Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214061.roa
File:                     AS214061.roa (raw, json)
Hash identifier:          JcFIa2W9Eru8d3b6cf4RwcjPkmqVbiiQ2FaTSOTDRp8=
Subject key identifier:   61:25:7B:2F:BF:67:4B:C4:D2:8D:9A:EB:0C:5F:03:31:30:5E:48:67
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       040394DB348784286A00FBA418EE9C3A64D45A59
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214061.roa
Signing time:             Sun 26 Jan 2025 17:04:50 +0000
ROA not before:           Sun 26 Jan 2025 16:59:50 +0000
ROA not after:            Sun 25 Jan 2026 17:04:50 +0000
asID:                     214061
IP address blocks:        104.234.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:03:94:db:34:87:84:28:6a:00:fb:a4:18:ee:9c:3a:64:d4:5a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 26 16:59:50 2025 GMT
            Not After : Jan 25 17:04:50 2026 GMT
        Subject: CN=61257B2FBF674BC4D28D9AEB0C5F0331305E4867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:d7:e6:8d:d7:bc:8c:d7:56:0f:c9:3f:72:
                    a6:7f:52:e1:e4:93:7d:57:60:86:e8:c0:83:0a:41:
                    4a:2b:df:2e:74:2f:52:f7:b1:78:53:71:a4:f4:db:
                    ca:d1:42:03:9f:03:6f:9a:fe:15:ef:fb:44:32:03:
                    7a:65:69:29:8d:c9:fc:55:8c:dd:c0:d7:35:b1:43:
                    a7:48:1a:98:5f:3f:a8:88:a8:8a:ed:19:dc:5e:98:
                    20:4b:01:21:24:47:3a:55:14:5a:88:f9:b2:7e:b2:
                    5b:71:ee:85:87:84:00:53:9d:7f:14:08:ad:17:fb:
                    db:d1:bb:b1:87:e0:ef:16:a2:07:53:a4:b5:52:12:
                    5b:c6:39:0a:08:9d:f2:5d:69:88:b9:df:3d:0a:b5:
                    48:93:34:ac:b5:d8:02:3e:d9:6a:25:88:c5:64:41:
                    07:23:11:2d:95:2f:54:eb:ce:98:6d:6c:56:91:17:
                    d5:98:f3:01:38:07:53:45:1e:9f:0d:7d:47:e6:81:
                    1e:b7:21:a9:f5:1d:dc:4d:ac:af:6f:2d:f4:3e:5b:
                    42:2a:da:e7:75:57:b2:5f:ff:b8:52:63:73:f7:db:
                    b6:3c:48:cf:57:a6:8c:05:03:58:b3:fc:31:20:f2:
                    b4:45:c8:ad:67:5a:9b:26:54:66:fc:14:45:02:87:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:7B:2F:BF:67:4B:C4:D2:8D:9A:EB:0C:5F:03:31:30:5E:48:67
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:43:b0:d7:9b:9a:dc:2d:a4:56:76:e5:30:f3:cd:a8:de:03:
         42:51:d3:bd:f7:08:d5:b1:96:4e:85:e9:b8:87:74:dd:dc:ea:
         50:1d:09:7d:88:06:e0:18:ac:b2:54:d4:79:e4:39:8e:a1:34:
         10:fb:3d:86:06:fb:c0:df:9d:7a:ed:87:c2:61:99:ba:c1:fc:
         e4:f6:de:13:fa:4b:4f:bd:ef:69:d2:c0:0d:d4:c4:9c:d5:e4:
         bb:d8:9d:4b:d4:b3:f0:ee:ae:b3:50:26:f9:5f:ce:3f:3c:53:
         a4:73:9a:3b:2e:91:df:fa:7a:91:17:d4:0d:db:7d:48:ef:3f:
         fa:ad:45:36:d1:6d:67:79:8e:81:94:97:8b:3f:c7:5b:7e:2e:
         3e:e7:a1:74:49:5d:f6:27:f7:0d:be:5c:ec:2c:81:22:4d:c9:
         47:d8:e5:f2:66:3c:d2:19:6a:a2:42:c2:25:09:cb:ab:3e:9c:
         d1:aa:40:53:2d:2b:1a:8c:11:f9:ec:f1:cb:b4:55:64:73:45:
         9a:a1:ce:dc:4a:b7:dd:f3:14:53:50:c8:20:c0:dd:5e:50:d8:
         6c:bc:2b:81:23:be:0c:82:cc:2b:9c:73:94:ae:2b:9b:07:99:
         bf:8d:e1:60:05:f9:08:03:9c:ec:85:e3:e9:6f:89:fe:92:95:
         fd:79:2e:2d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUBAOU2zSHhChqAPukGO6cOmTUWlkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTI2MTY1OTUwWhcNMjYwMTI1MTcwNDUw
WjAzMTEwLwYDVQQDEyg2MTI1N0IyRkJGNjc0QkM0RDI4RDlBRUIwQzVGMDMzMTMw
NUU0ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsHX5o3XvIzX
Vg/JP3Kmf1Lh5JN9V2CG6MCDCkFKK98udC9S97F4U3Gk9NvK0UIDnwNvmv4V7/tE
MgN6ZWkpjcn8VYzdwNc1sUOnSBqYXz+oiKiK7RncXpggSwEhJEc6VRRaiPmyfrJb
ce6Fh4QAU51/FAitF/vb0buxh+DvFqIHU6S1UhJbxjkKCJ3yXWmIud89CrVIkzSs
tdgCPtlqJYjFZEEHIxEtlS9U686YbWxWkRfVmPMBOAdTRR6fDX1H5oEetyGp9R3c
Tayvby30PltCKtrndVeyX/+4UmNz99u2PEjPV6aMBQNYs/wxIPK0RcitZ1qbJlRm
/BRFAoer8QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGEley+/Z0vE0o2a6wxfAzEw
XkhnMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxNDA2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq9zANBgkqhkiG9w0BAQsFAAOC
AQEARUOw15ua3C2kVnblMPPNqN4DQlHTvfcI1bGWToXpuId03dzqUB0JfYgG4Bis
slTUeeQ5jqE0EPs9hgb7wN+deu2HwmGZusH85PbeE/pLT73vadLADdTEnNXku9id
S9Sz8O6us1Am+V/OPzxTpHOaOy6R3/p6kRfUDdt9SO8/+q1FNtFtZ3mOgZSXiz/H
W34uPuehdEld9if3Db5c7CyBIk3JR9jl8mY80hlqokLCJQnLqz6c0apAUy0rGowR
+ezxy7RVZHNFmqHO3Eq33fMUU1DIIMDdXlDYbLwrgSO+DILMK5xzlK4rmweZv43h
YAX5CAOc7IXj6W+J/pKV/XkuLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:58 2025 by rpki-client