Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa
File:                     AS36113.roa (raw, json)
Hash identifier:          HazCPXjXI7ifssAlkcsxiarsZRK52SP8IWDvh+sC8a8=
Subject key identifier:   D7:3F:55:E2:8C:97:13:56:A0:18:59:3C:EC:A4:FA:47:9F:72:BD:99
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5FE9917682830C5D2275657F03A9648D2FEE1D52
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa
Signing time:             Sat 31 Aug 2024 00:48:59 +0000
ROA not before:           Sat 31 Aug 2024 00:43:59 +0000
ROA not after:            Sat 30 Aug 2025 00:48:59 +0000
asID:                     36113
IP address blocks:        104.234.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e9:91:76:82:83:0c:5d:22:75:65:7f:03:a9:64:8d:2f:ee:1d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 31 00:43:59 2024 GMT
            Not After : Aug 30 00:48:59 2025 GMT
        Subject: CN=D73F55E28C971356A018593CECA4FA479F72BD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:2a:64:7c:1e:4e:b2:82:ad:2e:da:0b:e1:
                    6e:ab:b4:33:b8:b6:8f:ec:ee:a1:da:44:c8:1c:b6:
                    c0:3c:4c:2f:6b:f4:a9:6a:d0:f3:b3:a6:a8:7c:4e:
                    9a:c4:64:ee:bf:87:da:f2:d9:de:96:f4:73:48:10:
                    7d:42:29:07:0f:c0:24:98:58:ba:e7:47:1a:e3:4d:
                    aa:73:f2:6b:30:a0:e6:43:17:61:81:e0:fb:10:40:
                    a8:d5:40:40:9a:58:99:50:4e:94:25:33:32:31:cb:
                    8a:2b:f6:61:37:34:25:44:78:ae:3e:94:f1:85:81:
                    e8:31:4a:0e:23:22:fa:f5:f1:fd:3e:9f:b6:c2:f0:
                    8e:10:eb:56:c8:6f:aa:87:19:fa:2c:b3:30:b0:25:
                    6b:0e:1a:d3:e0:19:7b:93:e0:e7:b5:1e:4f:3e:9d:
                    e0:7f:68:d7:c2:fe:e4:79:87:7b:30:3a:29:f2:e8:
                    a7:1d:6f:1f:44:58:d8:92:b7:6b:9b:1f:e3:a3:07:
                    39:80:24:27:c4:36:08:64:07:1d:20:a1:87:f7:99:
                    6f:c1:df:ee:65:9d:7a:87:68:59:a6:a5:fd:c0:fc:
                    6b:61:20:93:2a:54:51:4c:00:6b:bc:da:83:20:fe:
                    96:8a:28:9e:6e:12:99:a9:14:94:04:f5:4d:3e:94:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3F:55:E2:8C:97:13:56:A0:18:59:3C:EC:A4:FA:47:9F:72:BD:99
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:f0:c7:47:70:99:d2:7f:85:fe:41:76:d1:a1:be:34:f3:
         c1:6c:f7:10:e9:91:81:6b:71:68:76:7a:40:74:a3:31:ab:95:
         3a:8c:66:d3:37:84:37:25:42:2b:0c:ce:83:b1:6a:d7:5e:da:
         c4:db:5c:34:1d:df:cb:7f:bc:d3:16:fc:07:93:79:d8:d6:e9:
         87:11:5a:a2:5f:41:c4:85:bc:2c:34:44:e1:88:ac:7a:15:7b:
         fb:b1:36:e2:9a:cf:af:a8:d5:45:a5:f2:1c:50:09:2e:ee:c9:
         be:b6:af:68:fc:ed:71:85:fd:8a:12:0a:b5:54:dc:34:0b:3a:
         84:0d:78:53:27:59:02:cb:fa:87:07:7b:c3:33:81:dd:4a:05:
         e3:e6:1f:a5:93:f6:eb:83:4a:73:34:00:2f:85:ca:7a:7d:53:
         6e:6d:f2:72:9b:da:f7:aa:9f:bd:b4:2f:66:f0:7d:ed:c6:4f:
         da:4c:45:ed:ea:f2:9b:a1:48:a0:55:31:2f:91:4d:b7:b9:ad:
         ae:6f:0f:a7:aa:28:96:a2:b8:8e:d3:e1:94:89:2e:ba:1f:ca:
         b3:a7:b1:63:3f:4b:c9:11:51:ba:93:bc:7c:20:61:97:d4:ac:
         56:41:ef:74:01:d3:34:b7:f0:02:09:eb:d2:9e:44:a2:fb:8c:
         0b:10:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:15 2024 by rpki-client on console-ams.rpki-client.org