Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270172.roa
File:                     AS270172.roa (raw, json)
Hash identifier:          qQemNbijFmXxpQWYeY61AevYVH0O9Er6L04TcAszZNI=
Subject key identifier:   D4:C6:9D:57:9F:94:3A:0D:51:A2:B4:9E:CC:DE:5A:22:6C:6C:6D:F7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6A1AAC05CFEBB99CE1A8910719DA49FD7C35EDD4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270172.roa
Signing time:             Tue 03 Sep 2024 15:21:34 +0000
ROA not before:           Tue 03 Sep 2024 15:16:34 +0000
ROA not after:            Tue 02 Sep 2025 15:21:34 +0000
asID:                     270172
IP address blocks:        104.234.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1a:ac:05:cf:eb:b9:9c:e1:a8:91:07:19:da:49:fd:7c:35:ed:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  3 15:16:34 2024 GMT
            Not After : Sep  2 15:21:34 2025 GMT
        Subject: CN=D4C69D579F943A0D51A2B49ECCDE5A226C6C6DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:84:d4:49:c5:c9:3a:27:ee:f8:cd:9d:d9:
                    62:1b:ed:f5:9f:35:32:cf:63:23:91:cb:b5:33:94:
                    d7:4b:34:41:94:9f:8d:8f:ca:6a:8b:e9:b1:01:b2:
                    42:46:ee:f2:d9:90:c3:0b:87:78:1c:91:dc:56:0e:
                    7f:28:a9:29:c0:f1:d5:7e:0d:8e:20:39:b8:40:c7:
                    81:85:2d:54:41:2d:c8:c4:58:a6:e3:a5:97:11:2d:
                    62:15:54:84:97:5b:0c:3d:22:11:d8:c8:34:22:1e:
                    44:2b:1b:3a:9a:5d:f4:20:26:c0:dd:e4:33:3f:d0:
                    b0:15:80:1b:f0:c7:b3:99:ca:60:53:b2:4c:80:ac:
                    fc:3c:cf:07:eb:e3:12:5b:10:70:33:75:af:f1:08:
                    18:bc:0e:d5:72:dd:bc:fa:1f:a9:48:b0:3d:c6:39:
                    c1:0e:67:e7:94:05:6d:cb:0f:7c:27:17:30:3c:23:
                    00:9f:f0:40:45:e3:22:ba:0b:fe:82:c1:86:99:9a:
                    64:73:c3:37:5b:73:cc:88:02:5d:76:b1:13:0e:67:
                    f9:03:3e:95:f9:b2:d8:72:b6:d8:59:02:a8:3d:f2:
                    bd:72:23:57:1a:29:4f:94:aa:68:b7:57:8b:59:07:
                    79:b4:ce:9e:f5:8b:34:c3:3a:c9:f7:81:dc:1c:21:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:9D:57:9F:94:3A:0D:51:A2:B4:9E:CC:DE:5A:22:6C:6C:6D:F7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270172.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:51:e0:ec:0d:c3:87:c4:8d:7f:a2:9f:96:25:0b:c6:c8:6f:
         6f:26:bb:3b:58:f3:cb:e9:85:ae:1a:dd:4c:e7:94:5a:47:a3:
         f3:6f:d6:fd:88:7b:fc:1e:8a:4d:c8:dd:83:21:98:2b:5e:3d:
         c8:ce:42:8f:d4:4e:d7:b9:fc:25:af:f4:88:60:6d:ee:af:33:
         1b:b3:0d:07:1b:87:85:42:01:90:1d:6b:02:3f:53:93:80:9a:
         9c:0b:b8:cf:b8:73:97:d6:3b:f8:0c:10:24:32:ee:c7:90:64:
         fd:93:28:76:0f:b2:91:83:c6:dd:7f:5d:1e:7e:06:b4:17:fa:
         9e:c5:a1:1c:3d:99:4d:bd:21:4a:cd:52:f0:5b:b8:27:00:f0:
         08:6a:f9:16:68:15:3c:b9:95:9a:e6:22:1f:b8:30:d1:2f:50:
         b6:57:b9:25:16:89:a8:b7:ad:ee:09:26:d0:85:3e:a1:ae:82:
         73:dd:f0:b2:d9:9d:e1:53:af:c1:e5:7a:32:94:c9:fd:f8:bb:
         4c:03:5a:c4:5b:c2:32:f5:6e:0c:82:14:fd:46:36:b0:2e:3d:
         bb:0c:1f:eb:af:39:95:40:f7:31:5f:c7:16:7a:d5:96:a9:ac:
         60:29:24:bb:ee:77:cb:c5:d3:71:23:10:a1:70:9f:49:75:54:
         46:c9:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org