Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400304.roa
File:                     AS400304.roa (raw, json)
Hash identifier:          6VonUJS3tzUZ9xjMrwJD0fhpSsVkTPglp4bIeuQ0GfA=
Subject key identifier:   D9:C9:68:F7:3D:9B:6C:75:9A:D1:98:7D:26:B9:A5:0B:19:E1:43:12
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       77D1BB3BC6FB4762476CB5F2AACFCF7819CFB91D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400304.roa
Signing time:             Wed 04 Sep 2024 14:55:00 +0000
ROA not before:           Wed 04 Sep 2024 14:50:00 +0000
ROA not after:            Wed 03 Sep 2025 14:55:00 +0000
asID:                     400304
IP address blocks:        104.234.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d1:bb:3b:c6:fb:47:62:47:6c:b5:f2:aa:cf:cf:78:19:cf:b9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  4 14:50:00 2024 GMT
            Not After : Sep  3 14:55:00 2025 GMT
        Subject: CN=D9C968F73D9B6C759AD1987D26B9A50B19E14312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:58:a8:db:c1:79:6b:cd:ad:49:8e:8f:df:
                    20:a9:9b:83:72:c7:ca:09:94:fe:71:32:e3:51:1e:
                    de:19:e3:3c:85:05:f9:b8:e8:ce:69:ae:47:32:5f:
                    8e:09:6c:f6:6c:da:2d:ab:6b:5e:ae:48:2e:1d:b9:
                    f9:8a:ed:6e:7d:ed:77:91:28:d7:66:4f:b4:a5:10:
                    47:79:f6:4c:81:aa:80:05:15:23:a7:b7:9a:d1:ce:
                    6e:47:94:75:d1:c5:38:d1:d0:fe:ae:64:53:fe:49:
                    a2:33:8d:48:8e:8b:25:20:af:e4:f6:e5:5a:38:44:
                    b1:00:0d:51:ed:40:b9:32:b9:e1:7b:98:8b:41:28:
                    d5:65:3d:96:1d:7f:2f:f4:5a:81:65:ad:89:1b:3a:
                    1d:0a:2d:92:e7:c6:a7:0e:a0:6e:39:fa:86:22:92:
                    1c:e2:e7:a7:7b:e1:9f:17:65:71:01:2f:68:3e:ca:
                    92:27:8f:e0:16:ea:d3:bb:62:e9:07:d6:ac:06:b3:
                    bc:13:7a:9f:b1:1b:96:9d:13:ea:c1:79:18:ea:2f:
                    bf:3d:49:16:36:ac:6f:57:a0:46:cd:48:9b:90:31:
                    a6:62:b0:e8:41:53:04:6a:9b:50:ce:28:4f:02:82:
                    2a:c5:92:75:a9:c0:aa:e3:77:4a:2e:b4:ce:c7:58:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C9:68:F7:3D:9B:6C:75:9A:D1:98:7D:26:B9:A5:0B:19:E1:43:12
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:9e:9d:a8:03:6b:6e:66:81:85:38:56:64:a7:e6:4a:de:
         f0:0e:57:20:4f:43:86:5e:bc:09:ec:f6:29:7b:06:33:32:38:
         2e:ba:04:36:e3:54:b9:97:4c:f2:3a:b7:da:ce:bc:9b:03:00:
         f9:6e:16:96:13:22:09:d7:57:47:a7:3a:91:aa:5d:8d:8b:65:
         27:f6:b1:25:df:3f:71:1f:d8:eb:0d:85:3b:72:02:f0:77:71:
         1c:d5:1b:71:8e:bb:d8:dd:b3:25:33:97:ad:0c:d6:24:80:c5:
         28:52:b6:8a:38:70:cf:bf:e2:f0:91:2c:1f:51:8d:4a:85:9d:
         93:a0:2b:0d:06:f4:78:99:51:03:24:0e:07:ba:b1:82:39:1a:
         3f:9a:ae:2b:73:65:9a:ba:f5:e6:ce:43:71:bc:96:e3:0b:e4:
         b9:0b:c3:17:4a:c9:c3:34:38:90:48:3d:0f:5e:26:76:11:22:
         43:07:19:21:2f:8d:9b:58:7b:7e:22:de:76:e5:fe:0b:db:56:
         73:bc:33:82:df:5d:aa:22:bc:2f:b3:6b:f1:e2:2d:ca:3d:95:
         d7:4d:aa:21:c8:8a:d3:d4:10:87:70:b5:52:45:2a:d6:01:d0:
         60:69:0f:13:f0:7f:7d:1a:cd:25:d4:b2:da:9f:30:e4:45:61:
         d3:58:aa:ff
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUd9G7O8b7R2JHbLXyqs/PeBnPuR0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwOTA0MTQ1MDAwWhcNMjUwOTAzMTQ1NTAw
WjAzMTEwLwYDVQQDEyhEOUM5NjhGNzNEOUI2Qzc1OUFEMTk4N0QyNkI5QTUwQjE5
RTE0MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueRYqNvBeWvN
rUmOj98gqZuDcsfKCZT+cTLjUR7eGeM8hQX5uOjOaa5HMl+OCWz2bNotq2terkgu
Hbn5iu1ufe13kSjXZk+0pRBHefZMgaqABRUjp7ea0c5uR5R10cU40dD+rmRT/kmi
M41IjoslIK/k9uVaOESxAA1R7UC5Mrnhe5iLQSjVZT2WHX8v9FqBZa2JGzodCi2S
58anDqBuOfqGIpIc4uene+GfF2VxAS9oPsqSJ4/gFurTu2LpB9asBrO8E3qfsRuW
nRPqwXkY6i+/PUkWNqxvV6BGzUibkDGmYrDoQVMEaptQzihPAoIqxZJ1qcCq43dK
LrTOx1hzpwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNnJaPc9m2x1mtGYfSa5pQsZ
4UMSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQwMDMwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqGjANBgkqhkiG9w0BAQsFAAOC
AQEAqHqenagDa25mgYU4VmSn5kre8A5XIE9Dhl68Cez2KXsGMzI4LroENuNUuZdM
8jq32s68mwMA+W4WlhMiCddXR6c6kapdjYtlJ/axJd8/cR/Y6w2FO3IC8HdxHNUb
cY672N2zJTOXrQzWJIDFKFK2ijhwz7/i8JEsH1GNSoWdk6ArDQb0eJlRAyQOB7qx
gjkaP5quK3Nlmrr15s5DcbyW4wvkuQvDF0rJwzQ4kEg9D14mdhEiQwcZIS+Nm1h7
fiLeduX+C9tWc7wzgt9dqiK8L7Nr8eItyj2V102qIciK09QQh3C1UkUq1gHQYGkP
E/B/fRrNJdSy2p8w5EVh01iq/w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org