Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32931.roa
File:                     AS32931.roa (raw, json)
Hash identifier:          YEJES9MMSk5O9xx+fEG0jUaGoh4j4+HdQ/B7wmBYD4k=
Subject key identifier:   4D:B5:C9:E7:0C:FB:CE:1A:71:D7:76:22:BC:52:83:2F:8C:3E:32:53
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3AE1D985D8D8F6233034F2BA48D0000CE0258DC4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32931.roa
Signing time:             Wed 20 Dec 2023 18:01:12 +0000
ROA not before:           Wed 20 Dec 2023 17:56:12 +0000
ROA not after:            Wed 18 Dec 2024 18:01:12 +0000
asID:                     32931
IP address blocks:        104.234.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:d9:85:d8:d8:f6:23:30:34:f2:ba:48:d0:00:0c:e0:25:8d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:12 2023 GMT
            Not After : Dec 18 18:01:12 2024 GMT
        Subject: CN=4DB5C9E70CFBCE1A71D77622BC52832F8C3E3253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:8e:4f:77:c4:dd:95:98:3b:18:a2:7a:07:
                    1d:65:3d:e1:e2:8d:95:f7:5e:4f:60:2a:66:8d:f7:
                    f3:1e:96:c1:ee:75:99:b5:74:ff:d7:be:ab:7c:b4:
                    15:28:9d:a7:e9:4b:00:2e:5b:fd:75:3a:a0:d8:43:
                    f2:19:85:60:c7:aa:6a:c2:91:1f:3f:0a:23:64:4c:
                    ef:fd:fc:6e:18:c6:b7:13:5c:25:92:7b:d7:67:87:
                    90:a6:65:ee:1b:1b:d2:ca:6b:bf:d5:56:13:b3:9a:
                    cd:a8:88:4d:18:e2:b0:fd:df:5a:d3:de:bc:1e:0a:
                    b9:fc:7e:5e:9f:80:24:b5:e7:ce:23:0d:db:fe:78:
                    4c:40:59:ec:9f:a6:99:5f:2d:26:c8:d5:2b:a1:72:
                    ed:93:fd:e9:a0:32:4f:6d:78:92:5d:3c:b5:97:ae:
                    f2:e2:f1:28:05:d2:19:c8:79:29:ca:b4:4e:09:09:
                    0f:49:72:53:22:49:6c:4e:ad:ed:99:d1:31:dd:a1:
                    60:f2:40:58:41:94:12:fb:e5:9a:cf:1a:bd:8b:5d:
                    36:b0:41:28:4f:3c:26:6a:cc:c6:0c:83:59:30:09:
                    64:d4:2a:7d:04:6e:33:21:5d:3a:6e:20:e0:06:51:
                    f5:17:40:b2:d6:da:b1:a6:14:d5:72:64:b0:83:c5:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:C9:E7:0C:FB:CE:1A:71:D7:76:22:BC:52:83:2F:8C:3E:32:53
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:d6:c7:56:59:6e:38:87:ad:b1:c9:60:44:d4:99:62:35:
         b9:d5:3a:10:e5:0c:76:82:63:db:16:df:ad:fc:55:d1:e9:3d:
         1c:c4:a8:d2:60:2d:82:dd:b8:0d:16:c2:6a:81:37:9a:b9:fb:
         9c:bb:f8:8c:d0:c1:07:47:be:21:77:3b:94:57:86:d6:0c:55:
         c0:d3:45:03:8b:f2:38:53:e8:0e:21:24:5e:c0:14:6a:50:99:
         f6:91:9e:8a:aa:52:51:5d:24:ce:46:66:d3:30:28:a4:a7:fd:
         c9:25:ec:6e:cc:40:27:76:8e:57:3c:15:d7:5b:87:ac:90:82:
         f9:43:50:82:b5:fd:fe:78:a1:21:78:3c:06:26:76:ec:d1:0c:
         66:c7:a2:28:77:80:1e:bb:03:20:6a:0e:a4:6f:84:87:70:b5:
         de:16:44:60:b0:7d:65:32:1f:50:73:54:a5:54:20:e4:34:26:
         e9:f6:cf:57:70:63:02:ed:6e:7c:cb:d4:3f:76:f3:7e:0e:1f:
         d6:70:8c:1a:c1:f4:55:a0:00:eb:05:6d:c0:0f:bf:63:46:44:
         8f:ab:7b:aa:43:b2:4c:f5:73:74:c9:d7:be:b6:95:80:ae:70:
         c2:76:77:77:80:76:47:97:cb:a4:47:c1:11:c8:9b:1a:17:53:
         20:9a:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:31 2024 by rpki-client on console-fra.rpki-client.org