Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa
File:                     AS401104.roa (raw, json)
Hash identifier:          Z7yrfh2ZGKpnapXcI7GtOviRq6H9ncZ/ka2xX27EWao=
Subject key identifier:   96:D6:B1:2F:74:FD:22:1A:25:66:A8:6F:55:AC:4A:E3:47:E3:D3:1A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       01AC76A35BAE60E0D2582C5896B65B4B6CE3869A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa
Signing time:             Wed 17 Jul 2024 22:03:13 +0000
ROA not before:           Wed 17 Jul 2024 21:58:13 +0000
ROA not after:            Wed 16 Jul 2025 22:03:13 +0000
asID:                     401104
IP address blocks:        104.234.208.0/24 maxlen: 24
                          104.234.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 23:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:76:a3:5b:ae:60:e0:d2:58:2c:58:96:b6:5b:4b:6c:e3:86:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 17 21:58:13 2024 GMT
            Not After : Jul 16 22:03:13 2025 GMT
        Subject: CN=96D6B12F74FD221A2566A86F55AC4AE347E3D31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:e6:33:6d:a4:a2:e9:2e:ba:8a:87:6a:fb:
                    10:c0:63:0f:0b:35:a2:22:f3:7a:13:aa:67:10:66:
                    1b:67:a8:e4:d2:5c:9b:96:ce:5a:d3:00:15:7e:93:
                    c6:91:16:39:81:24:6d:67:b4:7f:67:1f:b1:2c:eb:
                    53:db:9d:3c:33:09:9d:86:7f:c6:db:94:c5:ad:35:
                    61:08:fd:1f:93:75:f5:36:2a:a4:a0:ed:aa:65:93:
                    20:5e:4a:86:98:a9:81:de:7a:33:d6:7b:40:4f:7a:
                    d3:d9:fe:58:19:e8:9e:76:69:94:06:37:e0:2c:90:
                    dd:b1:b1:65:40:e4:51:17:2e:7e:45:f4:0b:d9:92:
                    01:75:87:e8:ea:bf:33:40:3a:c1:be:8c:26:1f:50:
                    e5:57:42:ae:66:98:c3:1b:fb:70:d3:5e:af:bb:d4:
                    1e:9c:e5:03:98:22:50:88:17:8c:5a:86:91:e4:bc:
                    61:7e:9d:24:6f:cc:ad:e2:b2:7f:1f:1f:77:f8:b6:
                    38:32:48:44:e1:4e:f9:d5:8b:ee:52:94:94:92:11:
                    ad:5d:81:db:7c:e9:dc:97:e0:32:1d:10:bd:b6:de:
                    1c:2e:b4:37:a0:eb:0b:73:e1:cb:1f:68:30:80:eb:
                    9d:28:b3:d5:0a:5d:a7:bf:96:25:0b:bc:27:84:e2:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D6:B1:2F:74:FD:22:1A:25:66:A8:6F:55:AC:4A:E3:47:E3:D3:1A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:0a:6f:8f:b3:55:f7:33:c7:c6:10:de:17:8d:94:87:11:9f:
         26:f9:6b:99:29:b2:70:2b:41:50:cb:d0:aa:c2:17:16:85:a7:
         13:88:d8:2d:ca:44:b7:50:65:c4:6a:6d:3c:ee:9b:a3:d6:e2:
         80:6a:72:da:4e:ea:b2:c9:a0:46:ed:72:44:b5:64:b9:5a:d6:
         25:16:09:73:d3:7b:f8:1e:01:8b:14:2c:b8:f8:11:33:cf:f7:
         9c:36:d4:48:b7:d7:54:1b:0c:6c:66:a3:94:14:e0:f7:34:90:
         43:34:e0:b7:10:1b:3f:eb:1e:30:61:c9:ce:28:8f:1c:cd:59:
         41:bf:3c:9b:f4:b1:24:d5:84:bd:92:95:31:46:7a:01:ba:92:
         81:30:ac:3f:00:b4:9b:e6:0a:5a:36:96:d5:ab:9a:0b:f7:25:
         55:fa:be:11:32:69:95:99:38:d4:2e:ab:6b:0e:49:0b:d6:c4:
         bb:69:df:2f:3c:f5:b5:63:95:dd:73:9e:b3:c3:3c:a9:91:3c:
         62:f4:c3:3a:c6:d2:c7:10:cf:5d:b9:9d:a1:91:b6:8e:09:01:
         90:ff:d7:21:89:50:05:14:ad:cf:97:ab:06:af:d7:2f:26:00:
         6b:89:ce:5d:16:fb:05:12:a0:05:cb:9d:87:37:7d:f0:d1:f9:
         61:88:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:33:36 2024 by rpki-client on console-fra.rpki-client.org