Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272370.roa
File:                     AS272370.roa (raw, json)
Hash identifier:          inT/NP/Zd+5vg9XafQaw+SyaojnOSyz2is1leYkk0x8=
Subject key identifier:   4A:23:57:F6:C9:4B:7D:C5:DD:E7:46:2B:30:DC:43:7B:24:56:57:97
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       028A5476AA90906CF4A4849CB8BA42742053793C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272370.roa
Signing time:             Thu 09 May 2024 20:43:24 +0000
ROA not before:           Thu 09 May 2024 20:38:24 +0000
ROA not after:            Thu 08 May 2025 20:43:24 +0000
asID:                     272370
IP address blocks:        104.234.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8a:54:76:aa:90:90:6c:f4:a4:84:9c:b8:ba:42:74:20:53:79:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May  9 20:38:24 2024 GMT
            Not After : May  8 20:43:24 2025 GMT
        Subject: CN=4A2357F6C94B7DC5DDE7462B30DC437B24565797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3c:37:7a:05:f5:04:e1:12:02:5b:e4:af:af:
                    0e:7c:5f:3f:bf:1a:9e:7d:ff:dc:22:f2:29:9a:37:
                    af:e7:73:ed:cd:db:a6:0d:33:44:70:41:68:75:29:
                    81:fe:50:e1:53:b8:ac:66:cf:53:c1:58:73:3b:93:
                    50:ed:8f:65:a6:1b:17:05:79:27:03:e1:dc:d7:82:
                    7a:a9:49:a9:9a:c1:29:2a:07:15:15:6c:49:5c:fd:
                    6c:96:61:e2:44:79:41:22:6e:7d:85:49:19:f6:d5:
                    ed:a7:df:9b:f9:f8:3e:89:71:10:30:98:8a:95:01:
                    4d:dc:c3:eb:54:1d:cf:4b:49:84:21:65:bb:2f:d4:
                    84:76:7e:2e:51:8d:7a:11:63:f7:3e:7c:99:89:90:
                    bf:a5:d0:6f:29:09:e5:53:e4:1e:7d:f1:39:44:62:
                    42:e5:8b:ae:5d:f3:98:43:b5:58:a6:88:e5:d0:1b:
                    3c:fe:14:d2:2a:47:9b:90:79:5d:4e:7a:a7:4f:63:
                    d6:9e:fd:01:a4:28:ea:b5:7a:79:1d:58:25:61:30:
                    d2:62:44:eb:28:95:74:bb:c7:fd:71:ab:c9:17:da:
                    76:b7:d3:12:ab:7f:a6:2f:5d:a4:29:8f:b7:1f:02:
                    8b:fe:e8:59:2c:97:ac:14:47:ce:ab:7b:9d:11:35:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:23:57:F6:C9:4B:7D:C5:DD:E7:46:2B:30:DC:43:7B:24:56:57:97
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272370.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:16:28:bd:3a:44:9f:ca:c7:ea:15:29:e2:b7:e4:3e:41:d7:
         36:99:81:94:15:48:77:86:80:56:69:9d:fd:61:96:8b:bb:b1:
         ff:98:ee:c6:bd:43:16:73:a9:5e:cd:21:cc:68:b1:63:36:48:
         75:27:0b:3e:fc:95:7f:53:53:42:1c:c8:fe:91:04:4f:50:25:
         02:9f:bb:d7:b1:29:07:5b:16:a9:42:9b:be:b6:a4:ff:af:62:
         af:b7:ec:0d:93:50:0d:d4:82:71:32:62:41:86:d5:f3:ac:04:
         76:d2:7a:1d:53:7f:06:93:9d:2d:c4:68:f8:fe:3e:54:7b:9e:
         c8:58:31:f1:d5:4f:92:6c:93:89:00:02:67:4b:1b:cf:5e:ec:
         f5:89:d8:3e:70:96:b6:d1:cf:31:ec:0d:3c:9f:f0:db:d2:1f:
         49:78:56:89:08:67:e8:fe:25:61:69:67:7d:0f:39:16:97:ea:
         2b:b6:a9:2b:0c:b4:81:0a:d3:c4:8e:bb:c1:81:ae:00:49:43:
         8e:9e:33:bb:d6:6c:63:ca:00:38:9b:a4:e2:8b:5c:8d:b9:75:
         03:60:64:0b:55:9b:5d:ec:3e:62:6e:68:1e:00:0f:58:42:34:
         37:73:e3:cc:d2:5c:57:05:9b:84:87:3d:3f:bd:93:7f:67:cd:
         bf:56:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org