Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
File:                     AS393278.roa (raw, json)
Hash identifier:          6g+VLaUncE0uHF1818FTo+MV5oFhF6IFx5U9eywx15E=
Subject key identifier:   CA:75:54:1F:FB:69:5D:38:35:2F:D9:54:A3:98:BB:25:3A:38:2B:40
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4612EA494C11F562FB920D4CACABE40D5952C113
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
Signing time:             Wed 14 Feb 2024 20:39:41 +0000
ROA not before:           Wed 14 Feb 2024 20:34:41 +0000
ROA not after:            Wed 12 Feb 2025 20:39:41 +0000
asID:                     393278
IP address blocks:        104.234.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:12:ea:49:4c:11:f5:62:fb:92:0d:4c:ac:ab:e4:0d:59:52:c1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 14 20:34:41 2024 GMT
            Not After : Feb 12 20:39:41 2025 GMT
        Subject: CN=CA75541FFB695D38352FD954A398BB253A382B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:66:96:3e:1a:4b:74:ef:45:c6:fa:8c:4f:
                    f5:3d:1c:76:d7:4e:93:df:68:97:38:3d:73:0c:2d:
                    e7:6e:6e:74:9a:b5:bd:c1:9d:47:cf:27:dc:8d:67:
                    fb:94:c2:d0:a7:c0:3a:f5:48:02:99:de:a4:94:50:
                    c2:8c:64:ba:cd:71:5d:5b:6f:e8:e8:5a:7c:57:56:
                    76:66:b4:b8:a4:f9:7b:a8:d7:a1:c9:06:74:8f:91:
                    d9:74:08:16:11:eb:37:99:2d:7f:43:a4:e5:dd:91:
                    2d:2b:8d:44:cb:40:22:44:1a:ab:64:0d:83:c1:58:
                    75:f0:d3:5c:80:6f:52:c1:50:2c:4d:e6:98:25:ae:
                    07:cb:83:41:a9:8a:d5:cf:5e:ea:db:c9:d2:cc:1e:
                    5f:33:1b:37:84:29:c9:08:fc:4d:51:9a:4e:42:91:
                    3d:c8:5c:1c:0e:89:73:d4:f2:23:45:7e:bb:58:01:
                    7c:87:a3:c1:db:a8:fa:ba:7b:0e:1d:68:2e:e8:f6:
                    23:6f:07:4a:0e:96:d3:5a:44:59:68:95:db:bb:a8:
                    63:99:2a:a0:72:b5:46:25:18:00:c1:b7:e4:93:7d:
                    17:76:06:dc:bf:73:c5:11:ad:72:ef:35:71:5f:27:
                    a3:ef:72:2d:15:f6:cd:0e:34:3a:00:4a:e4:35:41:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:54:1F:FB:69:5D:38:35:2F:D9:54:A3:98:BB:25:3A:38:2B:40
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:33:61:f5:0d:30:1b:99:d2:0d:0d:ac:df:99:dd:82:68:eb:
         1a:7b:a0:9d:48:50:f6:8c:67:ed:11:22:aa:1d:cb:d0:9d:17:
         ca:e3:42:4b:a5:42:f5:87:31:b9:9d:aa:bc:e6:94:05:73:4c:
         f1:09:7b:22:40:03:75:07:97:43:2e:e7:5c:56:89:2a:8f:f4:
         83:d7:ae:7c:29:ad:a6:46:89:14:1e:fd:25:d1:44:bc:6f:2a:
         28:95:09:84:90:3e:aa:a6:45:8f:ef:68:51:c0:17:89:2a:0d:
         9b:ff:12:87:67:f4:62:7b:62:55:0f:17:3e:18:97:e0:70:f8:
         6f:c9:0c:3e:ba:27:f5:0b:95:bf:a4:06:d3:43:8d:21:1d:7f:
         0a:eb:98:09:31:69:91:c2:a7:ec:01:df:bd:f2:e7:0e:6c:ce:
         4f:ab:e8:4e:0d:c9:22:91:fa:bd:f3:1a:86:63:71:9b:52:b7:
         c6:78:0d:7e:d2:0a:f1:b1:37:84:f4:91:80:b2:80:0c:30:0a:
         14:83:9a:ed:b3:95:1a:ad:bf:a7:89:ee:06:9f:da:37:16:a8:
         7f:d7:b8:dd:4a:67:0c:e5:51:7e:c6:24:67:22:32:d4:e8:6d:
         ff:3a:43:72:ab:93:4a:43:79:1c:5d:53:31:ff:3b:33:95:99:
         53:8a:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org