Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
File:                     AS400529.roa (raw, json)
Hash identifier:          BY2VVu0NV0Ba7AVBjHLVGgzgsAQl6p40TQWXEphF2Ug=
Subject key identifier:   83:49:F3:A1:BB:DC:6E:02:5B:EB:A0:70:55:54:5C:65:46:07:D6:45
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1E4BD9E397C75E63C88768C19DED4487FB3B1975
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
Signing time:             Wed 20 Dec 2023 18:01:11 +0000
ROA not before:           Wed 20 Dec 2023 17:56:11 +0000
ROA not after:            Wed 18 Dec 2024 18:01:11 +0000
asID:                     400529
IP address blocks:        104.234.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4b:d9:e3:97:c7:5e:63:c8:87:68:c1:9d:ed:44:87:fb:3b:19:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:11 2023 GMT
            Not After : Dec 18 18:01:11 2024 GMT
        Subject: CN=8349F3A1BBDC6E025BEBA07055545C654607D645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:e4:36:ed:60:1b:0b:1e:92:76:d0:93:12:
                    48:74:b5:68:b3:33:e0:a1:10:41:28:8b:3c:12:99:
                    3a:05:9b:6d:b8:c4:6a:b2:02:c8:5d:73:73:3a:bf:
                    4c:9f:72:3c:f0:47:71:99:87:f8:5f:6e:bc:37:51:
                    a3:ee:be:0e:9f:bc:78:f0:4e:30:14:f6:d1:42:b5:
                    7c:c2:81:d9:64:97:18:d1:0d:3e:d4:0e:fd:72:6e:
                    e2:10:d7:d2:c3:cd:72:20:06:fa:b5:d7:10:7f:95:
                    24:14:c1:a4:66:c3:31:29:25:b6:b6:39:46:a5:89:
                    41:73:66:ba:be:89:9e:f9:57:72:9d:19:17:4f:02:
                    c9:db:51:7d:4f:d8:28:0a:10:55:8b:ba:1c:83:f8:
                    a8:b0:75:52:33:df:97:11:1d:45:d3:ba:7d:b7:06:
                    64:50:38:a3:25:17:3e:9e:da:ad:74:43:84:97:62:
                    1b:7b:31:4c:de:3d:66:a4:8d:85:49:f3:ac:c0:ed:
                    12:1b:21:77:f2:52:e8:ec:6c:e3:57:3d:fc:a8:2b:
                    95:ca:ba:34:bd:cb:d9:aa:fe:27:9e:ef:d5:81:c5:
                    e0:ba:30:93:86:90:03:a1:f1:c6:e5:80:51:5b:ae:
                    70:a9:73:52:3c:28:3e:7c:a2:ec:53:c2:b4:13:6f:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:49:F3:A1:BB:DC:6E:02:5B:EB:A0:70:55:54:5C:65:46:07:D6:45
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:33:c3:06:ad:c8:06:7a:07:42:a1:cd:b6:1b:dc:d0:fc:f4:
         44:7e:fd:49:e5:d1:f8:02:1f:c1:40:bd:79:ec:5c:29:51:09:
         1c:42:a0:39:6b:5f:ee:80:b8:39:fa:6a:62:eb:b0:8f:9b:76:
         9b:ac:ac:35:da:fa:a5:48:1c:e4:1b:40:f7:e3:aa:f7:6a:9b:
         3d:ff:86:30:d9:f0:9a:83:e3:00:e6:e6:24:9c:6d:aa:bc:5b:
         23:df:e5:b4:bf:c5:af:a8:8d:62:53:ef:1a:a3:bf:24:61:9e:
         eb:ad:fa:a8:8d:81:14:75:03:6d:d3:32:96:df:f5:f8:f0:05:
         66:db:7d:3b:7d:67:78:cd:fa:5b:03:79:8d:cf:95:02:c7:c7:
         9d:8a:45:58:76:f8:c9:e2:dd:de:b3:0c:70:a6:d1:17:2c:0b:
         ba:85:f9:2c:14:58:32:f3:bb:69:5d:e7:a8:f9:d3:31:f6:91:
         3b:e7:af:f4:08:c6:da:61:cf:67:3b:03:9f:42:96:74:ef:5e:
         1e:be:5b:39:ed:b7:2e:4b:96:af:b5:7a:0e:da:f8:cd:a8:5a:
         2a:79:42:6d:49:0e:a5:fa:26:22:be:53:85:68:54:e3:77:e4:
         b8:7f:2b:d7:7e:05:16:06:16:d8:d7:c4:2d:fc:de:d7:6d:0f:
         63:05:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org