Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa
File:                     AS267121.roa (raw, json)
Hash identifier:          b6djpkuWjDihLiuMj5Y2tZR+pZ597MFQd8QEabJmXgw=
Subject key identifier:   5A:EC:6B:F7:3B:E3:B6:DA:EB:68:23:56:18:8F:F4:E4:59:D6:6E:60
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4A98B2D23DF4BD596311EB16FD69FB96A548F38A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa
Signing time:             Mon 28 Oct 2024 15:49:02 +0000
ROA not before:           Mon 28 Oct 2024 15:44:02 +0000
ROA not after:            Mon 27 Oct 2025 15:49:02 +0000
asID:                     267121
IP address blocks:        104.234.84.0/24 maxlen: 24
                          104.234.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:98:b2:d2:3d:f4:bd:59:63:11:eb:16:fd:69:fb:96:a5:48:f3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 28 15:44:02 2024 GMT
            Not After : Oct 27 15:49:02 2025 GMT
        Subject: CN=5AEC6BF73BE3B6DAEB682356188FF4E459D66E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:1d:ba:c2:48:3a:6c:f1:18:a4:5f:b2:c2:
                    87:d1:f7:25:fd:83:38:ca:a9:6d:44:56:85:3e:23:
                    90:9a:f5:b5:25:9c:48:5c:e3:f3:a2:ff:5e:75:02:
                    89:3a:df:f4:63:fb:ce:dc:0d:10:f3:39:e7:04:1b:
                    b7:4f:9a:40:4b:78:12:a9:74:cb:00:c4:5a:5b:b9:
                    a4:25:b4:7f:2f:85:03:62:06:41:6d:6e:7a:21:bc:
                    9f:77:55:e8:49:e8:94:20:cf:5f:3c:f0:af:74:37:
                    5b:11:6a:e6:15:61:cf:2a:86:2d:71:5a:71:d9:5e:
                    b7:39:98:36:fa:84:cb:13:3a:83:35:c4:69:06:89:
                    19:a8:12:8e:56:1b:89:38:10:3b:37:35:45:6d:ad:
                    ae:1b:09:f6:d4:5a:b2:3e:9a:f5:82:3c:98:29:f4:
                    2d:a4:e0:21:2d:70:eb:24:1f:3a:33:b8:c7:57:3d:
                    eb:99:88:2b:79:1b:89:86:ca:38:ab:28:e4:be:e7:
                    85:48:e4:8f:62:b6:85:2a:df:c5:a6:1d:a8:ac:e3:
                    0d:d0:4f:dc:7a:0b:0d:1a:2c:7d:72:d6:62:57:92:
                    ac:f0:c7:e8:47:b3:c9:90:25:61:32:aa:7d:3f:f5:
                    8d:de:88:25:43:e1:9e:d3:06:23:0e:ef:30:5c:ba:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:6B:F7:3B:E3:B6:DA:EB:68:23:56:18:8F:F4:E4:59:D6:6E:60
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.84.0/24
                  104.234.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:a3:38:40:b3:ff:c8:7f:23:ef:d1:7e:07:32:19:f3:ed:
         91:43:86:a4:f6:6c:88:1d:b5:e7:7c:77:e6:37:84:cb:73:c4:
         84:aa:30:21:21:d8:15:62:07:c0:1a:b3:9f:f1:64:3f:cc:d3:
         6b:ac:0c:66:14:f9:27:80:8d:0b:ad:6e:69:78:e9:db:43:ce:
         c3:70:62:40:1d:78:c5:98:6c:b4:ab:e6:6f:29:b3:20:77:01:
         81:b8:b7:67:64:97:aa:37:32:ae:1d:c8:85:c4:96:d9:6a:86:
         7c:d2:98:d5:b5:b9:f8:ea:69:fa:39:11:7a:d2:49:42:43:69:
         a8:fe:17:28:cc:39:91:45:79:21:70:86:52:91:2b:15:31:45:
         be:8d:5c:51:b5:a3:7b:3c:84:dd:4e:46:83:12:c0:9e:59:89:
         16:4a:a0:48:f4:8e:bb:45:d3:4a:b0:5f:6b:fd:48:d5:d8:ef:
         30:de:81:60:07:30:f0:ce:ab:dc:1d:36:6e:af:5f:b9:01:0f:
         db:f0:c1:42:56:6b:cf:7c:8e:a7:e0:3b:a2:6c:28:c3:d0:d0:
         d3:7f:c3:c3:3f:b3:d0:98:87:bf:e4:40:a6:89:26:e8:73:31:
         e9:78:31:22:89:25:c7:60:c4:21:7b:19:f3:a4:92:f3:c8:33:
         d6:56:c1:53
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUSpiy0j30vVljEesW/Wn7lqVI84owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDI4MTU0NDAyWhcNMjUxMDI3MTU0OTAy
WjAzMTEwLwYDVQQDEyg1QUVDNkJGNzNCRTNCNkRBRUI2ODIzNTYxODhGRjRFNDU5
RDY2RTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LAdusJIOmzx
GKRfssKH0fcl/YM4yqltRFaFPiOQmvW1JZxIXOPzov9edQKJOt/0Y/vO3A0Q8znn
BBu3T5pAS3gSqXTLAMRaW7mkJbR/L4UDYgZBbW56Ibyfd1XoSeiUIM9fPPCvdDdb
EWrmFWHPKoYtcVpx2V63OZg2+oTLEzqDNcRpBokZqBKOVhuJOBA7NzVFba2uGwn2
1FqyPpr1gjyYKfQtpOAhLXDrJB86M7jHVz3rmYgreRuJhso4qyjkvueFSOSPYraF
Kt/Fph2orOMN0E/cegsNGix9ctZiV5Ks8MfoR7PJkCVhMqp9P/WN3oglQ+Ge0wYj
Du8wXLoqZwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFFrsa/c747ba62gjVhiP9ORZ
1m5gMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI2NzEyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqVAMEAGjqWjANBgkqhkiG9w0B
AQsFAAOCAQEAD6CjOECz/8h/I+/RfgcyGfPtkUOGpPZsiB2153x35jeEy3PEhKow
ISHYFWIHwBqzn/FkP8zTa6wMZhT5J4CNC61uaXjp20POw3BiQB14xZhstKvmbymz
IHcBgbi3Z2SXqjcyrh3IhcSW2WqGfNKY1bW5+Opp+jkRetJJQkNpqP4XKMw5kUV5
IXCGUpErFTFFvo1cUbWjezyE3U5GgxLAnlmJFkqgSPSOu0XTSrBfa/1I1djvMN6B
YAcw8M6r3B02bq9fuQEP2/DBQlZrz3yOp+A7omwow9DQ03/Dwz+z0JiHv+RApokm
6HMx6XgxIoklx2DEIXsZ86SS88gz1lbBUw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org