Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa
File:                     AS215672.roa (raw, json)
Hash identifier:          2IjXFM/08JcRwzcLgpYJND9WjMJnEcobW+52UCjxjCg=
Subject key identifier:   5F:59:41:B8:7F:44:0E:D8:8E:27:A5:16:C5:28:D7:BB:14:46:95:23
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       42EB6F57744BBE4EC3C178780597B34EC882CAAE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa
Signing time:             Tue 27 Aug 2024 09:51:08 +0000
ROA not before:           Tue 27 Aug 2024 09:46:08 +0000
ROA not after:            Tue 26 Aug 2025 09:51:08 +0000
asID:                     215672
IP address blocks:        104.234.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:eb:6f:57:74:4b:be:4e:c3:c1:78:78:05:97:b3:4e:c8:82:ca:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 27 09:46:08 2024 GMT
            Not After : Aug 26 09:51:08 2025 GMT
        Subject: CN=5F5941B87F440ED88E27A516C528D7BB14469523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:e2:54:ab:d5:27:34:f4:d1:ae:51:22:4f:
                    a5:b4:fd:58:d9:4e:61:cc:07:bd:52:91:3f:c1:f7:
                    af:6a:ff:b3:42:63:78:e9:b8:72:19:7c:19:17:08:
                    72:83:f7:17:cc:43:7b:07:a5:70:f3:64:f5:d3:31:
                    6b:68:10:f0:e7:63:5c:98:17:9d:c6:5d:11:6b:af:
                    4e:b8:4c:2d:b5:8c:d5:4d:41:06:25:11:1d:bf:d2:
                    6b:31:64:76:19:43:7b:e7:08:2d:d9:50:4d:99:27:
                    f5:11:ae:98:e7:90:c0:49:b5:b0:92:17:84:0f:ec:
                    7d:bb:56:70:5d:11:7f:15:51:52:b0:1e:3c:d2:8b:
                    87:4d:2c:11:42:56:0e:ee:5d:34:e6:04:e1:45:bd:
                    25:2c:46:89:8c:b6:e0:7d:a7:32:ad:c2:8c:dc:ce:
                    65:dd:35:39:c7:ee:e8:4f:0e:b2:af:5c:df:aa:90:
                    ff:b7:99:1b:14:75:38:2b:d8:89:b8:55:cb:02:65:
                    e9:6b:be:70:2f:47:1f:9e:71:90:2a:20:34:25:e1:
                    f6:7e:2a:a1:1d:fb:72:27:c2:ac:7d:d7:55:db:5b:
                    b8:bf:b1:5a:1d:aa:bf:7f:a8:1d:6d:98:af:e7:24:
                    45:5f:16:b5:1b:ab:07:ab:01:92:1f:2d:80:ba:24:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:59:41:B8:7F:44:0E:D8:8E:27:A5:16:C5:28:D7:BB:14:46:95:23
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:b4:53:89:c9:c0:be:80:55:ac:2a:0e:69:c5:4c:4f:4d:
         4d:6c:b7:ff:11:01:59:14:6b:5c:fd:f5:05:5f:31:3d:a2:b5:
         cf:63:98:bf:b2:7a:49:89:93:a5:37:f5:09:93:c3:84:bd:94:
         b5:f1:4a:a5:80:71:ec:16:f7:0d:6e:6d:a5:f1:55:6e:2e:72:
         bc:eb:3b:d5:95:84:49:2f:2a:63:ae:28:89:e4:47:ae:06:a6:
         39:a4:24:3d:75:63:ff:76:0c:73:dd:48:4c:f9:0e:1f:2d:73:
         ba:f6:ed:9a:cf:d6:7c:97:d4:ee:80:59:44:29:59:5f:a6:67:
         0b:d5:69:0e:e5:59:fe:79:a7:1d:ab:09:51:aa:ca:5f:cd:c7:
         9a:48:64:b4:37:3d:22:57:ba:b4:04:78:3d:43:68:33:14:80:
         f6:f9:31:ab:15:07:96:12:16:58:11:04:07:45:81:93:e3:26:
         cd:58:1f:1f:98:87:d3:bd:5b:e6:d4:cf:db:6d:dc:de:19:91:
         85:3a:41:6e:6c:c0:40:e5:c9:26:62:c0:a0:4c:7a:3e:a2:95:
         3d:88:b5:d3:b0:6d:11:a6:d9:78:c4:dc:a8:db:bf:ad:78:92:
         47:2b:7c:f2:37:b7:e6:32:37:7a:9b:20:c0:39:c5:a8:53:b4:
         45:ee:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org