Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa
File:                     AS36113.roa (raw, json)
Hash identifier:          MWmwjPGNqRUvxXQ4OIhHKCYrl0SPfbbYksJkzWpehsg=
Subject key identifier:   8E:66:D3:3A:EB:94:DA:DB:B4:83:A1:BF:36:C0:76:2F:5B:1C:6E:74
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       181E1A3699F23B1ED4797FBA1D6248D2972B048A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa
Signing time:             Sat 30 Sep 2023 00:00:09 +0000
ROA not before:           Fri 29 Sep 2023 23:55:09 +0000
ROA not after:            Sat 28 Sep 2024 00:00:09 +0000
asID:                     36113
IP address blocks:        104.234.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1e:1a:36:99:f2:3b:1e:d4:79:7f:ba:1d:62:48:d2:97:2b:04:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 29 23:55:09 2023 GMT
            Not After : Sep 28 00:00:09 2024 GMT
        Subject: CN=8E66D33AEB94DADBB483A1BF36C0762F5B1C6E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:38:5c:f5:1e:2f:34:85:a7:fc:d1:75:25:
                    9a:ca:49:85:62:d6:c8:c1:15:0c:b3:72:9c:6c:78:
                    17:34:ec:47:19:10:98:68:49:2e:c7:7e:bc:5a:2b:
                    62:0f:43:8a:5b:08:c7:51:08:9f:dc:9c:9c:25:33:
                    d6:25:52:2a:18:9e:af:73:c8:af:8a:ec:fe:ba:49:
                    6a:b7:91:87:74:fc:4a:1b:d3:e7:42:38:45:02:68:
                    23:71:f3:f2:db:f4:54:bf:5e:64:98:03:82:89:e0:
                    9f:0c:a0:8c:e2:af:d1:50:42:b7:af:95:3c:70:ae:
                    47:cd:7f:c5:b5:03:d9:b3:ce:0c:60:2b:fa:b3:34:
                    92:3d:af:de:bb:ed:75:7c:cb:33:66:25:a3:88:02:
                    8a:9a:42:ee:c2:28:36:2c:14:3a:7a:7d:c2:21:5e:
                    8e:4d:08:6d:0b:12:92:73:cb:f6:2f:29:b7:65:2a:
                    5f:bb:e2:a0:82:e1:6a:0c:8d:d8:fc:16:ec:fb:03:
                    68:b9:87:54:80:dd:41:d2:2f:39:01:49:91:1c:9a:
                    34:78:bf:6b:e0:2c:fd:21:7b:cd:f1:24:02:01:45:
                    55:03:c6:14:0b:d1:29:fe:1a:0c:ba:ab:55:64:d2:
                    cb:5f:66:83:26:d9:70:2e:da:63:b2:2c:2d:1f:3e:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:66:D3:3A:EB:94:DA:DB:B4:83:A1:BF:36:C0:76:2F:5B:1C:6E:74
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:bd:50:c0:f9:a2:d3:77:ce:b6:90:85:e4:00:de:5b:58:
         9e:6d:cc:b7:6c:ef:8e:fb:aa:c1:26:f6:7f:32:3a:a8:2f:36:
         bf:cf:b5:87:01:de:2b:7e:90:0c:ce:b8:1f:73:3c:7d:3b:0b:
         95:76:b9:af:83:da:28:5f:7f:f0:16:7f:48:e0:de:48:ea:0a:
         f4:98:76:78:0c:85:1e:89:63:db:9b:9f:d2:40:54:d1:e8:73:
         9e:0f:67:fd:d4:e2:21:4d:03:d3:57:a8:85:b9:59:be:f7:20:
         24:2c:1b:3b:74:f7:a4:7f:03:fc:6c:ac:c7:f7:d0:67:71:5f:
         bb:50:03:fd:5e:46:18:81:18:6e:01:2f:25:01:4b:2b:30:98:
         14:62:d2:ec:68:c8:12:fc:3c:85:3d:40:aa:83:0a:68:01:5a:
         25:db:ec:e8:46:46:59:1b:fc:4b:fb:6d:86:02:31:65:1f:98:
         4e:c0:33:09:52:57:67:34:b9:fb:34:1d:fd:17:c1:0b:8e:ee:
         99:19:a1:8c:93:7b:29:75:00:8a:07:c9:b8:6b:d3:ae:81:05:
         aa:09:92:89:c9:f8:64:22:e1:42:97:c9:0a:9a:ce:d7:0a:1d:
         39:7f:ae:a5:b0:64:94:9e:04:5e:d8:85:9e:e7:f3:c4:74:5c:
         3e:89:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org