Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa
File:                     AS395111.roa (raw, json)
Hash identifier:          7WXNcr0KMRGOfCW4s6mc5tLehXJri4Im1YBwDyLfNbk=
Subject key identifier:   A8:DE:1D:D4:12:73:8E:08:F1:C0:EC:0C:0B:F7:AA:AF:FF:3A:93:17
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       15E4B0D3B3FE0E1A52DC02783E9C16EFB77C8634
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa
Signing time:             Wed 20 Dec 2023 18:01:11 +0000
ROA not before:           Wed 20 Dec 2023 17:56:11 +0000
ROA not after:            Wed 18 Dec 2024 18:01:11 +0000
asID:                     395111
IP address blocks:        104.234.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:b0:d3:b3:fe:0e:1a:52:dc:02:78:3e:9c:16:ef:b7:7c:86:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:11 2023 GMT
            Not After : Dec 18 18:01:11 2024 GMT
        Subject: CN=A8DE1DD412738E08F1C0EC0C0BF7AAAFFF3A9317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:bb:8e:ce:4d:2d:7c:1b:76:e4:1b:eb:25:
                    80:64:b1:63:27:0e:90:72:d2:47:0e:49:7b:6d:74:
                    89:c7:46:f6:16:a4:09:69:36:e0:1a:77:a0:84:b6:
                    c2:e5:de:a9:f2:4d:4d:0f:55:e9:e5:08:70:d0:ef:
                    a7:3f:5e:a0:50:a8:27:b1:89:3a:ce:19:55:b2:94:
                    01:0f:1c:29:58:db:d8:a8:47:bd:75:47:bf:18:5c:
                    10:71:35:cf:da:8c:37:3b:c7:f3:1c:f0:58:c2:6c:
                    73:ec:cc:77:71:d3:86:2e:65:a9:13:a4:70:a5:37:
                    13:aa:f9:f7:8e:b5:42:27:16:0e:a4:bf:38:00:d1:
                    40:6b:a3:d3:88:00:bd:06:28:ef:14:91:ef:29:1b:
                    13:43:95:80:4b:b5:c2:b9:a8:1d:fb:82:25:e1:18:
                    ed:48:8f:50:1c:59:c2:c6:a0:98:75:9d:08:ef:32:
                    3b:f8:0f:d6:27:ae:28:3b:06:c5:52:03:14:0a:de:
                    4d:9a:4e:7d:9c:a9:90:21:d4:49:2a:e3:63:92:fb:
                    fd:b6:e9:d4:80:1f:43:fa:83:f6:f5:95:d5:7a:05:
                    6d:c4:39:d8:c0:fb:fa:a1:2a:1b:fb:b9:7c:90:2f:
                    91:b4:08:3a:98:e9:0f:3e:0b:6c:9c:93:19:54:40:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:1D:D4:12:73:8E:08:F1:C0:EC:0C:0B:F7:AA:AF:FF:3A:93:17
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:24:43:62:6f:1c:36:cd:b1:86:73:81:19:22:f7:1a:72:c7:
         28:a4:db:65:0e:a4:be:51:be:d5:58:6d:8b:3a:e4:a1:ed:3e:
         8e:d7:a3:22:8b:88:cb:a4:65:5c:b1:f2:8d:1f:ef:7a:25:4b:
         0b:0c:d9:67:f4:a8:0f:15:fd:02:91:d9:c5:c0:cf:68:cb:30:
         cd:d6:dc:26:61:89:ac:20:14:62:76:1f:42:7f:1b:02:5e:69:
         50:eb:2d:ad:84:ea:a6:08:2d:8a:1a:44:2d:8b:22:97:39:e5:
         30:ef:7f:b3:c4:e4:c2:24:f4:84:68:03:a7:1d:00:31:ae:6e:
         7b:d4:51:3e:c1:eb:68:85:6a:5e:9d:ea:37:35:21:97:cf:c5:
         f1:70:08:54:24:61:71:7b:c9:19:ad:76:c7:01:26:30:68:39:
         f1:b0:ac:3e:d8:6e:5a:7d:a6:dc:bd:65:55:1c:70:b8:03:22:
         09:e5:73:c6:f0:f2:c7:2b:b5:8b:0b:ae:ca:ea:16:9d:43:f5:
         ed:6c:2d:95:0a:38:75:3b:e4:b6:95:7d:bb:c8:1e:5b:8c:82:
         7c:37:3b:ff:3c:3e:c7:98:51:2f:18:46:c4:9e:1c:6f:bb:c3:
         bd:5c:04:68:a4:4c:95:b7:9e:63:9d:03:25:f6:36:c6:4a:65:
         1e:8d:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:50:07 2024 by rpki-client on console-ams.rpki-client.org