Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa
File:                     AS32780.roa (raw, json)
Hash identifier:          cwpkFrgnVIoUqbUW8owqLhqrn/soOVnH+F+UGGQM9Hk=
Subject key identifier:   76:D8:94:28:E8:45:7E:CC:1D:98:19:C6:65:56:4B:5A:A9:86:A5:79
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       634AAF9768CF49E6468C21D8B7FF2ADC5576F136
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa
Signing time:             Fri 05 Apr 2024 20:07:55 +0000
ROA not before:           Fri 05 Apr 2024 20:02:55 +0000
ROA not after:            Fri 04 Apr 2025 20:07:55 +0000
asID:                     32780
IP address blocks:        104.234.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 21:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:af:97:68:cf:49:e6:46:8c:21:d8:b7:ff:2a:dc:55:76:f1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  5 20:02:55 2024 GMT
            Not After : Apr  4 20:07:55 2025 GMT
        Subject: CN=76D89428E8457ECC1D9819C665564B5AA986A579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:d9:e5:02:2a:94:58:d6:bd:ee:6d:b2:01:
                    56:ca:ed:c7:62:24:d5:2e:e9:58:50:fd:45:fb:6c:
                    a9:d3:69:df:57:5a:e7:2b:d8:aa:f5:57:0b:e8:ca:
                    0c:8b:2b:b2:22:b4:62:7b:8d:4c:14:40:d5:13:3d:
                    21:e4:6a:01:57:21:65:e7:4a:40:8f:64:a0:ab:22:
                    5b:45:a1:43:53:0d:dd:d7:f8:69:b4:e8:1b:62:a6:
                    1a:24:f9:8f:61:1d:fa:a7:c6:81:07:ee:c1:f6:90:
                    9d:81:68:e3:4d:72:43:3f:9c:64:7d:12:ca:27:f8:
                    e3:a7:b2:e8:86:65:54:cc:bb:e8:2c:eb:5a:3f:e2:
                    27:6d:37:cf:f6:ae:d6:4e:f4:80:7e:34:12:b3:6e:
                    0b:3f:d3:1c:fa:68:49:63:0f:9c:65:9e:f2:67:5c:
                    1c:2a:cf:82:24:19:7f:4e:50:53:08:a6:59:ac:6f:
                    d3:e2:9b:8b:54:08:a1:37:0b:17:52:6d:2a:c9:79:
                    60:ed:6c:12:01:3e:67:12:dd:c4:18:dd:f0:ba:f7:
                    35:02:35:b4:92:4d:05:6b:c6:79:99:7a:35:e1:04:
                    19:c0:d2:57:34:33:fd:af:49:dc:b3:e9:91:a4:07:
                    4f:01:39:2b:13:15:83:f6:53:90:de:51:c9:95:67:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D8:94:28:E8:45:7E:CC:1D:98:19:C6:65:56:4B:5A:A9:86:A5:79
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:79:ff:8e:a6:59:9e:6d:ac:92:a2:b0:7c:a5:2f:1f:a4:2b:
         96:91:4a:7d:7d:f3:63:78:9a:5e:f4:5a:71:4c:8f:44:80:5d:
         ea:4d:28:ce:73:10:1d:d9:25:f0:17:7a:33:f1:36:e0:57:22:
         fc:ba:2a:1d:c6:92:5f:e9:ef:32:22:bd:e0:fc:aa:cf:f2:c7:
         a9:f9:ea:0c:5a:ec:9d:ad:51:bf:c7:1d:97:bd:cf:82:07:39:
         c5:ad:a7:08:3c:9d:4d:3b:a5:a3:0c:6b:75:49:dc:a8:ee:fa:
         92:b8:3c:ff:5b:80:db:92:bc:4a:c5:fc:22:06:a2:8c:9c:c4:
         27:ae:b9:a2:76:01:80:70:6d:c5:4f:24:0e:e6:19:ae:c3:5c:
         bd:88:a1:ef:ba:0b:25:38:e3:44:42:8a:5f:a4:d0:65:e6:66:
         6e:a2:06:cf:1a:46:45:d2:0c:30:2b:3d:2d:d8:35:9f:a5:4f:
         dd:49:de:94:66:f3:93:75:0e:0b:9c:35:aa:1b:b7:84:8d:c1:
         45:da:ed:da:5f:5b:f6:92:bd:04:18:22:93:1f:75:8e:b5:6a:
         ca:14:cb:15:a8:f3:15:a4:06:86:be:c1:1c:48:46:cc:43:4c:
         92:b9:ec:f3:2a:4c:1b:4d:82:4f:7e:97:9c:38:76:63:52:b2:
         2c:8b:ea:de
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUY0qvl2jPSeZGjCHYt/8q3FV28TYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNDA1MjAwMjU1WhcNMjUwNDA0MjAwNzU1
WjAzMTEwLwYDVQQDEyg3NkQ4OTQyOEU4NDU3RUNDMUQ5ODE5QzY2NTU2NEI1QUE5
ODZBNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy/Z5QIqlFjW
ve5tsgFWyu3HYiTVLulYUP1F+2yp02nfV1rnK9iq9VcL6MoMiyuyIrRie41MFEDV
Ez0h5GoBVyFl50pAj2SgqyJbRaFDUw3d1/hptOgbYqYaJPmPYR36p8aBB+7B9pCd
gWjjTXJDP5xkfRLKJ/jjp7LohmVUzLvoLOtaP+InbTfP9q7WTvSAfjQSs24LP9Mc
+mhJYw+cZZ7yZ1wcKs+CJBl/TlBTCKZZrG/T4puLVAihNwsXUm0qyXlg7WwSAT5n
Et3EGN3wuvc1AjW0kk0Fa8Z5mXo14QQZwNJXNDP9r0ncs+mRpAdPATkrExWD9lOQ
3lHJlWcsbwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHbYlCjoRX7MHZgZxmVWS1qp
hqV5MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzMyNzgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOp4MA0GCSqGSIb3DQEBCwUAA4IB
AQA8ef+OplmebaySorB8pS8fpCuWkUp9ffNjeJpe9FpxTI9EgF3qTSjOcxAd2SXw
F3oz8TbgVyL8uiodxpJf6e8yIr3g/KrP8sep+eoMWuydrVG/xx2Xvc+CBznFracI
PJ1NO6WjDGt1Sdyo7vqSuDz/W4DbkrxKxfwiBqKMnMQnrrmidgGAcG3FTyQO5hmu
w1y9iKHvugslOONEQopfpNBl5mZuogbPGkZF0gwwKz0t2DWfpU/dSd6UZvOTdQ4L
nDWqG7eEjcFF2u3aX1v2kr0EGCKTH3WOtWrKFMsVqPMVpAaGvsEcSEbMQ0ySuezz
KkwbTYJPfpecOHZjUrIsi+re
-----END CERTIFICATE-----
Generated at Thu May 2 22:27:54 2024 by rpki-client on console-ams.rpki-client.org