Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          4D9Sbi2CbpXnwi86f9Y46+0MM1DzaBxd+Rn45xFZv1w=
Subject key identifier:   BB:E0:DB:A9:2C:7C:F4:8E:CA:BF:60:93:E8:F6:44:9E:A1:99:6B:46
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       32D29A951526875CCB7029F964F4735D0E051CF7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa
Signing time:             Thu 21 Dec 2023 18:01:56 +0000
ROA not before:           Thu 21 Dec 2023 17:56:56 +0000
ROA not after:            Thu 19 Dec 2024 18:01:56 +0000
asID:                     396356
IP address blocks:        104.234.101.0/24 maxlen: 24
                          104.234.125.0/24 maxlen: 24
                          104.234.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 07:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d2:9a:95:15:26:87:5c:cb:70:29:f9:64:f4:73:5d:0e:05:1c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 21 17:56:56 2023 GMT
            Not After : Dec 19 18:01:56 2024 GMT
        Subject: CN=BBE0DBA92C7CF48ECABF6093E8F6449EA1996B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:13:46:2e:6a:ab:d6:c0:08:cd:81:cc:ce:
                    85:e6:46:01:dc:96:30:dd:62:94:5e:ca:d0:92:c9:
                    da:cd:75:6a:70:e5:00:3a:c2:8d:b6:a0:f9:c6:b0:
                    0d:40:66:e0:c0:68:8e:43:c1:3f:42:35:b0:cb:7c:
                    3f:9b:17:e6:4b:7e:95:c6:d6:6a:1a:f7:30:82:88:
                    2a:6d:bf:37:b3:6b:28:11:6a:e2:12:68:f1:0d:58:
                    97:b2:e3:9a:d5:d9:21:28:e5:b2:97:7d:1f:96:d7:
                    f1:ff:c8:e8:73:47:58:ff:56:e4:96:04:fb:0a:5b:
                    99:6c:4e:bb:61:a3:89:1b:5c:4b:1c:81:e4:86:f8:
                    b2:fc:fa:44:28:8a:4c:9b:94:30:f2:ba:97:89:50:
                    1f:74:a8:2d:ef:99:0f:e5:07:4a:a9:04:0c:ef:82:
                    76:27:c8:56:1e:07:15:19:a2:c6:74:19:34:b8:78:
                    08:10:04:94:0e:da:64:eb:ee:71:7a:da:9b:50:b6:
                    78:38:b9:b3:72:24:c5:fe:0c:08:bb:a6:dd:98:0b:
                    d3:ed:c5:0f:08:d3:90:f0:58:06:5c:fc:b0:75:d2:
                    09:35:13:c3:fd:68:ce:c4:05:36:54:80:ac:c1:a7:
                    b0:39:68:15:85:91:bd:7c:72:32:b1:12:fc:83:24:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E0:DB:A9:2C:7C:F4:8E:CA:BF:60:93:E8:F6:44:9E:A1:99:6B:46
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.101.0/24
                  104.234.125.0/24
                  104.234.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:5e:9f:c2:d7:54:b2:d0:b3:4d:9e:4d:eb:28:cf:d9:34:
         7e:e8:8b:a8:0d:ec:4b:b5:aa:79:c1:17:98:ce:0d:64:b8:90:
         bd:2b:e9:03:63:ee:a6:ec:af:0c:19:19:a6:80:c1:7b:d6:a5:
         fb:d7:c2:57:57:55:0e:6b:1f:ff:93:dc:4e:20:8d:4f:43:54:
         d9:9a:0b:b4:82:17:20:74:d1:11:1a:cf:60:a5:5f:9f:af:ea:
         22:97:66:67:d4:d8:7f:64:5c:c9:85:5d:97:01:81:c7:d1:f1:
         86:d1:a0:5a:36:0e:81:db:15:b6:59:c4:ab:f1:b5:2f:60:80:
         c0:d5:15:4c:b0:29:e6:b2:e4:a1:f0:3b:cf:57:a3:70:85:62:
         93:87:42:15:04:a2:11:f1:ef:4f:2b:b8:eb:b7:2d:32:19:17:
         58:04:f4:a4:f1:ea:af:a1:05:57:5f:57:2e:f1:3e:c8:63:3d:
         7f:72:3a:4d:c6:20:bd:31:f1:0c:a0:c7:64:c6:5e:da:78:e2:
         1e:16:c5:db:29:ba:9c:09:e4:5b:b2:3f:45:5e:78:1b:f7:e6:
         c7:55:49:03:73:48:9d:49:17:ec:15:38:cc:be:83:52:78:22:
         55:25:08:e6:51:85:6c:04:6e:26:e1:c7:13:66:19:e2:28:10:
         11:1b:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:38:26 2024 by rpki-client on console-ams.rpki-client.org