Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS35913.roa
File:                     AS35913.roa (raw, json)
Hash identifier:          +DyrYVZELtt3Qh+S9hFSo/bFmWrTq4JpkLyRMUuhuuU=
Subject key identifier:   2B:90:07:3E:3F:33:A3:7D:70:28:A1:E9:56:FE:78:7D:C7:F3:14:F7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       14E8CF76E645171F93BCF33FB9396016293599D5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS35913.roa
Signing time:             Tue 06 Aug 2024 19:48:59 +0000
ROA not before:           Tue 06 Aug 2024 19:43:59 +0000
ROA not after:            Tue 05 Aug 2025 19:48:59 +0000
asID:                     35913
IP address blocks:        104.234.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e8:cf:76:e6:45:17:1f:93:bc:f3:3f:b9:39:60:16:29:35:99:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  6 19:43:59 2024 GMT
            Not After : Aug  5 19:48:59 2025 GMT
        Subject: CN=2B90073E3F33A37D7028A1E956FE787DC7F314F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:86:ee:b0:0d:cb:d9:b7:c0:53:3e:43:3b:
                    e9:00:66:67:35:54:d6:5e:45:d8:bc:cc:6d:10:3a:
                    93:88:34:b4:d5:83:d4:39:73:6d:4f:06:96:d8:d4:
                    e2:2b:1c:6a:2b:18:f3:0d:02:61:53:2d:c0:14:d3:
                    7f:f0:f5:76:9f:51:93:9e:7b:ab:86:87:a2:4e:8b:
                    0a:be:7a:35:80:15:0d:9e:39:59:f6:5c:37:3b:33:
                    be:1c:45:a1:7e:87:ef:fd:0f:e4:73:71:6b:72:e9:
                    13:82:25:74:4f:56:9e:2d:cc:24:5c:3d:76:4e:c3:
                    df:79:f7:3f:7c:c8:d2:d4:eb:32:16:00:63:e5:36:
                    68:04:be:bf:ee:c3:da:45:6d:cc:90:6f:5d:03:67:
                    d9:1b:a0:f3:c0:f8:f0:52:74:11:4f:56:1e:c8:53:
                    b2:60:38:24:e8:5d:f3:a2:4a:c2:2e:94:b0:4f:83:
                    4c:29:f5:e0:ce:ff:aa:e0:9b:3a:e3:f0:3d:10:e7:
                    f9:65:50:37:3e:97:12:9c:a2:0d:a2:ff:f6:2c:b5:
                    44:7a:66:53:f5:7c:06:41:48:a5:18:72:e6:4f:a3:
                    07:b4:89:9e:ad:a4:41:4b:8f:1f:41:33:63:cc:78:
                    fd:71:97:00:d4:79:c9:b7:ea:cd:c2:f6:f6:da:79:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:07:3E:3F:33:A3:7D:70:28:A1:E9:56:FE:78:7D:C7:F3:14:F7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS35913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:b9:12:ae:04:3f:d1:bd:1f:4b:26:e5:18:ab:60:8c:91:ae:
         4e:f4:47:29:a4:3d:15:3e:47:34:44:7f:c2:14:8e:c5:d0:2e:
         93:1e:79:de:a9:43:80:56:09:3f:cd:2b:ee:44:7f:2d:9a:5c:
         6b:6d:81:03:08:32:e6:29:25:c7:8c:b9:3d:d1:db:33:31:fa:
         01:d7:26:5f:62:ff:94:13:0c:de:db:a9:7c:8d:dd:c4:b8:66:
         24:97:d9:48:8b:06:ad:a8:b2:4d:7e:40:c5:46:e8:a9:3c:4f:
         d8:e7:b6:69:55:2d:af:ea:d5:6a:cb:46:1f:37:80:cd:4b:79:
         99:bf:d5:05:86:52:e7:26:5d:df:df:e2:5c:bc:c2:55:6e:cf:
         aa:3c:5c:75:59:07:0f:73:0f:70:52:7a:85:03:28:ef:df:70:
         ea:c0:8a:ad:87:37:57:00:01:66:2c:1d:2a:2d:40:98:52:7e:
         9b:cd:92:bf:80:75:c7:42:62:c0:41:76:8e:44:42:b1:a1:06:
         98:f4:03:e3:5f:07:42:d5:ae:fd:92:84:4e:a0:02:6f:78:d0:
         c0:d9:89:6a:ff:3e:8c:3b:ed:ac:5b:b0:b0:27:b8:86:92:b4:
         62:dd:04:53:54:86:9e:d3:bc:73:27:fb:46:67:f7:d6:d9:5c:
         38:38:f7:ec
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUFOjPduZFFx+TvPM/uTlgFik1mdUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwODA2MTk0MzU5WhcNMjUwODA1MTk0ODU5
WjAzMTEwLwYDVQQDEygyQjkwMDczRTNGMzNBMzdENzAyOEExRTk1NkZFNzg3REM3
RjMxNEY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnaG7rANy9m3
wFM+QzvpAGZnNVTWXkXYvMxtEDqTiDS01YPUOXNtTwaW2NTiKxxqKxjzDQJhUy3A
FNN/8PV2n1GTnnurhoeiTosKvno1gBUNnjlZ9lw3OzO+HEWhfofv/Q/kc3FrcukT
giV0T1aeLcwkXD12TsPfefc/fMjS1OsyFgBj5TZoBL6/7sPaRW3MkG9dA2fZG6Dz
wPjwUnQRT1YeyFOyYDgk6F3zokrCLpSwT4NMKfXgzv+q4Js64/A9EOf5ZVA3PpcS
nKINov/2LLVEemZT9XwGQUilGHLmT6MHtImeraRBS48fQTNjzHj9cZcA1HnJt+rN
wvb22nlXswIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCuQBz4/M6N9cCih6Vb+eH3H
8xT3MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM1OTEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpYMA0GCSqGSIb3DQEBCwUAA4IB
AQC4uRKuBD/RvR9LJuUYq2CMka5O9EcppD0VPkc0RH/CFI7F0C6THnneqUOAVgk/
zSvuRH8tmlxrbYEDCDLmKSXHjLk90dszMfoB1yZfYv+UEwze26l8jd3EuGYkl9lI
iwatqLJNfkDFRuipPE/Y57ZpVS2v6tVqy0YfN4DNS3mZv9UFhlLnJl3f3+JcvMJV
bs+qPFx1WQcPcw9wUnqFAyjv33DqwIqthzdXAAFmLB0qLUCYUn6bzZK/gHXHQmLA
QXaOREKxoQaY9APjXwdC1a79koROoAJveNDA2Ylq/z6MO+2sW7CwJ7iGkrRi3QRT
VIae07xzJ/tGZ/fW2Vw4OPfs
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:20 2024 by rpki-client on console-fra.rpki-client.org