Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26554.roa
File:                     AS26554.roa (raw, json)
Hash identifier:          GC6pOo5n99VjrqaDwUyf+Hj7QHsw//j7v2OSzcJ4tSQ=
Subject key identifier:   49:3B:3C:B6:0E:E2:00:AB:76:DD:2F:7E:23:DF:A5:46:39:15:E8:09
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       74BB036A4561705F677C0071923B08CB7CE57D46
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26554.roa
Signing time:             Wed 10 Jan 2024 03:33:59 +0000
ROA not before:           Wed 10 Jan 2024 03:28:59 +0000
ROA not after:            Wed 08 Jan 2025 03:33:59 +0000
asID:                     26554
IP address blocks:        104.234.40.0/24 maxlen: 24
                          104.234.41.0/24 maxlen: 24
                          104.234.42.0/24 maxlen: 24
                          104.234.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bb:03:6a:45:61:70:5f:67:7c:00:71:92:3b:08:cb:7c:e5:7d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 10 03:28:59 2024 GMT
            Not After : Jan  8 03:33:59 2025 GMT
        Subject: CN=493B3CB60EE200AB76DD2F7E23DFA5463915E809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:72:a3:83:56:2b:8c:08:3a:45:f4:8f:fa:
                    87:0b:f4:f6:a4:69:12:eb:4c:f1:2a:56:97:f7:dc:
                    2f:4d:4f:a6:31:77:16:5a:6c:cd:0f:0b:8b:cf:4f:
                    76:37:0e:36:0a:7b:24:83:31:71:8a:13:c3:7e:ec:
                    08:1d:ed:a5:56:cf:79:4f:55:d8:21:da:38:ef:08:
                    09:5c:c9:e7:23:38:5a:f9:2c:bf:f8:65:c9:cf:20:
                    e5:c5:5d:ee:c4:f7:05:fb:2b:5f:30:95:94:6f:e5:
                    a5:68:99:b7:a0:a8:43:6a:35:82:a1:1e:2c:c2:51:
                    38:39:79:da:b7:09:c7:93:64:c3:5b:4a:05:d1:d4:
                    cb:b2:c2:19:4e:7e:aa:f2:32:7b:c6:eb:e9:1d:53:
                    6f:bb:67:a0:6f:cf:94:55:bd:d8:88:79:47:bb:89:
                    3c:95:60:85:9a:dd:14:27:d9:0b:92:86:41:c1:d6:
                    97:df:21:04:a0:5b:b6:8b:25:79:53:af:7f:be:a0:
                    d2:0e:dd:f9:eb:bc:a5:cc:4a:bf:9d:19:37:44:1f:
                    9f:9d:e1:f3:a6:e3:7c:03:8f:43:4b:79:b2:27:09:
                    21:41:60:d8:f4:d8:66:4c:cc:ec:e4:10:9b:23:1a:
                    8c:ba:03:25:3d:8f:c4:42:be:0c:68:50:d8:9b:56:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:3C:B6:0E:E2:00:AB:76:DD:2F:7E:23:DF:A5:46:39:15:E8:09
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26554.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.40.0-104.234.42.255
                  104.234.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:e0:53:55:3c:ff:4c:74:c3:1c:22:32:dc:db:92:5f:f2:bd:
         65:65:4c:a2:81:4a:c2:84:2e:0a:54:99:f7:09:b3:e5:8d:5a:
         0e:8d:75:ca:e6:35:57:57:97:28:85:4a:7c:8f:ea:83:31:c4:
         0b:4b:c7:da:e9:fa:f1:25:8b:a5:f7:d7:e2:bc:9f:5d:a5:d9:
         a8:80:99:0a:6e:a1:c6:dd:49:e2:8b:41:4e:54:7f:22:6d:fd:
         43:5a:8b:f4:6a:62:bf:9d:c5:00:cd:bb:7b:30:6b:69:ad:af:
         8c:dc:fb:61:72:73:65:28:17:99:21:37:2a:33:7d:5f:a4:f7:
         6f:76:22:28:a5:de:e2:ac:fa:f6:c3:a6:f8:a2:29:e3:b3:44:
         b9:5b:fd:6b:75:d3:65:8f:3c:78:91:88:93:a0:91:03:58:b4:
         59:92:bb:cf:74:a4:aa:6b:fd:ff:47:88:b2:bb:68:84:4e:05:
         13:40:c3:1d:e2:5a:44:80:cf:98:66:af:83:cf:e9:e0:82:63:
         c9:94:e6:b6:c4:30:3e:35:c2:a6:f1:a5:68:2a:32:e9:ae:bf:
         01:e3:f2:56:c6:86:5b:64:46:8f:59:cd:07:72:ac:b8:c8:2b:
         ce:e2:63:79:8a:bc:e2:8d:91:56:4d:9b:15:10:42:6f:5f:33:
         be:8f:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:03:47 2024 by rpki-client on console-fra.rpki-client.org