Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272010.roa
File:                     AS272010.roa (raw, json)
Hash identifier:          /qzbecHXbE2m52oq61s2dGpwlbAUmmI6bWSwweu4VtQ=
Subject key identifier:   71:C4:84:45:DF:B9:2D:C8:BD:F0:96:F3:F7:EE:65:01:C7:C7:7B:C7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5273904B6B23803055C8B3740C59F46FF205CB1F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272010.roa
Signing time:             Mon 09 Oct 2023 19:21:20 +0000
ROA not before:           Mon 09 Oct 2023 19:16:20 +0000
ROA not after:            Mon 07 Oct 2024 19:21:20 +0000
asID:                     272010
IP address blocks:        104.234.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:73:90:4b:6b:23:80:30:55:c8:b3:74:0c:59:f4:6f:f2:05:cb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  9 19:16:20 2023 GMT
            Not After : Oct  7 19:21:20 2024 GMT
        Subject: CN=71C48445DFB92DC8BDF096F3F7EE6501C7C77BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:53:08:2f:0f:aa:3d:1e:7c:1f:9b:6e:53:
                    df:22:8b:05:e3:88:6e:8b:86:87:ec:ae:ff:76:d6:
                    d8:e8:32:e0:d0:3a:1f:47:82:3e:b8:f8:c3:3c:63:
                    c1:24:4d:13:a0:b6:00:07:f6:d4:28:ac:e8:92:53:
                    82:d2:47:81:79:4d:f4:a2:53:11:e5:41:36:e7:a2:
                    45:05:52:e2:6f:36:a4:91:a4:57:8d:27:e1:4a:46:
                    3e:70:3d:6b:bb:56:84:9f:c6:12:e7:88:48:1e:3e:
                    e7:35:0e:7d:bf:9d:01:16:e0:77:c9:92:bf:11:aa:
                    8c:76:8b:b3:c5:92:7c:c2:69:46:12:3a:cf:5a:2e:
                    c6:09:42:92:51:78:c8:22:4c:b2:2c:06:93:53:35:
                    3a:e4:71:66:bb:cc:f8:5f:64:14:49:38:d4:ba:05:
                    68:78:3f:4a:1e:4f:f1:06:22:7d:eb:ac:36:26:9f:
                    65:c4:25:9b:11:31:86:70:f4:8e:55:56:e8:d7:28:
                    c8:61:0f:49:b3:55:22:86:41:a4:26:7f:87:25:2b:
                    b7:fb:75:ad:ee:90:a6:e9:90:17:5d:08:b8:a7:72:
                    de:11:5f:04:91:f5:11:22:98:92:17:1d:2f:19:d2:
                    8d:76:d3:27:99:88:b5:2e:e4:d1:ef:0d:c8:89:7d:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C4:84:45:DF:B9:2D:C8:BD:F0:96:F3:F7:EE:65:01:C7:C7:7B:C7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272010.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:45:62:bc:21:6e:76:52:51:0d:10:fe:f0:ce:d6:5a:c5:97:
         05:df:c7:04:a1:ca:78:7d:00:8a:99:4f:b4:8c:d3:17:ab:dc:
         49:c5:41:88:1c:cf:64:7e:5b:00:30:fe:51:87:a4:9e:27:d7:
         c5:e1:5d:f7:31:b5:b2:6e:44:7c:1e:e8:2e:ef:a9:c6:10:0c:
         af:be:10:be:6b:53:31:d0:0d:91:94:f3:34:4f:d9:7f:53:16:
         d4:77:50:b4:e0:15:e9:9b:8f:3f:8b:a0:9f:4b:40:58:04:54:
         95:ce:7c:d3:fd:52:ce:d1:be:2c:ad:2d:d3:a9:71:d3:9f:bc:
         66:85:28:7d:51:e3:cd:e4:39:1a:24:7c:9d:70:29:4f:68:b8:
         a1:98:c5:6b:7d:ff:aa:dc:a0:54:97:60:f9:23:f9:2c:2b:04:
         91:3f:8b:70:ad:82:e9:72:e0:32:ae:ad:08:74:ff:f0:a6:04:
         dd:eb:15:a8:59:9e:ce:d9:a9:82:fb:0d:b2:14:0a:21:29:a1:
         27:44:75:87:7d:50:2f:17:34:44:7f:88:d5:f0:7b:8a:d8:f3:
         d8:0d:63:ad:ac:51:b3:08:ab:22:a1:53:9e:5c:eb:1b:c2:0f:
         05:91:fd:53:de:d2:55:e2:5e:e7:04:f5:7a:7a:21:97:35:4c:
         20:96:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org