83:a6:3e:6d:8c:83:af:ad:
         78:09:46:75:2d:b3:7e:d6:d7:14:cf:7d:1c:7a:76:2a:d7:1d:
         09:68:c0:23:00:1e:b7:04:2b:27:31:bc:e3:fd:13:66:bf:5c:
         9b:c5:a4:f5:c9:1d:56:97:01:82:7a:a2:08:ee:58:ec:9a:06:
         d1:dc:66:11:16:b1:a9:df:13:48:ec:8c:7a:61:c8:ad:b5:01:
         ba:a6:9b:a7:3f:89:10:8b:c0:10:a5:0a:ef:a5:78:0e:64:49:
         d2:8c:8e:65:e2:de:2f:53:39:6c:c6:fd:2e:8c:d7:a0:e7:25:
         e7:21:60:06:bc:86:4e:33:91:48:c7:f0:c1:65:6c:4f:c2:76:
         bc:44:f3:49:90:6d:e5:21:13:08:11:4e:a1:e7:a3:b2:48:a2:
         78:a1:41:06:7c:fd:54:53:36:1b:49:79:48:79:6a:e1:df:09:
         95:7e:96:fd:e5:ed:39:e5:b7:f8:46:27:19:00:53:a4:29:d1:
         aa:74:43:4c:e6:34:5c:d2:67:e1:6e:10:a2:0f:6c:89:11:2b:
         e9:02:8f:4b
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUAQByd88nAIWX3B7DsOozXAthff4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDIxMDczMzA5WhcNMjUxMDIwMDczODA5
WjAzMTEwLwYDVQQDEyg5MEEyRkUzN0NBMzk0QUU5RjU4QjFBNjY2RUEwQUYyQjdG
OTg2RjFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlueSzU0E2tca
Ikm4Xbkc/c+uX/MicpKPZ8AMK+6ZX7LqMZG4uV+89SOkgRswDczrvLcteeR8mNUS
Q7m4DmPEJBRPNF13b+1keaAaMOMnjQKARrsf5luJNWgR5lvpNX2PaUZ11oEZ2wrp
tj+q5+DZEmjSps0w6JkGFwaauXBpQggM9fgvgxo04j0nd+MG221RCsRY5+dFg8EA
7ZGjHyyGIA0PxPYOyjqQvMIqP8DE1FenQIScUd+MZd77YUZSDBqYAaMVWWr2ipby
r4DqQQuLRnYqZzwiL8TDlBHOSNOj6cgfLSAQv/oJQm98+KBhUpCARjPVbkPnP8fY
2Wdy5f0YXQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFJCi/jfKOUrp9YsaZm6gryt/
mG8eMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqawMEAGjqnTANBgkqhkiG9w0B
AQsFAAOCAQEAfXmWCsbXoixDHAmlHrd0sjnOrEUqBb6OtgdkYP1Io+NT/J4AHc0c
cGJL2BLUNYOmPm2Mg6+teAlGdS2zftbXFM99HHp2KtcdCWjAIwAetwQrJzG84/0T
Zr9cm8Wk9ckdVpcBgnqiCO5Y7JoG0dxmERaxqd8TSOyMemHIrbUBuqabpz+JEIvA
EKUK76V4DmRJ0oyOZeLeL1M5bMb9LozXoOcl5yFgBryGTjORSMfwwWVsT8J2vETz
SZBt5SETCBFOoeejskiieKFBBnz9VFM2G0l5SHlq4d8JlX6W/eXtOeW3+EYnGQBT
pCnRqnRDTOY0XNJn4W4Qog9siREr6QKPSw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:03:47 2024 by rpki-client on console-fra.rpki-client.org