Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa
File:                     AS400039.roa (raw, json)
Hash identifier:          FH66H7OxEqNEX+gkH68sy/6jWI9VE2iX8JHZDVuavxY=
Subject key identifier:   29:0A:6C:5F:A9:90:99:0F:A5:7F:E2:9C:93:2B:54:FC:A8:3E:04:53
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1086235D5C5C757B85AB5E8653BDBAB262742F5E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa
Signing time:             Wed 20 Dec 2023 18:01:12 +0000
ROA not before:           Wed 20 Dec 2023 17:56:12 +0000
ROA not after:            Wed 18 Dec 2024 18:01:12 +0000
asID:                     400039
IP address blocks:        104.234.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 03:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:23:5d:5c:5c:75:7b:85:ab:5e:86:53:bd:ba:b2:62:74:2f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:12 2023 GMT
            Not After : Dec 18 18:01:12 2024 GMT
        Subject: CN=290A6C5FA990990FA57FE29C932B54FCA83E0453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:3d:e3:df:bd:dc:89:05:77:ad:61:8c:01:
                    64:c8:78:8b:fa:ba:20:15:e9:18:69:b0:08:0c:fc:
                    8b:e1:85:38:4e:b1:96:39:fe:d9:77:1a:80:78:28:
                    f2:70:21:23:f2:c5:c7:ed:04:47:89:b8:09:51:e2:
                    67:1c:fb:e1:59:60:b0:ec:76:52:e6:03:a0:75:88:
                    d0:9a:de:0d:e4:d0:40:e6:64:c7:f5:d8:b9:4a:a8:
                    80:e9:b9:84:23:1d:92:1d:04:bc:81:5d:15:dc:1e:
                    94:20:ee:89:fd:28:74:da:86:fb:38:5a:b0:9d:80:
                    32:54:f5:22:9c:67:bd:fc:88:1d:3d:73:8a:40:54:
                    74:31:f6:44:fb:b3:49:66:ba:2c:8d:d3:c0:61:c2:
                    05:e8:4f:37:27:bf:fa:2f:9b:d1:88:55:d3:a0:da:
                    f1:e8:62:29:0c:6d:8c:fe:ea:f7:21:96:e6:79:07:
                    ae:01:5c:4e:9d:59:c1:a6:42:ab:bb:e2:40:bb:1f:
                    9d:2d:3e:6f:eb:05:d8:c7:93:0d:6f:af:e5:03:30:
                    7a:ef:f9:03:d3:88:5d:b2:07:6d:5d:42:f5:06:27:
                    16:84:5a:a7:cb:fb:3b:88:90:02:05:3c:fb:e2:0a:
                    f8:a4:66:f2:fe:c7:5a:34:8e:08:25:82:18:42:80:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0A:6C:5F:A9:90:99:0F:A5:7F:E2:9C:93:2B:54:FC:A8:3E:04:53
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:01:7f:b7:25:97:63:ba:4b:bf:cf:5b:1d:84:c0:ff:f6:
         54:60:55:e0:ef:3b:38:75:84:2a:92:67:77:90:8b:b8:a9:bb:
         2b:0d:94:7f:aa:b5:24:0f:3c:b8:3e:5d:b2:63:7e:08:3f:07:
         fb:dd:1c:85:e2:5c:0e:97:05:a8:a0:62:49:2a:8e:33:64:c3:
         f7:00:bd:21:e1:af:53:e3:1c:4c:2e:f9:d9:46:b3:3c:82:f9:
         03:fc:f6:41:c4:66:fe:99:1e:46:a8:ba:b4:d5:37:f7:04:2d:
         07:6b:15:db:75:ca:f9:c4:25:75:ef:75:36:5a:d6:9e:4a:e5:
         0d:4a:db:4a:a4:11:69:20:d5:d6:2d:5e:c5:dd:f9:64:cc:7a:
         76:64:b6:f0:c7:91:aa:2a:35:55:a9:b4:2b:db:81:1e:87:06:
         09:22:18:9f:7a:54:b5:61:19:7e:ea:a4:c0:29:ba:80:da:0b:
         df:cc:1a:f3:b7:fe:b8:46:e7:d2:a2:ad:30:67:bd:55:fb:48:
         3c:7c:44:69:27:fe:be:64:f1:00:02:2f:80:6f:e2:e2:27:43:
         7a:0a:2b:78:2a:2f:9a:56:70:98:a1:86:52:ad:d5:96:ec:07:
         53:91:ea:98:e2:13:af:df:89:12:3a:4e:5c:ae:bf:eb:a4:00:
         e6:3a:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:46:51 2024 by rpki-client on console-fra.rpki-client.org