Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400618.roa
File:                     AS400618.roa (raw, json)
Hash identifier:          PUHtwkdMTYGkfvMJ22QS1xOMk1wKyOjrmq7NO3tEdgs=
Subject key identifier:   7A:77:6F:B5:36:FC:AD:D9:E0:EF:03:85:4D:F3:44:C8:1C:D4:4A:51
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0A2D19F2629BE7A4A874716D50EFC2ECC4069D09
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400618.roa
Signing time:             Thu 16 Jan 2025 03:35:16 +0000
ROA not before:           Thu 16 Jan 2025 03:30:16 +0000
ROA not after:            Thu 15 Jan 2026 03:35:16 +0000
asID:                     400618
IP address blocks:        104.234.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:19:f2:62:9b:e7:a4:a8:74:71:6d:50:ef:c2:ec:c4:06:9d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 16 03:30:16 2025 GMT
            Not After : Jan 15 03:35:16 2026 GMT
        Subject: CN=7A776FB536FCADD9E0EF03854DF344C81CD44A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:15:0b:cb:8e:43:74:9a:6f:a7:df:1e:2a:
                    a7:81:76:52:b2:c1:35:52:f5:7b:ee:d0:17:11:23:
                    2e:c8:fe:a9:a5:47:ff:62:09:82:de:3d:79:61:24:
                    af:a4:2a:ed:9f:72:fb:60:28:12:ed:cd:0e:70:e2:
                    c6:49:a4:5c:c9:65:c3:3d:f6:db:13:8e:90:e3:63:
                    e8:dd:ec:33:9e:f1:82:10:14:cd:d4:9e:07:6c:82:
                    e4:c5:24:02:f6:40:04:8d:1c:11:26:54:2d:85:38:
                    46:1b:a9:81:90:43:6e:96:2d:f7:40:33:e9:28:48:
                    e7:39:10:bd:57:3b:8d:87:ba:9c:e3:0c:87:4d:a2:
                    6b:1e:37:43:ff:ad:71:80:73:60:f8:02:11:b2:4d:
                    02:2a:c4:de:60:25:53:73:6d:1b:d8:36:7e:57:80:
                    6c:bf:f1:bc:68:fb:c8:2a:f6:89:e0:93:64:7b:f5:
                    f6:f9:5f:b2:b6:bc:ba:70:cb:a5:aa:6c:18:8a:b3:
                    9f:08:84:54:67:28:49:65:e6:49:10:e3:3b:14:60:
                    79:fc:73:c2:ba:21:c3:7c:37:75:a8:a9:76:1a:75:
                    e3:14:61:61:99:d9:12:78:4b:b4:30:5d:52:ad:77:
                    e3:22:0d:57:2c:bc:9b:53:19:c6:50:60:ff:17:37:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:6F:B5:36:FC:AD:D9:E0:EF:03:85:4D:F3:44:C8:1C:D4:4A:51
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:e8:e0:29:05:a3:17:a1:a2:5e:7f:14:0b:11:8e:f6:1c:
         86:aa:57:ed:9e:4e:e1:60:94:07:6e:0f:c0:1b:12:e6:85:62:
         78:78:50:f2:56:e5:af:b6:6d:f9:c4:2c:ff:7e:fc:5d:02:ea:
         3d:a2:d9:c0:e6:04:23:7a:1d:58:11:3f:53:9c:e8:75:b0:a4:
         d2:2a:cd:9a:b9:43:b6:9d:d5:06:5f:14:0f:19:63:cc:47:0c:
         37:71:b4:c2:de:8a:7b:b5:3d:68:9f:01:d0:37:3d:cc:64:87:
         26:63:d2:55:0c:41:69:aa:00:91:49:91:8c:63:9c:f8:c4:d6:
         d6:38:98:93:16:9c:17:2b:67:c1:1d:86:6c:78:ff:03:6f:1c:
         42:b1:d6:68:74:e1:9e:1e:2e:bb:c6:0c:87:44:6a:9c:0e:3b:
         e5:17:e9:d3:37:c2:b7:15:4d:27:93:8a:8a:dc:f5:2a:86:77:
         2d:ed:33:bb:6c:74:a0:25:68:90:ea:ec:10:32:e3:23:00:f6:
         81:be:0f:66:31:61:32:f5:6e:ae:84:50:97:ea:f6:cd:13:7b:
         c7:23:56:62:fb:44:41:ad:8e:39:69:52:32:7b:98:0e:1a:43:
         d0:95:6a:31:12:b9:75:ed:ab:c9:9b:4e:7a:ed:3a:24:cc:c5:
         ae:e4:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:50:22 2025 by rpki-client