Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa
File:                     AS31863.roa (raw, json)
Hash identifier:          5x1y9TGm1vLFdhuJfFJeZelCPHL0N3KIk08zc/F5IZs=
Subject key identifier:   24:BE:58:DA:57:56:1E:59:B6:48:62:2E:D7:55:12:CF:C4:1B:14:2F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       A8521709525DA3B62CEA09432F2789FEC29068
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa
Signing time:             Fri 22 Dec 2023 03:01:12 +0000
ROA not before:           Fri 22 Dec 2023 02:56:12 +0000
ROA not after:            Fri 20 Dec 2024 03:01:12 +0000
asID:                     31863
IP address blocks:        104.234.30.0/24 maxlen: 24
                          104.234.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:52:17:09:52:5d:a3:b6:2c:ea:09:43:2f:27:89:fe:c2:90:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 22 02:56:12 2023 GMT
            Not After : Dec 20 03:01:12 2024 GMT
        Subject: CN=24BE58DA57561E59B648622ED75512CFC41B142F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:1d:b0:2a:65:b2:05:67:66:d3:36:58:81:
                    a8:24:69:35:9d:0a:e5:f1:e3:f0:7c:45:35:6a:9e:
                    eb:9b:e0:59:6d:b5:e8:bf:6f:97:2a:bb:83:ff:3d:
                    59:d3:11:f6:06:df:43:cc:3b:fb:5a:c7:93:ae:a3:
                    72:d2:e5:2e:29:89:f8:5e:36:eb:85:0e:78:4d:ef:
                    a5:0d:50:22:a6:1d:0b:46:87:80:47:e3:58:a6:8f:
                    da:98:cc:86:31:8f:c8:7c:c7:95:34:db:86:81:b5:
                    f9:41:83:09:6f:a0:64:fa:ab:94:84:33:ad:f6:f8:
                    6b:b5:56:c0:aa:a8:8d:4d:b1:80:09:9c:90:ff:aa:
                    4f:71:4e:1f:09:7e:c2:0c:8e:ac:40:bf:23:c3:81:
                    6f:4d:04:3b:40:33:cc:55:dc:57:43:5c:7d:df:d0:
                    cf:72:a9:3b:b5:69:9b:28:88:3b:91:e6:e3:39:c7:
                    f0:c1:8b:d3:78:dd:da:b0:a1:5f:65:96:7a:49:d5:
                    86:a9:9f:f6:2a:19:a6:7d:ce:fe:7b:71:a9:3b:18:
                    ce:dd:00:da:14:0e:26:83:3f:45:a8:0d:98:c0:1e:
                    dd:a5:f8:28:9b:11:8d:b8:ca:42:f3:72:b7:aa:c5:
                    ba:8f:94:f9:70:99:2b:23:c9:31:2b:a5:d8:f4:43:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BE:58:DA:57:56:1E:59:B6:48:62:2E:D7:55:12:CF:C4:1B:14:2F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.30.0/24
                  104.234.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:8f:0b:99:31:94:ca:11:27:4f:b6:1a:e4:fa:eb:44:57:20:
         36:28:0a:c3:cc:12:b8:77:77:e0:04:af:95:f1:cb:28:dd:04:
         dd:d0:40:1e:4a:56:87:97:de:28:c8:96:61:0f:f5:2c:cc:f2:
         39:5b:a7:15:e5:77:05:4d:c4:bb:f2:a2:3d:9c:6b:73:f4:0f:
         56:6a:b9:16:50:a6:4a:d7:98:e3:51:64:87:7e:57:8e:d4:aa:
         7d:52:19:84:27:9d:1e:09:59:3a:04:4a:e5:be:9d:39:12:20:
         cf:52:ad:10:0c:c0:a6:d6:c8:45:0a:ef:06:9d:68:55:5a:c1:
         00:61:2c:6d:4d:2a:eb:1f:f0:62:29:3d:f2:e3:d6:fa:81:2d:
         05:9e:1e:74:42:83:77:2e:16:72:26:75:de:bd:b7:4f:8e:58:
         7d:f1:f5:a6:15:17:46:68:e2:11:5e:a3:b0:19:76:73:bd:f2:
         d4:ac:14:2a:56:4d:7c:79:92:1d:de:52:e7:55:8e:28:f4:d5:
         25:13:27:da:b0:cd:bb:f0:3b:4f:04:ca:08:df:3c:aa:86:16:
         92:4b:04:18:99:5b:0f:bf:89:a4:0f:ab:e6:57:db:08:bb:e8:
         fe:76:4f:c6:e2:11:5c:e3:15:bd:93:68:ec:19:64:96:03:90:
         9f:71:11:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org