Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          t43tLpRyg1yH27GhONyoQK2PKJziuvQTlu1S4xO/+po=
Subject key identifier:   D7:7A:E9:29:AC:6A:DB:29:1C:3B:C0:61:12:3B:7E:35:52:29:C4:43
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       630F1C5B3447514B22B7F834DA9DABE6F8B9217D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
Signing time:             Fri 11 Oct 2024 10:46:26 +0000
ROA not before:           Fri 11 Oct 2024 10:41:26 +0000
ROA not after:            Fri 10 Oct 2025 10:46:26 +0000
asID:                     36530
IP address blocks:        104.234.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:1c:5b:34:47:51:4b:22:b7:f8:34:da:9d:ab:e6:f8:b9:21:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 11 10:41:26 2024 GMT
            Not After : Oct 10 10:46:26 2025 GMT
        Subject: CN=D77AE929AC6ADB291C3BC061123B7E355229C443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:84:e0:20:2c:41:9e:c5:3d:d7:1a:e5:ab:
                    5c:9b:05:64:bc:c2:e7:3b:c1:18:23:cc:2c:17:17:
                    76:6b:ba:2b:08:51:41:e3:f0:6d:70:46:ce:ee:9a:
                    45:25:73:c8:d1:bc:66:01:96:5d:e0:03:cd:e6:6a:
                    e9:6b:db:e0:fa:58:6f:cf:ff:45:fd:75:0b:5e:06:
                    9b:de:68:23:9b:b0:33:5a:be:cf:79:3a:54:9e:a9:
                    0a:bf:ee:e3:7d:04:5a:35:ce:50:a2:57:3b:41:90:
                    28:35:1d:96:f9:6f:26:d5:69:eb:51:a0:49:0a:a6:
                    eb:f3:5e:f1:2e:1a:64:d4:d6:32:d9:f6:9d:cd:ad:
                    c6:1b:78:b0:1f:01:16:d0:0d:c5:d9:1f:2c:31:a1:
                    1c:4e:02:cf:0f:6c:44:ae:63:ef:f3:d1:b1:be:b5:
                    60:81:79:16:d6:29:28:7c:f1:72:bf:90:4f:89:95:
                    e2:2f:08:c1:a1:27:69:ed:5d:39:8b:e2:90:ce:a0:
                    b7:0f:8a:c7:c0:8f:0c:35:cb:85:7d:c0:0e:89:7c:
                    46:37:6a:df:65:e5:95:7a:2e:2b:f4:8e:c5:bc:63:
                    36:77:0f:2a:68:46:5d:3e:6a:b9:47:df:be:32:b2:
                    39:65:0e:c3:00:e3:b6:25:c1:ec:d6:d9:c6:60:a3:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:E9:29:AC:6A:DB:29:1C:3B:C0:61:12:3B:7E:35:52:29:C4:43
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:f5:68:0d:22:99:30:ed:2e:41:2c:13:24:40:c3:76:ce:68:
         69:1b:a8:8b:fe:c9:75:ec:6b:f5:56:10:4e:6f:96:92:71:27:
         de:c7:c6:c1:54:40:8d:72:20:d7:54:ee:ac:15:4a:3e:00:98:
         c2:a4:2e:fa:c4:ba:6e:00:57:a7:58:bc:60:c1:46:aa:e6:b2:
         40:44:66:59:d3:f7:64:87:e1:c5:dd:98:2b:0a:e5:31:2c:12:
         3e:26:50:18:20:68:00:93:f7:7e:36:93:e4:56:8b:5a:bc:8e:
         f0:71:d0:45:18:9b:f5:3c:09:f1:38:de:ca:a7:2f:64:c9:f8:
         c8:c6:0a:d9:b3:37:d6:c3:63:ca:68:6d:86:9e:02:0a:38:a7:
         f3:ba:b5:6c:6f:8c:f9:3a:77:19:82:b3:2b:2b:b0:6b:65:1a:
         c5:d8:35:41:d5:8f:07:f3:e7:53:9e:ab:e5:c0:92:e8:db:b2:
         4f:59:f6:55:fb:0f:f1:9b:20:35:65:27:81:bd:38:36:a2:1a:
         18:aa:18:9c:99:cf:e5:34:ea:e7:72:2c:84:d7:f5:5d:7f:f0:
         be:51:cf:12:2f:4e:7e:8b:3f:3a:3a:8f:0d:43:95:c5:5a:a6:
         54:d2:18:de:15:59:29:78:b1:a5:1f:67:3c:fc:a0:5c:d8:66:
         f9:67:ad:7e
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUYw8cWzRHUUsit/g02p2r5vi5IX0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDExMTA0MTI2WhcNMjUxMDEwMTA0NjI2
WjAzMTEwLwYDVQQDEyhENzdBRTkyOUFDNkFEQjI5MUMzQkMwNjExMjNCN0UzNTUy
MjlDNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPCE4CAsQZ7F
Pdca5atcmwVkvMLnO8EYI8wsFxd2a7orCFFB4/BtcEbO7ppFJXPI0bxmAZZd4APN
5mrpa9vg+lhvz/9F/XULXgab3mgjm7AzWr7PeTpUnqkKv+7jfQRaNc5Qolc7QZAo
NR2W+W8m1WnrUaBJCqbr817xLhpk1NYy2fadza3GG3iwHwEW0A3F2R8sMaEcTgLP
D2xErmPv89GxvrVggXkW1ikofPFyv5BPiZXiLwjBoSdp7V05i+KQzqC3D4rHwI8M
NcuFfcAOiXxGN2rfZeWVei4r9I7FvGM2dw8qaEZdPmq5R9++MrI5ZQ7DAOO2JcHs
1tnGYKMgvwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNd66SmsatspHDvAYRI7fjVS
KcRDMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM2NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOprMA0GCSqGSIb3DQEBCwUAA4IB
AQDF9WgNIpkw7S5BLBMkQMN2zmhpG6iL/sl17Gv1VhBOb5aScSfex8bBVECNciDX
VO6sFUo+AJjCpC76xLpuAFenWLxgwUaq5rJARGZZ0/dkh+HF3ZgrCuUxLBI+JlAY
IGgAk/d+NpPkVotavI7wcdBFGJv1PAnxON7Kpy9kyfjIxgrZszfWw2PKaG2GngIK
OKfzurVsb4z5OncZgrMrK7BrZRrF2DVB1Y8H8+dTnqvlwJLo27JPWfZV+w/xmyA1
ZSeBvTg2ohoYqhicmc/lNOrnciyE1/Vdf/C+Uc8SL05+iz86Oo8NQ5XFWqZU0hje
FVkpeLGlH2c8/KBc2Gb5Z61+
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org