Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa
File:                     AS400228.roa (raw, json)
Hash identifier:          X830Bxt/wckDEgglYJ+p0Zr/7P8ICl+LRrfLOgetUew=
Subject key identifier:   C4:9F:17:06:FB:56:43:05:58:3F:0E:8B:D7:43:94:E4:2E:DF:D0:4E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7A70C83170793AC9522CBB5DDA25CD60523C1FE0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa
Signing time:             Wed 20 Dec 2023 18:01:11 +0000
ROA not before:           Wed 20 Dec 2023 17:56:11 +0000
ROA not after:            Wed 18 Dec 2024 18:01:11 +0000
asID:                     400228
IP address blocks:        104.234.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:70:c8:31:70:79:3a:c9:52:2c:bb:5d:da:25:cd:60:52:3c:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:11 2023 GMT
            Not After : Dec 18 18:01:11 2024 GMT
        Subject: CN=C49F1706FB564305583F0E8BD74394E42EDFD04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:94:23:48:dc:ee:ba:f1:98:36:d1:63:53:
                    39:3e:ec:4c:f3:f1:5d:62:ec:83:89:80:9d:19:b5:
                    5c:8d:8f:7a:bc:91:10:c5:eb:f5:53:f7:83:79:7c:
                    b6:8e:a8:46:ad:62:16:eb:8c:0c:19:c4:39:5b:e0:
                    af:89:83:5c:bd:15:48:ca:e1:ee:18:be:57:7e:73:
                    2f:b2:66:2d:ca:6b:d5:f7:42:13:59:99:dd:59:f0:
                    cf:dc:dd:85:af:15:03:f4:cf:4a:f5:0a:e4:24:02:
                    ba:94:88:d0:c7:6e:3c:5d:bc:98:57:a4:ec:8c:f0:
                    ae:fc:45:64:f7:66:94:ea:f9:0c:c2:ce:fd:cf:fc:
                    bb:17:8b:09:d9:70:b4:49:f6:37:d5:c3:3b:7a:18:
                    55:27:24:d8:e3:cb:f5:3a:61:40:23:61:4f:f3:01:
                    4e:06:da:cf:c5:1d:70:76:9f:5a:f5:19:e4:71:90:
                    0c:6d:55:52:b8:6a:c9:f2:49:a5:db:d8:f0:4f:f9:
                    af:cc:a1:69:a2:9d:c4:e8:77:31:c6:6b:48:f2:cd:
                    cf:93:cf:a7:8e:56:7d:80:e0:bb:cb:d5:b0:5f:14:
                    1e:b9:88:8c:96:9e:7b:8b:18:2b:15:ec:4b:02:39:
                    d5:52:e3:fb:53:f7:c4:ca:39:4f:d6:89:5b:b3:4e:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9F:17:06:FB:56:43:05:58:3F:0E:8B:D7:43:94:E4:2E:DF:D0:4E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:86:8f:a6:fa:8e:fd:15:b9:12:cb:c9:60:79:17:9a:97:41:
         59:fb:45:b0:c5:43:31:67:32:21:56:c8:db:20:04:24:07:d9:
         7f:21:e2:2e:63:ac:ab:58:a6:b9:fd:4a:55:7f:36:02:e5:de:
         bf:06:54:06:d8:0d:ac:4b:f0:fb:8f:b8:5d:49:c4:60:56:8a:
         20:35:0d:16:02:ea:4f:f2:c1:d8:70:63:56:20:f4:f9:a0:47:
         74:c8:46:3d:1e:99:c0:53:01:0c:eb:cf:9f:95:23:e0:71:60:
         e7:76:50:fb:07:71:2d:53:ea:23:eb:db:fe:ff:6e:3a:52:31:
         e0:dc:b7:92:51:f7:f3:09:98:04:20:db:4e:6b:91:fd:d8:95:
         3d:0b:68:01:be:58:5c:ae:57:8c:bd:a3:af:53:17:69:1c:fe:
         40:44:24:fd:c4:a4:e6:c5:a2:04:e9:41:6d:dd:8a:c0:28:e8:
         c5:0d:02:54:64:ee:df:70:13:5c:c8:6e:23:88:03:8b:75:0c:
         95:b0:98:46:02:64:f6:f0:61:92:ec:fd:ee:31:6f:95:81:f7:
         08:6d:3e:bd:c8:21:72:55:bc:a3:33:49:e8:63:ca:47:eb:8f:
         8c:c9:93:72:33:b9:cf:66:46:79:29:88:74:eb:63:cd:18:f8:
         28:fa:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org