Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265919.roa
File:                     AS265919.roa (raw, json)
Hash identifier:          NZ0iXRNpsNAPZeSy867vfHAyfJCr/os7PnlrqagCWpo=
Subject key identifier:   4E:6C:8E:AE:CF:2A:6B:F4:A1:F0:AF:3C:B2:D6:05:E7:5D:28:20:68
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       37B8E108E87F5BCFBA98F11BD1D1C3A29F9E145D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265919.roa
Signing time:             Sat 23 Sep 2023 02:05:46 +0000
ROA not before:           Sat 23 Sep 2023 02:00:46 +0000
ROA not after:            Sat 21 Sep 2024 02:05:46 +0000
asID:                     265919
IP address blocks:        104.234.63.0/24 maxlen: 24
                          104.234.65.0/24 maxlen: 24
                          104.234.189.0/24 maxlen: 24
                          104.234.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b8:e1:08:e8:7f:5b:cf:ba:98:f1:1b:d1:d1:c3:a2:9f:9e:14:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 23 02:00:46 2023 GMT
            Not After : Sep 21 02:05:46 2024 GMT
        Subject: CN=4E6C8EAECF2A6BF4A1F0AF3CB2D605E75D282068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:45:f7:5d:99:37:ce:fa:60:29:8c:0e:1c:
                    74:bd:4f:86:10:cc:e4:e1:05:5a:77:f0:32:65:6c:
                    64:8d:8f:d7:8a:40:36:3b:30:e8:e3:af:dd:c3:fb:
                    53:0b:24:57:8b:06:45:52:25:e5:8c:d2:ae:f5:20:
                    4f:65:c5:4f:0e:2a:e5:68:03:26:7a:ca:de:2d:6e:
                    b3:7c:2d:50:1b:f8:e0:46:28:71:2d:3e:ed:ce:23:
                    3d:c2:86:36:13:0d:19:4a:ce:8e:96:8f:2a:49:79:
                    d8:4c:12:94:dd:96:49:94:a3:09:94:d0:20:21:0d:
                    2b:f3:92:bd:ae:22:e1:48:21:3b:bd:59:c6:25:a1:
                    98:e4:c8:08:90:51:66:8e:49:7a:94:6b:0e:a9:35:
                    42:8a:99:13:a1:f1:76:15:d6:4b:1d:1b:5d:a9:46:
                    24:21:fd:df:3d:dc:0b:5f:0a:c9:b8:79:58:60:3a:
                    86:6f:b0:5c:99:73:2e:fd:9e:3e:39:25:75:e0:9e:
                    10:70:ae:67:6a:e2:05:33:3f:b4:8c:0e:86:4e:d3:
                    9b:cb:d1:62:dd:b7:f8:55:26:5e:9b:54:04:85:bf:
                    b3:00:90:99:ee:c0:6f:43:2c:92:fd:82:66:3d:c0:
                    e0:f3:d6:77:a5:50:28:19:10:32:e5:fe:49:92:5d:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:8E:AE:CF:2A:6B:F4:A1:F0:AF:3C:B2:D6:05:E7:5D:28:20:68
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.63.0/24
                  104.234.65.0/24
                  104.234.189.0/24
                  104.234.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:61:f6:fb:f8:e8:06:95:c3:1b:fa:3a:f6:62:25:e3:61:
         7e:97:66:ad:3d:18:80:94:f4:21:9a:4f:c7:d6:da:72:71:0c:
         06:e8:6f:07:82:4b:52:33:66:2e:c4:3c:07:77:4b:d3:bc:41:
         33:a4:5c:fc:1f:b7:9b:51:ce:19:77:23:98:ef:b1:b5:72:6c:
         3c:85:d8:23:af:4f:7f:c6:55:76:e9:8a:67:31:f7:12:74:23:
         50:fe:88:ff:c0:c8:30:2a:6f:b7:92:0d:fa:f2:4f:44:e9:6b:
         6a:ac:b8:c3:c2:59:0b:f0:f1:2c:a0:a9:a1:36:ac:c3:53:55:
         62:02:32:8b:7a:e8:5e:83:93:8f:6c:7d:3f:c1:05:67:2b:a9:
         eb:df:6b:ca:b0:14:d5:69:a4:7a:97:da:27:34:96:77:70:03:
         46:7e:8d:01:fa:2f:28:28:0e:b7:fd:65:c7:49:0b:ea:b3:ef:
         dd:32:94:6a:09:92:7f:db:a5:64:d7:73:2f:4f:0f:ad:1a:5f:
         95:df:9d:4c:3c:1b:9b:dc:8c:2d:e5:70:57:99:41:dc:42:06:
         14:d7:7c:9c:4a:fd:4d:6f:10:2f:0e:d3:c3:5d:bf:a3:9a:1e:
         e3:b4:f5:d5:b5:49:89:8e:10:e8:e2:25:5e:07:31:60:6f:7c:
         74:33:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org