Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
File:                     AS399641.roa (raw, json)
Hash identifier:          6z2NR29wPh0q/Yr4mTo0XKGBoiFZeXYsupbEBIT+1vc=
Subject key identifier:   4E:B6:F1:34:B9:12:F4:9A:C5:8A:E3:2E:50:CD:7A:9F:48:09:35:EB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5822AF08B5EFA367AC60B278C2670D1ACA7013CA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
Signing time:             Fri 03 Nov 2023 20:10:46 +0000
ROA not before:           Fri 03 Nov 2023 20:05:46 +0000
ROA not after:            Fri 01 Nov 2024 20:10:46 +0000
asID:                     399641
IP address blocks:        104.234.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:22:af:08:b5:ef:a3:67:ac:60:b2:78:c2:67:0d:1a:ca:70:13:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov  3 20:05:46 2023 GMT
            Not After : Nov  1 20:10:46 2024 GMT
        Subject: CN=4EB6F134B912F49AC58AE32E50CD7A9F480935EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:5b:ad:88:0a:6f:22:c9:7e:2c:b3:20:9f:
                    6a:ee:a0:5a:43:ac:ee:20:d7:3b:17:fe:5f:6e:17:
                    1d:ca:1e:70:a2:56:da:d7:d6:dc:9c:10:28:f2:e3:
                    67:d5:19:2a:1a:5b:a6:94:1a:1d:49:f3:01:32:0a:
                    b2:e3:fc:fb:f8:62:8a:a8:15:5d:4c:6f:4f:5d:0c:
                    9c:63:81:e3:b0:12:80:9a:87:5e:cb:85:ba:20:eb:
                    cd:59:2e:22:a0:5f:b4:69:ce:b7:f6:30:6e:d9:61:
                    da:10:45:fb:c2:cf:80:de:3a:9f:de:0c:5e:5d:43:
                    a8:dd:22:22:0a:0c:c9:4b:db:36:27:a9:3a:7d:22:
                    1c:b1:a2:46:7c:3d:61:75:bd:a9:77:14:a4:b2:e8:
                    4f:a4:d9:bc:f0:bc:9c:d7:f2:c4:db:04:30:00:6c:
                    77:d4:ce:45:b9:86:72:e6:89:4b:cf:c9:3f:5d:3a:
                    13:91:39:79:f8:5d:14:b0:0e:01:fc:44:06:90:b3:
                    49:fa:d0:7e:36:58:f1:52:fe:6c:17:d4:9c:18:51:
                    6b:bb:1e:35:08:c6:a7:a4:81:06:a8:08:11:26:18:
                    36:7e:10:d9:43:33:82:ee:29:b5:32:b0:6e:9c:04:
                    58:a3:74:03:09:0f:b3:f0:ca:39:a7:2b:1e:c0:bd:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:F1:34:B9:12:F4:9A:C5:8A:E3:2E:50:CD:7A:9F:48:09:35:EB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d6:84:fb:52:33:e3:3b:87:5b:7a:01:23:1b:f4:ac:2a:0b:
         d2:a6:2a:ae:6f:b9:55:a6:ae:15:0b:ef:d7:84:c7:c0:94:aa:
         cf:ba:68:71:22:59:82:ac:d4:b2:88:95:86:1c:1d:ca:d4:31:
         59:d3:03:28:89:df:ba:bd:cc:c0:fa:7b:c9:be:35:a0:7f:cd:
         1d:f5:f3:73:22:d4:42:c9:d5:40:14:4a:09:e7:cf:56:97:cd:
         61:0b:e7:df:7b:c3:8b:83:b6:9a:12:1c:f5:d6:0c:80:9d:4c:
         d0:ed:8c:6d:00:c3:3f:46:bd:9c:fe:4b:5b:91:7d:9e:73:53:
         85:35:5f:fc:43:47:af:98:84:3e:22:a6:4a:44:de:42:6b:6b:
         24:2e:86:42:9a:07:11:9b:fc:7d:e9:6a:f2:4b:fd:87:59:99:
         12:52:c9:d9:04:b6:cd:e9:8f:61:82:57:d0:ee:db:1f:c0:fd:
         af:69:90:97:7b:40:7a:bf:84:93:9e:3b:7d:67:5d:da:cf:53:
         f6:3d:83:e7:72:9b:4a:e8:65:2b:9c:ee:8d:f0:a4:50:61:bc:
         21:92:6e:cd:9f:e8:34:0e:4e:8d:ce:fc:34:f2:14:5b:de:07:
         df:65:dc:29:93:16:4c:f5:5b:a1:d5:e7:6a:14:7a:6f:d1:c5:
         1a:66:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:10:16 2024 by rpki-client on console-fra.rpki-client.org