Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS27392.roa
File:                     AS27392.roa (raw, json)
Hash identifier:          5Mx5RIAvUw/G4t+Nj7p3+V7/McTIpcrmDKSi7hPqB6U=
Subject key identifier:   CF:9C:68:28:6F:E8:00:84:7E:3E:4B:9A:4A:95:A8:5A:AE:4A:D4:58
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1292073A5B8897638AFD5994316486B75E90656D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS27392.roa
Signing time:             Mon 25 Mar 2024 23:23:49 +0000
ROA not before:           Mon 25 Mar 2024 23:18:49 +0000
ROA not after:            Mon 24 Mar 2025 23:23:49 +0000
asID:                     27392
IP address blocks:        104.234.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:92:07:3a:5b:88:97:63:8a:fd:59:94:31:64:86:b7:5e:90:65:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 25 23:18:49 2024 GMT
            Not After : Mar 24 23:23:49 2025 GMT
        Subject: CN=CF9C68286FE800847E3E4B9A4A95A85AAE4AD458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:b6:42:8a:49:f0:94:6b:61:c6:eb:f8:57:
                    7d:36:ee:4a:a2:b6:8b:32:6e:d2:aa:14:46:4c:ac:
                    95:eb:35:a0:36:cc:03:a9:e2:42:2a:74:8e:95:b9:
                    14:88:36:0f:c9:e3:c7:f0:41:53:dd:78:74:63:4a:
                    d8:6b:b8:be:08:03:2a:47:d2:6a:1a:31:b0:61:5a:
                    c9:fd:d7:68:16:e8:9c:00:d1:c6:1c:f4:07:6c:1d:
                    a5:de:98:91:05:23:be:25:36:8c:4a:5e:84:f2:35:
                    f6:2a:fc:f9:a4:0c:bb:b2:93:eb:8c:eb:da:76:6a:
                    61:07:8b:6d:0e:65:17:71:a6:20:5b:af:f3:9c:3f:
                    a1:51:62:58:14:2f:c5:de:90:98:80:9a:82:9b:9c:
                    cc:0b:c1:ec:5c:0e:2b:bb:8e:7c:b3:b4:4a:46:e6:
                    06:a2:76:cb:60:f5:2f:d0:12:85:a2:37:7d:66:bf:
                    df:79:44:a1:83:e1:65:73:72:bf:cc:e8:c8:72:9d:
                    96:8a:b4:cc:42:75:43:bf:1a:3c:8b:64:47:32:78:
                    79:a7:60:40:f5:61:ba:67:72:d0:f5:e7:bc:c5:05:
                    e7:02:bd:55:7f:96:38:24:52:22:b0:53:2b:de:ab:
                    1d:ed:f9:78:0f:2d:bd:02:d4:1b:95:ac:eb:67:37:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:68:28:6F:E8:00:84:7E:3E:4B:9A:4A:95:A8:5A:AE:4A:D4:58
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS27392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:30:84:4e:e1:0a:05:ae:4c:97:62:01:6f:87:f1:38:56:ad:
         f4:51:82:aa:42:9d:5d:31:71:d6:45:05:23:e2:5f:f2:4e:05:
         f5:42:d2:33:89:a5:9f:7e:b8:b9:c2:a2:df:91:01:e9:10:3d:
         aa:3c:8b:e7:30:5f:d3:41:9f:74:e2:2e:71:7b:0b:aa:1a:1e:
         dd:56:3c:91:07:49:2f:b4:b1:43:b8:e0:e0:95:5e:0e:07:ae:
         b0:e4:d6:de:97:31:bc:87:5e:54:ce:e1:1c:17:0f:a2:5e:ed:
         10:ed:99:60:7f:f5:1a:d5:95:8e:38:0b:69:d3:7c:01:44:64:
         9c:07:f1:f0:40:dd:ec:3e:86:ce:55:86:0f:ff:60:68:e7:02:
         dc:c2:c2:99:fd:ee:f1:1f:cc:87:a5:9d:53:40:7f:4e:36:b7:
         31:ed:9d:c5:c7:ce:55:67:ec:8e:bf:9c:f4:f6:ff:0c:58:77:
         18:08:5f:5d:ae:c8:7d:b4:f8:f6:4d:3a:58:3f:80:25:31:4c:
         4d:6e:33:75:76:2a:12:00:47:0c:92:72:fc:be:9e:c6:fc:f1:
         52:61:74:ce:bd:2b:27:b1:47:86:0d:d0:21:74:23:5a:2a:89:
         62:a7:c8:94:60:0c:b0:38:bd:55:9f:a4:38:a7:dd:00:5b:7b:
         0b:08:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:27 2024 by rpki-client on console-ams.rpki-client.org