Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa
File:                     AS268707.roa (raw, json)
Hash identifier:          hWfGV6+yg4tuzFVQ5A9xOBncSvgc3b6e/cdInuq7gcA=
Subject key identifier:   C4:A5:C7:FC:6C:36:43:D3:8A:1A:61:74:10:FA:1A:65:7E:6D:A0:0F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7F55CB43F1DD649EDF02FF132A8F8DA65A52C3CB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa
Signing time:             Sun 11 Feb 2024 02:01:14 +0000
ROA not before:           Sun 11 Feb 2024 01:56:14 +0000
ROA not after:            Sun 09 Feb 2025 02:01:14 +0000
asID:                     268707
IP address blocks:        104.234.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:55:cb:43:f1:dd:64:9e:df:02:ff:13:2a:8f:8d:a6:5a:52:c3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 11 01:56:14 2024 GMT
            Not After : Feb  9 02:01:14 2025 GMT
        Subject: CN=C4A5C7FC6C3643D38A1A617410FA1A657E6DA00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:f9:f9:ce:e7:8a:01:d7:67:a4:7b:ff:51:
                    8d:38:fe:ae:5e:e4:52:1b:40:04:f7:62:b7:0a:53:
                    c8:ef:7f:82:dd:93:e2:04:f4:3a:69:42:7c:d1:6b:
                    a3:a8:23:38:94:80:4b:18:ed:25:af:5b:fc:d3:c5:
                    8a:0a:6d:6b:92:b6:ef:06:bc:12:9a:3f:4a:8e:41:
                    4a:4e:d5:b8:be:6b:44:64:4d:62:28:7a:f5:d7:ef:
                    56:18:b3:7c:68:59:20:8d:56:41:f9:79:64:3b:73:
                    36:47:d8:9e:ee:7f:34:3b:11:fd:c5:93:0b:91:57:
                    89:64:6a:79:64:19:51:bb:3b:08:c7:b9:25:f9:16:
                    e2:50:a6:96:0c:0c:c6:a4:21:65:63:04:99:bd:e5:
                    bd:15:52:a3:05:c0:c0:4b:e1:d8:5c:89:b1:89:f2:
                    3c:60:ba:47:75:ff:7b:73:a0:5c:a4:40:4c:ba:ba:
                    1d:33:c8:a2:89:df:67:b1:5a:89:89:48:18:b3:b8:
                    ff:57:3b:33:89:1e:6a:23:7e:e4:cf:d7:cd:4c:6d:
                    4b:74:bc:c9:1d:0f:cb:82:be:8b:45:d6:48:c1:c1:
                    cf:8c:0f:2f:ea:91:01:52:da:78:ce:4e:b9:96:f8:
                    8c:93:30:4b:e8:35:e4:0d:0b:ce:a8:05:b0:aa:d5:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A5:C7:FC:6C:36:43:D3:8A:1A:61:74:10:FA:1A:65:7E:6D:A0:0F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:b2:1e:4d:e5:2c:c0:81:25:0f:46:a8:73:dc:98:5f:83:
         17:1a:41:7f:b3:64:ec:01:dc:bb:e3:ec:52:9d:bf:3e:f0:2d:
         54:3a:77:47:c6:55:f9:f8:74:c2:fc:6f:a8:fc:43:e2:a3:94:
         29:4d:42:30:01:a2:61:5c:e5:01:05:91:d0:dd:dd:2c:96:1c:
         09:4c:80:b6:f1:39:06:ec:9d:d8:75:17:40:8d:77:0c:61:d2:
         be:fe:f6:7b:e0:42:2e:ad:fd:e4:24:71:13:34:cd:28:6d:df:
         e5:69:35:d7:86:70:e5:80:46:51:8e:31:1a:26:96:d0:38:d2:
         56:b0:6e:cc:8b:c7:2c:8f:73:6d:fe:d1:91:7d:f1:dc:77:fc:
         b1:eb:9f:84:50:14:f4:81:07:a2:da:f1:f7:ca:4e:0a:ca:14:
         9d:1c:43:73:13:bd:b3:31:74:2e:21:58:50:f1:c8:6c:4b:21:
         13:2b:d5:f6:e6:fb:6c:b8:71:ee:e2:96:ff:48:45:dd:0b:84:
         05:37:f3:7d:d9:84:0a:63:1f:3a:7b:9b:71:08:4b:8e:a6:de:
         f3:90:8b:a3:f6:06:75:e7:f9:24:d6:17:54:17:84:37:bf:a5:
         90:8c:b7:ca:dd:84:98:0a:e7:91:b6:39:3d:b7:91:9f:50:4b:
         1f:fd:65:ad
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUf1XLQ/HdZJ7fAv8TKo+NplpSw8swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMjExMDE1NjE0WhcNMjUwMjA5MDIwMTE0
WjAzMTEwLwYDVQQDEyhDNEE1QzdGQzZDMzY0M0QzOEExQTYxNzQxMEZBMUE2NTdF
NkRBMDBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaf5+c7nigHX
Z6R7/1GNOP6uXuRSG0AE92K3ClPI73+C3ZPiBPQ6aUJ80WujqCM4lIBLGO0lr1v8
08WKCm1rkrbvBrwSmj9KjkFKTtW4vmtEZE1iKHr11+9WGLN8aFkgjVZB+XlkO3M2
R9ie7n80OxH9xZMLkVeJZGp5ZBlRuzsIx7kl+RbiUKaWDAzGpCFlYwSZveW9FVKj
BcDAS+HYXImxifI8YLpHdf97c6BcpEBMurodM8iiid9nsVqJiUgYs7j/VzsziR5q
I37kz9fNTG1LdLzJHQ/Lgr6LRdZIwcHPjA8v6pEBUtp4zk65lviMkzBL6DXkDQvO
qAWwqtWNmwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMSlx/xsNkPTihphdBD6GmV+
baAPMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI2ODcwNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq9DANBgkqhkiG9w0BAQsFAAOC
AQEAfBKyHk3lLMCBJQ9GqHPcmF+DFxpBf7Nk7AHcu+PsUp2/PvAtVDp3R8ZV+fh0
wvxvqPxD4qOUKU1CMAGiYVzlAQWR0N3dLJYcCUyAtvE5Buyd2HUXQI13DGHSvv72
e+BCLq395CRxEzTNKG3f5Wk114Zw5YBGUY4xGiaW0DjSVrBuzIvHLI9zbf7RkX3x
3Hf8seufhFAU9IEHotrx98pOCsoUnRxDcxO9szF0LiFYUPHIbEshEyvV9ub7bLhx
7uKW/0hF3QuEBTfzfdmECmMfOnubcQhLjqbe85CLo/YGdef5JNYXVBeEN7+lkIy3
yt2EmArnkbY5PbeRn1BLH/1lrQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:16:14 2024 by rpki-client on console-ams.rpki-client.org