Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25846.roa
File:                     AS25846.roa (raw, json)
Hash identifier:          yM0vgRkyULpvDgQ6dIGdpx+vNRP9ICg8I2VVfHdUeVk=
Subject key identifier:   06:19:B3:1A:AA:01:BB:B7:74:E4:3D:7C:BD:C9:05:45:C3:6E:42:A6
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       09E879606F75A0CE0D2FA295625660AE0079FB62
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25846.roa
Signing time:             Tue 12 Nov 2024 12:49:21 +0000
ROA not before:           Tue 12 Nov 2024 12:44:21 +0000
ROA not after:            Tue 11 Nov 2025 12:49:21 +0000
asID:                     25846
IP address blocks:        104.234.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e8:79:60:6f:75:a0:ce:0d:2f:a2:95:62:56:60:ae:00:79:fb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 12 12:44:21 2024 GMT
            Not After : Nov 11 12:49:21 2025 GMT
        Subject: CN=0619B31AAA01BBB774E43D7CBDC90545C36E42A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:09:51:14:5a:0d:d9:39:94:34:61:31:f5:
                    b2:be:20:fc:ac:e6:34:ba:fa:43:7e:77:9b:eb:fb:
                    0d:a9:42:c6:65:71:b9:25:e9:d1:60:25:ba:6d:5d:
                    6e:86:90:ea:1a:af:7d:a2:3f:52:b9:30:4d:66:88:
                    7d:d5:4d:2e:8d:48:69:58:4a:83:4b:61:83:b3:9a:
                    cd:dd:e0:9a:07:f7:c8:fe:ef:b3:11:fb:39:7d:28:
                    1b:dd:32:9f:58:36:be:4f:40:cd:dd:56:fe:55:fc:
                    8c:1b:85:4b:69:53:47:a5:d9:51:ef:26:08:cd:e5:
                    4d:40:91:5a:69:0b:9c:3a:c3:f5:b2:a9:d1:44:fd:
                    12:7a:24:1d:5a:1c:89:2c:c1:72:98:9f:7e:dc:72:
                    b0:3c:df:c7:c9:dd:21:1c:57:b7:86:b9:cf:57:aa:
                    09:fc:4d:53:c1:2f:e1:6d:a7:a8:aa:1c:9e:21:0e:
                    09:30:63:6f:ec:71:17:31:8f:11:50:02:49:e0:4a:
                    ca:7b:85:60:66:84:04:20:73:2a:cb:d9:c9:dc:6f:
                    29:c1:c8:c7:34:3d:ca:29:d3:88:85:44:58:7d:d3:
                    89:3b:c5:bc:10:9d:aa:4f:e1:38:21:d3:67:e6:11:
                    b6:fa:21:14:52:c6:44:f1:9f:ad:ea:81:56:00:9b:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:19:B3:1A:AA:01:BB:B7:74:E4:3D:7C:BD:C9:05:45:C3:6E:42:A6
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d0:55:5e:77:cb:a2:03:28:2a:ba:73:d7:84:d7:42:0d:a5:
         d3:58:87:a4:6f:6b:95:1f:b0:b4:0b:fd:c0:a1:ca:6b:21:d3:
         d6:40:58:e8:09:4c:f0:cd:65:dc:42:64:b3:3a:43:84:18:87:
         2d:07:9c:e0:75:43:61:5f:72:1a:47:55:17:67:c4:3e:00:cb:
         b4:f2:8d:29:1b:56:42:f6:14:8d:ac:6e:26:11:b7:3d:c1:ea:
         72:f4:da:26:5c:2b:ec:0e:9b:de:3b:bf:02:5d:11:b8:d9:67:
         68:10:ef:6f:6f:e0:9e:0b:41:07:b2:a6:2a:f8:1b:57:33:f2:
         31:58:73:a1:0b:27:c6:aa:55:10:91:26:0d:79:93:af:b4:1e:
         12:92:dd:fb:2e:43:c1:cc:6a:cb:68:b2:16:08:23:53:ee:70:
         a6:63:e9:2f:d8:38:0e:43:51:7b:20:76:9a:a6:6c:e8:07:a3:
         dd:60:15:97:9b:3e:31:15:67:2d:b3:d3:3d:9b:de:29:16:dd:
         36:8a:f7:4b:d7:e5:3e:02:8d:5c:0c:b7:ba:31:a0:99:09:93:
         8c:5e:9d:25:a5:a1:a6:38:b1:91:98:4e:22:43:7a:53:df:c9:
         8d:82:2f:cd:f3:11:83:fe:90:79:4c:f6:4c:93:4c:5d:68:44:
         f5:f1:3f:77
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUCeh5YG91oM4NL6KVYlZgrgB5+2IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTEyMTI0NDIxWhcNMjUxMTExMTI0OTIx
WjAzMTEwLwYDVQQDEygwNjE5QjMxQUFBMDFCQkI3NzRFNDNEN0NCREM5MDU0NUMz
NkU0MkE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XAJURRaDdk5
lDRhMfWyviD8rOY0uvpDfneb6/sNqULGZXG5JenRYCW6bV1uhpDqGq99oj9SuTBN
Zoh91U0ujUhpWEqDS2GDs5rN3eCaB/fI/u+zEfs5fSgb3TKfWDa+T0DN3Vb+VfyM
G4VLaVNHpdlR7yYIzeVNQJFaaQucOsP1sqnRRP0SeiQdWhyJLMFymJ9+3HKwPN/H
yd0hHFe3hrnPV6oJ/E1TwS/hbaeoqhyeIQ4JMGNv7HEXMY8RUAJJ4ErKe4VgZoQE
IHMqy9nJ3G8pwcjHND3KKdOIhURYfdOJO8W8EJ2qT+E4IdNn5hG2+iEUUsZE8Z+t
6oFWAJsI8QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAYZsxqqAbu3dOQ9fL3JBUXD
bkKmMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI1ODQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOr+MA0GCSqGSIb3DQEBCwUAA4IB
AQBI0FVed8uiAygqunPXhNdCDaXTWIekb2uVH7C0C/3AocprIdPWQFjoCUzwzWXc
QmSzOkOEGIctB5zgdUNhX3IaR1UXZ8Q+AMu08o0pG1ZC9hSNrG4mEbc9wepy9Nom
XCvsDpveO78CXRG42WdoEO9vb+CeC0EHsqYq+BtXM/IxWHOhCyfGqlUQkSYNeZOv
tB4Skt37LkPBzGrLaLIWCCNT7nCmY+kv2DgOQ1F7IHaapmzoB6PdYBWXmz4xFWct
s9M9m94pFt02ivdL1+U+Ao1cDLe6MaCZCZOMXp0lpaGmOLGRmE4iQ3pT38mNgi/N
8xGD/pB5TPZMk0xdaET18T93
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:40 2025 by rpki-client