Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa
File:                     AS400228.roa (raw, json)
Hash identifier:          kkWh0YZ2jbfPZw5B9O+DdCwAryxOxbWRRnc+Q1Mzzr0=
Subject key identifier:   B8:E3:34:C4:DD:1E:07:EC:9C:80:DC:7C:0B:29:DC:DC:C6:59:69:4F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       198BBF11A1D5456EA5D764DDE4910E1897ABA7A4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa
Signing time:             Mon 16 Sep 2024 16:34:56 +0000
ROA not before:           Mon 16 Sep 2024 16:29:56 +0000
ROA not after:            Mon 15 Sep 2025 16:34:56 +0000
asID:                     400228
IP address blocks:        104.234.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8b:bf:11:a1:d5:45:6e:a5:d7:64:dd:e4:91:0e:18:97:ab:a7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 16 16:29:56 2024 GMT
            Not After : Sep 15 16:34:56 2025 GMT
        Subject: CN=B8E334C4DD1E07EC9C80DC7C0B29DCDCC659694F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:5c:17:46:5c:d7:f6:d8:11:78:e7:da:84:
                    36:ca:69:38:cd:50:df:22:c3:56:ac:27:57:d2:01:
                    01:9d:fd:35:ae:d0:7b:99:03:4b:14:39:43:4a:86:
                    bb:8a:67:f7:af:08:dc:5c:ef:4c:f8:39:86:4c:8f:
                    64:ea:0b:61:4e:5a:42:c9:e2:4e:bf:99:c9:d3:75:
                    f4:48:32:f3:bb:9a:96:e2:9d:de:e5:e9:fb:3d:ca:
                    83:05:56:b0:95:0a:44:b6:8d:8a:35:2d:8c:0e:26:
                    4f:3c:3b:b5:ae:6a:73:f4:b0:dc:e6:c4:f0:5f:a7:
                    2b:87:bf:be:8b:e1:4c:c5:8d:c6:70:4c:89:11:e7:
                    c6:b2:bc:0d:eb:4c:da:37:1d:fd:5b:a1:c0:45:45:
                    b4:f9:c0:40:b8:78:03:58:53:3d:a6:00:fe:db:dc:
                    b7:40:94:36:9f:38:15:d2:96:08:55:1a:e0:89:49:
                    2f:03:c7:22:dc:12:76:72:54:5c:ee:ed:29:b9:76:
                    f2:17:d7:0f:f3:ce:cc:a7:3f:06:a0:8c:cb:5d:ed:
                    c7:8b:d8:06:1c:da:74:84:42:73:72:c4:9c:db:8d:
                    a1:c2:dc:ff:df:3b:d4:d0:0d:3f:5b:db:79:41:23:
                    c8:bb:ab:07:d1:f6:48:2e:3c:02:36:fe:fb:7f:9e:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E3:34:C4:DD:1E:07:EC:9C:80:DC:7C:0B:29:DC:DC:C6:59:69:4F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:11:b8:c1:18:75:ff:70:97:3e:f9:5c:3f:02:dd:5e:bd:
         5d:2e:bb:07:f3:be:6f:70:b2:88:46:dc:42:be:10:2f:a2:ce:
         28:f5:d0:40:74:32:44:c1:48:b5:60:5e:46:bc:64:d6:59:33:
         99:07:78:b3:cd:94:af:4a:39:5a:c1:fd:4a:45:ab:e5:e8:c5:
         c9:2d:27:6d:19:9e:85:e9:52:00:a0:55:2b:a0:08:52:35:2c:
         77:90:df:8c:47:0f:cc:6e:96:df:03:c1:83:96:e7:7b:b3:e0:
         69:2e:14:15:ca:48:a8:e3:94:d2:bc:ca:a1:8f:8d:4a:6b:71:
         a8:0c:f9:3f:81:c1:21:b0:54:34:68:fd:cb:66:3f:40:af:28:
         51:63:08:ff:a7:d7:4f:eb:ef:bc:7e:8c:c4:32:26:39:55:17:
         fc:2e:8e:83:31:63:97:2b:f9:32:17:20:8c:74:e6:e9:f0:a1:
         96:4c:f9:ac:2e:e1:89:db:87:37:d5:e3:3e:cf:dc:f1:69:df:
         68:e1:6a:00:56:25:10:92:96:e8:c5:33:07:64:e1:3f:83:fe:
         ed:83:70:33:f3:57:e0:66:1a:0d:6a:06:de:7c:6a:7a:e0:c4:
         3e:a1:66:0a:82:ce:50:93:8e:37:01:29:51:a3:a8:5e:b7:08:
         18:1c:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org