Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa
File:                     AS32181.roa (raw, json)
Hash identifier:          6b2zLK85ERDqXebCtp+z9E0r/UDPFlx7PQdJohgm8/E=
Subject key identifier:   65:13:10:EE:84:60:1B:0C:FF:0E:71:78:62:0A:51:0B:E1:04:71:B4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       54E774649FFBCE2504F6F9FFDCA96B2FE770916C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa
Signing time:             Thu 08 Feb 2024 03:01:13 +0000
ROA not before:           Thu 08 Feb 2024 02:56:13 +0000
ROA not after:            Thu 06 Feb 2025 03:01:13 +0000
asID:                     32181
IP address blocks:        104.234.23.0/24 maxlen: 24
                          104.234.146.0/24 maxlen: 24
                          104.234.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e7:74:64:9f:fb:ce:25:04:f6:f9:ff:dc:a9:6b:2f:e7:70:91:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb  8 02:56:13 2024 GMT
            Not After : Feb  6 03:01:13 2025 GMT
        Subject: CN=651310EE84601B0CFF0E7178620A510BE10471B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:ef:46:f3:43:43:d6:9c:e0:01:f0:1c:49:
                    16:1b:a6:d2:69:0f:21:8e:ad:ab:f0:c0:65:8c:b8:
                    a5:c5:21:fa:82:f1:93:30:48:1e:e7:cc:9f:0f:d0:
                    c2:07:bb:be:a0:76:9a:4e:de:cc:a3:c9:69:b2:79:
                    ff:1a:5f:72:b9:26:22:9c:48:b1:e3:0f:b2:06:c8:
                    61:ed:6f:36:8b:f9:60:6d:23:fc:b6:a4:85:07:44:
                    79:d9:fc:48:12:b6:19:54:eb:06:a9:7f:23:1f:66:
                    7b:89:cd:da:86:87:60:a0:4f:08:a2:4a:b2:cf:ba:
                    ed:d4:30:8c:b5:42:c6:ac:24:5f:f6:13:49:2b:e7:
                    69:73:22:fd:72:99:7c:b4:37:2f:10:29:5a:26:23:
                    f7:05:09:52:75:d1:65:36:a3:98:15:d8:3e:a1:c2:
                    3c:80:c4:9f:d6:b4:e3:12:d9:5d:12:21:a2:06:e9:
                    99:6c:ee:ef:4b:63:b0:32:c5:0e:dc:c7:5b:2b:68:
                    a1:d5:20:0f:63:db:43:87:c2:f2:6f:3b:d5:61:0f:
                    69:c5:87:32:59:6f:1d:00:3a:a5:28:9b:ac:06:af:
                    dc:c8:24:02:53:b4:09:c8:49:6f:74:40:30:ee:8e:
                    7c:bb:ae:cb:16:d9:59:c7:11:f4:a2:fc:65:49:63:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:13:10:EE:84:60:1B:0C:FF:0E:71:78:62:0A:51:0B:E1:04:71:B4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.23.0/24
                  104.234.146.0/24
                  104.234.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:c3:a2:72:57:7e:7b:6d:17:10:6a:54:65:34:dd:6b:2e:
         42:99:f0:fc:f5:a1:d0:84:30:a1:84:e2:db:fd:b5:6c:9c:72:
         e5:57:6b:91:c0:4f:03:fe:1a:38:b1:5e:51:d3:56:3a:27:31:
         96:20:7d:5c:6f:72:df:c6:8a:13:aa:b7:de:a0:bf:e8:7c:17:
         c8:e3:3f:6b:66:a4:e4:07:3b:45:a3:a1:23:2c:0d:ac:32:4b:
         c0:64:bf:6b:0e:b1:dd:6b:03:23:cb:4f:f3:c0:3b:cd:d1:71:
         97:f1:ff:9c:ac:09:06:06:72:f6:61:f2:a3:a3:1e:81:48:86:
         56:a3:86:e8:c1:0e:b3:fd:df:92:e2:d1:71:28:09:44:94:e8:
         69:40:8b:58:70:33:9d:b3:ca:82:cd:d5:1d:8b:89:71:8f:18:
         ab:b6:99:ff:64:ed:31:e8:2f:ce:b5:a6:7f:18:85:15:ba:4e:
         c0:ab:96:1d:36:a7:bb:0c:1a:9f:e3:78:ec:3b:4a:b3:64:08:
         69:1b:f9:ee:40:fe:f8:d1:e1:88:ac:c7:8b:44:4e:be:29:43:
         b3:a7:ab:05:ac:61:06:ee:1d:93:32:e8:ac:52:6c:15:4b:2e:
         85:b5:6b:55:21:2f:31:41:a2:5f:6c:e4:9f:11:51:c1:3c:4d:
         af:dd:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:15 2024 by rpki-client on console-ams.rpki-client.org