Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa
File:                     AS25369.roa (raw, json)
Hash identifier:          ezKRvE08Ko/8MXFoeUQRl0hAQailva10nFX2NUUqn3E=
Subject key identifier:   59:24:C9:3F:10:F8:AC:E9:54:7A:8F:6A:C1:E4:D3:94:FF:03:BB:06
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       113A1C25F7454366674E36F6887B0D9D45FEC97C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa
Signing time:             Fri 15 Dec 2023 23:11:39 +0000
ROA not before:           Fri 15 Dec 2023 23:06:39 +0000
ROA not after:            Fri 13 Dec 2024 23:11:39 +0000
asID:                     25369
IP address blocks:        104.234.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 14:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3a:1c:25:f7:45:43:66:67:4e:36:f6:88:7b:0d:9d:45:fe:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 15 23:06:39 2023 GMT
            Not After : Dec 13 23:11:39 2024 GMT
        Subject: CN=5924C93F10F8ACE9547A8F6AC1E4D394FF03BB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:b1:0e:15:bd:90:57:76:5b:19:7c:74:20:
                    e2:b3:60:16:ab:3a:55:3d:90:15:f8:be:38:e3:05:
                    eb:31:be:ba:6b:e8:ac:6d:c1:1d:a7:f6:d8:9f:9a:
                    62:35:2a:25:18:2b:c1:47:ba:3a:d7:70:77:29:87:
                    45:44:81:06:dc:e0:47:db:6b:e5:59:4b:c0:6a:87:
                    d9:0d:65:3e:03:78:98:dd:c3:ea:96:da:3a:86:c0:
                    a0:cb:91:d4:97:07:be:50:e1:ff:c4:81:e5:db:9d:
                    dd:4e:d7:8a:34:f8:3f:c0:b4:a2:55:34:66:58:4a:
                    8b:f9:ee:dc:15:fa:ba:b5:29:c4:b1:49:5c:c8:77:
                    83:a2:2b:d3:52:b4:20:0c:1b:15:6e:41:f0:3a:df:
                    39:67:12:90:a5:17:4f:bf:e9:45:bd:a5:f9:32:7f:
                    bf:50:4f:8c:74:f4:8a:81:b4:bf:6d:b8:b2:a7:61:
                    32:e4:64:9f:5b:7a:7e:f5:f1:67:81:cd:10:72:ef:
                    f7:10:ac:b2:f5:cc:b7:e2:ef:bb:12:52:bd:6b:e7:
                    8f:60:76:51:69:f2:66:8b:5c:d7:a7:cc:14:3c:29:
                    b9:cd:12:9f:d8:ac:84:92:0c:80:f2:7f:02:f5:72:
                    1c:79:62:ec:5c:e4:d7:af:fb:99:02:85:e9:8f:d2:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:C9:3F:10:F8:AC:E9:54:7A:8F:6A:C1:E4:D3:94:FF:03:BB:06
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:15:1b:c2:da:bb:07:73:68:58:24:41:f0:df:cf:cd:d5:59:
         75:03:49:ac:e8:69:ce:4d:85:e5:42:89:7f:19:93:d6:6c:ab:
         e6:97:85:4d:de:45:08:e8:f5:ca:4e:8e:ba:3b:db:26:7b:a9:
         9c:12:46:5a:c6:9b:15:e8:66:f5:c1:96:e7:c7:c0:db:e6:3c:
         48:b8:ea:9e:85:a1:de:25:ab:71:94:9a:9b:df:05:3a:80:1c:
         3e:39:2a:45:26:79:aa:c4:92:08:9f:f9:9c:c6:78:a4:4c:bc:
         69:40:9b:08:c6:27:0b:87:77:e5:5b:a9:f5:3c:cb:4f:99:7d:
         19:27:e7:9c:0f:4e:2a:87:38:01:51:02:41:79:44:0b:a9:b9:
         e8:69:43:a7:41:be:6b:eb:17:bc:1f:d2:45:d3:2d:d5:f0:6f:
         6e:4d:c5:1f:64:17:82:dd:7b:c9:f5:89:56:f3:57:e8:3b:07:
         31:f6:b8:86:ba:e4:bc:37:38:98:23:24:e0:b4:ff:1f:5b:da:
         31:e5:61:89:84:49:b2:43:80:bf:7f:2c:35:52:75:69:88:f7:
         ed:14:08:e0:54:0f:60:9a:8d:6c:ae:4c:d6:74:d4:ca:d5:62:
         1d:06:62:03:64:d1:ad:6a:70:8e:b2:5b:27:5c:dd:7e:59:09:
         04:f8:bb:1d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUETocJfdFQ2ZnTjb2iHsNnUX+yXwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMjE1MjMwNjM5WhcNMjQxMjEzMjMxMTM5
WjAzMTEwLwYDVQQDEyg1OTI0QzkzRjEwRjhBQ0U5NTQ3QThGNkFDMUU0RDM5NEZG
MDNCQjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcOxDhW9kFd2
Wxl8dCDis2AWqzpVPZAV+L444wXrMb66a+isbcEdp/bYn5piNSolGCvBR7o613B3
KYdFRIEG3OBH22vlWUvAaofZDWU+A3iY3cPqlto6hsCgy5HUlwe+UOH/xIHl253d
TteKNPg/wLSiVTRmWEqL+e7cFfq6tSnEsUlcyHeDoivTUrQgDBsVbkHwOt85ZxKQ
pRdPv+lFvaX5Mn+/UE+MdPSKgbS/bbiyp2Ey5GSfW3p+9fFngc0Qcu/3EKyy9cy3
4u+7ElK9a+ePYHZRafJmi1zXp8wUPCm5zRKf2KyEkgyA8n8C9XIceWLsXOTXr/uZ
AoXpj9Im4wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFkkyT8Q+KzpVHqPasHk05T/
A7sGMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI1MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOo4MA0GCSqGSIb3DQEBCwUAA4IB
AQBaFRvC2rsHc2hYJEHw38/N1Vl1A0ms6GnOTYXlQol/GZPWbKvml4VN3kUI6PXK
To66O9sme6mcEkZaxpsV6Gb1wZbnx8Db5jxIuOqehaHeJatxlJqb3wU6gBw+OSpF
JnmqxJIIn/mcxnikTLxpQJsIxicLh3flW6n1PMtPmX0ZJ+ecD04qhzgBUQJBeUQL
qbnoaUOnQb5r6xe8H9JF0y3V8G9uTcUfZBeC3XvJ9YlW81foOwcx9riGuuS8NziY
IyTgtP8fW9ox5WGJhEmyQ4C/fyw1UnVpiPftFAjgVA9gmo1srkzWdNTK1WIdBmID
ZNGtanCOslsnXN1+WQkE+Lsd
-----END CERTIFICATE-----
Generated at Fri May 3 15:16:28 2024 by rpki-client on console-ams.rpki-client.org