Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          fVjD1x9EOO4g7G6B/aaejigzAkZ1WDkeal2qNpap3BI=
Subject key identifier:   47:80:33:61:B6:9D:79:D8:44:5F:16:5F:AB:30:79:5D:20:EE:48:BF
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7A3C4C13EEDB2E752771C6A661F05A42B55BB627
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa
Signing time:             Thu 21 Nov 2024 18:49:22 +0000
ROA not before:           Thu 21 Nov 2024 18:44:22 +0000
ROA not after:            Thu 20 Nov 2025 18:49:22 +0000
asID:                     396356
IP address blocks:        104.234.101.0/24 maxlen: 24
                          104.234.125.0/24 maxlen: 24
                          104.234.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3c:4c:13:ee:db:2e:75:27:71:c6:a6:61:f0:5a:42:b5:5b:b6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 21 18:44:22 2024 GMT
            Not After : Nov 20 18:49:22 2025 GMT
        Subject: CN=47803361B69D79D8445F165FAB30795D20EE48BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:c8:bb:0a:94:82:42:89:24:45:b3:81:2b:
                    9f:2a:7e:60:29:ac:63:96:f8:e0:b4:14:ad:89:7d:
                    17:68:47:6c:f4:ea:24:c9:d6:c1:cb:2e:35:f5:21:
                    10:6a:a8:eb:48:01:9e:a6:b0:a1:04:53:6f:5d:7f:
                    8f:39:2c:62:95:71:41:a9:d1:9f:92:24:ad:b8:49:
                    11:28:5b:f9:ed:40:4c:49:85:6d:7b:02:51:47:43:
                    ca:4d:ec:92:2b:fb:f1:3e:9c:46:0c:04:ad:45:1d:
                    0a:23:31:48:fa:a4:e4:70:22:63:44:68:27:8c:b2:
                    21:cf:72:d7:ad:f7:56:b3:3d:e7:3a:7a:49:9e:9d:
                    d3:b1:19:20:c2:4a:27:30:fa:f8:ba:5a:ff:3b:a2:
                    1f:f9:9b:86:7b:b1:2a:f5:69:75:71:9b:7b:df:58:
                    6b:a1:89:cd:12:77:80:c3:34:55:50:4a:14:5f:03:
                    57:9f:d9:1e:b0:27:a7:b4:9b:45:a8:61:02:fa:af:
                    22:2e:1a:6d:db:df:ce:62:81:dd:0e:86:2a:2f:65:
                    0c:6c:d3:37:66:f1:d9:70:a7:96:13:e4:f8:a3:ee:
                    39:ee:2e:b6:19:de:52:29:90:51:c9:71:68:2c:72:
                    6d:5a:05:55:98:1f:51:d6:0a:58:0a:40:9c:b5:cc:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:33:61:B6:9D:79:D8:44:5F:16:5F:AB:30:79:5D:20:EE:48:BF
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.101.0/24
                  104.234.125.0/24
                  104.234.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:96:a8:a9:78:d5:3e:4f:80:36:23:5c:a0:78:92:27:23:49:
         af:69:e7:28:ae:c2:4b:12:24:db:c8:b3:44:4c:84:23:07:17:
         6a:8f:3a:b1:e9:09:2d:fe:12:a5:06:40:41:97:18:ac:62:b8:
         c1:9c:25:1b:e8:72:cd:6b:56:1f:11:6f:9e:37:11:b6:b3:07:
         d1:b5:d9:39:71:ab:d3:a9:ed:71:f0:2f:a0:25:61:6e:3f:8d:
         91:fe:5e:ce:61:21:2c:b9:78:74:a5:11:de:08:3a:ac:1d:31:
         2b:c6:70:e2:56:72:8a:16:7c:d4:a4:b7:14:4d:71:83:d9:c5:
         86:35:e8:0f:8a:8a:b0:a3:b7:dd:3d:51:f1:7a:6f:9b:c5:b9:
         73:49:48:53:51:49:10:93:74:32:56:a2:1b:37:09:98:9a:a3:
         ef:1d:e2:3a:d7:a5:e2:ca:8e:a9:06:f8:39:ec:de:d2:66:43:
         23:83:ea:3c:82:e3:7a:21:cb:77:8d:9b:ce:66:18:68:bf:8c:
         6c:1f:5c:50:0d:84:1d:93:03:52:cc:51:a5:91:1e:15:08:4e:
         c1:9f:57:24:38:2a:1c:18:3f:8b:2f:a2:f2:a2:dd:a1:e3:43:
         2e:ee:16:c1:64:0d:97:f1:00:65:f5:3f:5f:4c:81:5c:74:41:
         3d:5c:94:2f
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUejxME+7bLnUnccamYfBaQrVbticwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTIxMTg0NDIyWhcNMjUxMTIwMTg0OTIy
WjAzMTEwLwYDVQQDEyg0NzgwMzM2MUI2OUQ3OUQ4NDQ1RjE2NUZBQjMwNzk1RDIw
RUU0OEJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31vIuwqUgkKJ
JEWzgSufKn5gKaxjlvjgtBStiX0XaEds9OokydbByy419SEQaqjrSAGeprChBFNv
XX+POSxilXFBqdGfkiStuEkRKFv57UBMSYVtewJRR0PKTeySK/vxPpxGDAStRR0K
IzFI+qTkcCJjRGgnjLIhz3LXrfdWsz3nOnpJnp3TsRkgwkonMPr4ulr/O6If+ZuG
e7Eq9Wl1cZt731hroYnNEneAwzRVUEoUXwNXn9kesCentJtFqGEC+q8iLhpt29/O
YoHdDoYqL2UMbNM3ZvHZcKeWE+T4o+457i62Gd5SKZBRyXFoLHJtWgVVmB9R1gpY
CkCctcxQaQIDAQABo4ICizCCAocwHQYDVR0OBBYEFEeAM2G2nXnYRF8WX6sweV0g
7ki/MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqZQMEAGjqfQMEAGjqjDANBgkq
hkiG9w0BAQsFAAOCAQEAc5aoqXjVPk+ANiNcoHiSJyNJr2nnKK7CSxIk28izREyE
IwcXao86sekJLf4SpQZAQZcYrGK4wZwlG+hyzWtWHxFvnjcRtrMH0bXZOXGr06nt
cfAvoCVhbj+Nkf5ezmEhLLl4dKUR3gg6rB0xK8Zw4lZyihZ81KS3FE1xg9nFhjXo
D4qKsKO33T1R8Xpvm8W5c0lIU1FJEJN0MlaiGzcJmJqj7x3iOtel4sqOqQb4Oeze
0mZDI4PqPILjeiHLd42bzmYYaL+MbB9cUA2EHZMDUsxRpZEeFQhOwZ9XJDgqHBg/
iy+i8qLdoeNDLu4WwWQNl/EAZfU/X0yBXHRBPVyULw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:02:16 2025 by rpki-client