Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa
File:                     AS399486.roa (raw, json)
Hash identifier:          m5fWlKdiSkR+5iVl+a0YxmGrfkgeZDWfCcBreQs/z8M=
Subject key identifier:   E7:80:01:44:6E:80:89:A9:78:6A:E0:EF:67:BA:5E:C7:8A:5C:89:03
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4BA6A4FB24E763A20F4CB36A926A2E2B051F1115
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa
Signing time:             Sun 27 Oct 2024 12:49:02 +0000
ROA not before:           Sun 27 Oct 2024 12:44:02 +0000
ROA not after:            Sun 26 Oct 2025 12:49:02 +0000
asID:                     399486
IP address blocks:        104.234.204.0/24 maxlen: 24
                          104.234.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a6:a4:fb:24:e7:63:a2:0f:4c:b3:6a:92:6a:2e:2b:05:1f:11:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 27 12:44:02 2024 GMT
            Not After : Oct 26 12:49:02 2025 GMT
        Subject: CN=E78001446E8089A9786AE0EF67BA5EC78A5C8903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:d3:b9:90:67:a6:5f:9a:ab:12:83:24:e1:
                    25:7b:25:a6:66:b9:07:cb:3e:35:5c:25:53:de:25:
                    17:02:fb:f2:29:ae:5f:a9:62:c1:4d:db:0a:81:b1:
                    49:c0:92:9c:eb:0f:e3:a9:21:f7:84:e9:5d:03:73:
                    7e:c1:ff:ed:6e:71:bb:31:92:cb:cd:c1:7a:fa:28:
                    71:a6:be:81:46:c3:4d:c5:62:99:64:d7:ce:11:6a:
                    2b:8f:a7:d4:cc:4a:cb:49:79:07:e0:fe:88:fe:3c:
                    ad:5b:e7:42:37:64:31:5b:fe:c9:17:8c:c8:4f:d0:
                    87:43:64:3c:24:b6:b9:1a:cc:d8:8b:4c:97:82:45:
                    80:aa:d0:b2:ed:0a:c7:ac:94:b0:04:52:d2:25:bb:
                    c2:e0:cf:4f:3d:a1:f2:2e:ea:1e:25:ae:ce:f1:ac:
                    23:1d:94:23:d4:a4:9f:2e:17:97:0b:f8:b6:5d:17:
                    aa:f1:76:79:00:d6:1e:ac:83:b7:5f:67:e5:50:51:
                    75:a6:11:8b:bc:4b:ab:b1:e9:cd:81:58:26:99:29:
                    8a:85:d4:89:21:ad:83:d8:df:bd:ba:0e:37:37:3b:
                    f8:56:cf:df:41:c0:00:c5:0d:66:13:22:ee:7d:96:
                    97:d6:ce:9c:54:59:5a:b4:72:9d:09:3d:47:c6:60:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:80:01:44:6E:80:89:A9:78:6A:E0:EF:67:BA:5E:C7:8A:5C:89:03
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:da:cf:e3:c0:ce:68:15:98:cc:7a:ed:7f:2e:3a:f3:86:
         0b:37:3f:ac:1c:b7:36:cf:8d:7e:d2:9b:2a:89:b6:61:25:94:
         6b:61:b4:fd:54:da:b7:2a:27:a3:28:8e:ef:04:09:29:13:71:
         b2:a6:e7:1d:19:b6:24:09:c5:ba:38:89:8a:f1:7d:0f:2e:b0:
         d1:68:e2:af:35:b6:2e:40:0e:ec:ca:b2:19:2d:dd:50:59:d5:
         7c:da:98:29:69:3a:64:1c:aa:80:c0:7b:f0:7c:6a:b0:20:3d:
         ad:d9:c3:4b:dc:5c:5b:68:e2:32:35:63:fe:cc:a3:65:b2:67:
         79:85:51:47:bc:42:cb:48:ec:b8:27:f7:22:d7:b0:77:4a:26:
         50:23:60:48:79:e6:8d:d8:f8:63:c9:9f:31:9e:5e:97:6f:91:
         43:1b:16:a6:46:c2:ad:5f:02:ac:ff:7b:cb:74:f7:a8:46:e8:
         43:dd:ae:79:f7:ec:49:ba:80:d8:4c:aa:d9:9a:03:ab:98:cd:
         d3:27:a0:4f:62:f3:a1:12:fa:35:2b:0e:5e:34:bb:5f:14:ce:
         e1:2b:1b:0c:f8:66:3a:d2:64:98:cd:57:80:c3:06:02:d0:dd:
         62:e4:d4:d2:30:50:77:ee:2a:b4:db:f0:ca:80:05:22:99:6c:
         16:06:65:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org