Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399646.roa
File:                     AS399646.roa (raw, json)
Hash identifier:          kc2gmts2nGi0mvPMKNDJT82cf3zqBXFAfU1gixqInD4=
Subject key identifier:   DD:42:70:37:C2:80:DA:EE:65:34:63:10:4E:A7:0C:AB:A8:D6:79:9A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       33C819BD930AEFF004025188573519E63CF69926
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399646.roa
Signing time:             Mon 08 Apr 2024 16:03:23 +0000
ROA not before:           Mon 08 Apr 2024 15:58:23 +0000
ROA not after:            Mon 07 Apr 2025 16:03:23 +0000
asID:                     399646
IP address blocks:        104.234.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c8:19:bd:93:0a:ef:f0:04:02:51:88:57:35:19:e6:3c:f6:99:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  8 15:58:23 2024 GMT
            Not After : Apr  7 16:03:23 2025 GMT
        Subject: CN=DD427037C280DAEE653463104EA70CABA8D6799A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:ca:13:c3:65:0c:23:f5:cf:20:c4:84:d3:
                    7f:cc:8f:e8:4b:50:0c:fb:89:71:67:c8:58:e2:ae:
                    aa:53:c9:bd:67:2d:3a:af:a3:a1:5c:4d:29:33:33:
                    55:c8:1e:03:97:5c:87:d9:83:09:b6:ef:b8:8e:9e:
                    8d:ba:1d:fd:49:c2:36:c1:5e:59:23:f3:4c:1c:bb:
                    5b:57:df:93:8b:c0:3d:72:82:5c:01:bb:c5:42:07:
                    29:ca:8f:22:b3:d2:7a:05:f7:c7:60:66:b0:b3:af:
                    7b:57:b4:4e:59:f0:0a:e0:09:29:79:fa:49:63:80:
                    05:0a:76:3a:29:96:20:13:95:60:8a:61:21:fd:cf:
                    bf:8e:65:b2:e8:4f:76:4d:4a:52:2a:b2:ae:ea:a5:
                    c2:69:27:95:12:e3:d2:74:09:f4:c3:91:9d:65:d3:
                    00:ac:f8:04:97:81:46:bb:57:fb:61:e2:f5:46:11:
                    22:9a:bf:51:70:df:a1:cd:fe:c6:2f:85:87:77:73:
                    dd:3e:f4:e5:e7:64:45:89:7a:cc:2a:56:6c:80:6c:
                    c1:48:c0:82:d8:c7:be:9f:d4:06:ea:61:42:33:c7:
                    c8:33:49:24:de:38:42:40:bc:7e:e8:f5:98:c3:00:
                    c7:86:19:cf:6a:cb:e1:99:44:55:e1:0e:28:fb:fa:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:70:37:C2:80:DA:EE:65:34:63:10:4E:A7:0C:AB:A8:D6:79:9A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399646.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:19:13:09:67:ba:c6:7d:71:34:e6:3b:d8:1c:b5:85:e3:60:
         99:2f:cc:83:28:00:e7:b6:ab:61:62:60:18:f1:cb:8a:fa:a7:
         0c:aa:73:6a:e2:68:89:a2:4c:16:9f:c7:0a:65:a9:96:ff:5b:
         62:16:f5:15:eb:ad:10:cd:ee:91:f0:33:9f:c3:43:ea:da:fc:
         17:5d:84:eb:6a:66:8a:67:d6:0a:15:7e:28:40:a5:8d:99:c6:
         ce:aa:91:0c:90:d4:7f:82:a1:83:be:e7:6e:48:a4:93:ca:bf:
         e6:43:7f:71:a9:cb:4a:36:6d:e6:b4:77:52:c9:ea:90:1d:9f:
         10:ba:b0:62:54:f8:17:78:2f:58:39:d0:68:e8:3a:0e:36:af:
         aa:2d:4f:04:96:b0:bf:7b:5d:a5:ba:fe:88:6f:36:3f:e2:db:
         5d:7f:3a:c2:5c:14:7e:21:90:31:36:ac:ab:dc:2b:0e:14:1c:
         e1:c5:aa:89:9d:c9:fc:e0:f8:02:d3:14:aa:99:47:94:54:14:
         0c:58:bc:cd:18:41:20:8b:0d:e3:da:86:6d:68:2b:df:8a:43:
         72:18:1b:07:c1:66:49:6f:f4:d3:f9:a5:f7:94:f5:c7:bf:c4:
         56:63:ba:e3:45:f0:1a:2e:ce:97:24:65:cb:f1:85:18:ba:df:
         9a:4d:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:31 2024 by rpki-client on console-fra.rpki-client.org