Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa
File:                     AS216050.roa (raw, json)
Hash identifier:          kHBLORuI4/YOtg8iqKkCY1VW0BHjefRPvHNrxruT0bc=
Subject key identifier:   3F:1C:F5:3B:10:14:06:BB:6D:7B:06:AC:71:2D:DD:F7:88:71:6B:FB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       29A25C42A43D22B0DA89F326808CF458858C4F82
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa
Signing time:             Mon 15 Jul 2024 07:52:38 +0000
ROA not before:           Mon 15 Jul 2024 07:47:38 +0000
ROA not after:            Mon 14 Jul 2025 07:52:38 +0000
asID:                     216050
IP address blocks:        104.234.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a2:5c:42:a4:3d:22:b0:da:89:f3:26:80:8c:f4:58:85:8c:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 15 07:47:38 2024 GMT
            Not After : Jul 14 07:52:38 2025 GMT
        Subject: CN=3F1CF53B101406BB6D7B06AC712DDDF788716BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6e:2a:64:e7:e7:ab:14:3e:65:e1:f0:e2:46:
                    82:ae:a1:0e:71:cc:9b:07:53:08:45:5e:b6:77:ef:
                    00:c7:c1:aa:70:c5:8c:f3:87:b6:b5:b8:d5:89:c6:
                    45:dc:b1:e8:4b:8a:31:7a:ca:24:9b:e0:e9:33:eb:
                    60:5b:d2:0d:05:d6:09:93:ce:8e:f4:c7:7a:f4:22:
                    68:75:ef:dc:89:f0:12:1c:62:8b:e9:34:ad:c3:83:
                    6e:ff:b2:fa:cf:38:88:48:bb:65:38:cc:15:76:84:
                    a0:4e:b0:1c:83:18:9c:b4:4f:56:64:62:21:e8:e0:
                    28:e9:d5:e8:af:58:34:1d:f1:b6:5b:ea:af:2f:86:
                    93:a6:cc:95:08:0c:aa:02:7e:a9:6a:88:b8:d8:51:
                    c7:cb:3d:79:d7:29:e7:70:f6:93:e4:54:6a:c6:a7:
                    ec:b5:81:ea:c8:ac:e9:66:e2:46:d7:52:89:6f:06:
                    05:1d:71:a8:42:4a:43:58:09:be:cf:bc:3a:2f:67:
                    54:c4:3d:bd:64:6f:73:da:27:d5:d3:e9:84:e5:33:
                    43:e4:5c:57:80:3c:44:23:2a:61:7a:dc:ca:b5:43:
                    dd:a5:0d:cf:1a:78:57:ee:3e:c1:7c:94:2e:a8:bd:
                    c5:a6:0d:2d:58:5d:f4:d0:42:2c:cf:55:c2:ca:cd:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1C:F5:3B:10:14:06:BB:6D:7B:06:AC:71:2D:DD:F7:88:71:6B:FB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:5d:f9:4d:41:13:bc:9b:8f:04:6b:5d:88:68:bc:90:52:54:
         8c:1a:58:10:fa:55:c9:0e:e9:23:5c:c6:ff:cd:81:25:31:da:
         ed:2a:c4:03:cb:1c:12:c3:6d:f7:9a:75:d9:86:5a:67:83:24:
         3e:f4:b2:b3:bd:4b:25:d1:95:69:4b:5d:86:82:d8:66:e9:88:
         f6:5a:65:dc:e9:56:8a:35:b9:45:09:55:c8:32:a0:da:48:2b:
         ae:8b:c3:d3:53:c9:98:3f:ec:a2:3f:d1:eb:b2:ff:c8:6d:d7:
         b5:83:52:4e:79:90:81:0b:40:dd:f1:99:66:f5:80:39:0b:31:
         3c:5d:3f:f7:45:f5:41:e5:56:7c:d0:1c:18:fc:8f:5e:6f:a3:
         df:7f:fc:5f:72:b2:24:b9:5a:23:0d:69:50:56:b1:82:41:85:
         0c:af:e4:58:cc:f8:2b:42:d7:91:94:dd:ae:7f:d5:ab:27:d1:
         ef:e9:85:83:45:7d:53:12:46:52:60:58:d6:3e:89:4b:37:96:
         b8:a8:4b:ec:8c:f2:0e:d2:ba:a4:c4:03:6e:84:07:10:ed:ac:
         ac:d5:d0:2c:12:0e:58:5f:59:f1:68:97:98:ad:f0:dd:f1:4e:
         48:e8:2e:b6:8a:a2:95:84:30:cc:28:51:86:99:df:01:a9:5b:
         5a:a4:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org