Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401578.roa
File:                     AS401578.roa (raw, json)
Hash identifier:          YCmtqpl9DaXCkPkccR3o3CkQzK6V61USzOBYS6/2qww=
Subject key identifier:   52:AF:02:A6:AB:94:8E:93:AB:DD:79:14:EF:E6:40:2A:B8:72:0D:EA
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       24DB134B5E22C1088177145DEF9546BCEEAF468B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401578.roa
Signing time:             Fri 31 Jan 2025 07:35:26 +0000
ROA not before:           Fri 31 Jan 2025 07:30:26 +0000
ROA not after:            Fri 30 Jan 2026 07:35:26 +0000
asID:                     401578
IP address blocks:        104.234.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:db:13:4b:5e:22:c1:08:81:77:14:5d:ef:95:46:bc:ee:af:46:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 31 07:30:26 2025 GMT
            Not After : Jan 30 07:35:26 2026 GMT
        Subject: CN=52AF02A6AB948E93ABDD7914EFE6402AB8720DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:7e:35:c3:5d:c9:09:96:0d:7f:5f:d9:77:
                    a3:14:86:a0:ff:e5:a1:92:03:6b:d7:76:48:8e:d1:
                    e2:10:15:17:05:f3:44:ac:de:19:92:44:52:5a:cb:
                    c3:92:5c:b8:c2:e5:f5:ec:4c:b3:23:20:63:20:34:
                    a0:cf:2b:80:96:be:af:ca:2f:f0:4f:14:93:32:0e:
                    5b:ad:de:4e:f2:72:7b:33:1e:48:c0:6d:b5:52:0a:
                    2d:f5:67:20:4d:90:d0:a0:45:8b:33:b1:1b:2c:5b:
                    22:b9:8d:33:9c:8d:0d:0f:0d:1c:e8:04:b9:7a:80:
                    92:7e:71:92:30:ae:95:0e:0e:24:75:63:25:b4:14:
                    63:5f:82:1d:2f:54:12:09:33:87:5e:3d:ff:bc:1d:
                    d7:98:ed:af:ea:57:b1:85:94:31:8f:b7:4e:88:5e:
                    e9:09:a7:37:8e:30:b9:3b:38:23:5c:b7:ec:88:1f:
                    59:74:fd:6a:62:bf:da:e8:9e:d1:1b:5b:27:da:e8:
                    97:bc:77:5b:25:40:40:de:08:3a:26:83:22:90:ce:
                    27:d1:a8:3b:c8:b4:af:21:31:29:33:58:3f:6e:66:
                    af:fd:9f:fe:91:a6:d5:71:15:22:e5:03:a8:fd:74:
                    85:c1:7a:fc:5f:94:46:fc:9c:55:d6:82:ce:e7:45:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:02:A6:AB:94:8E:93:AB:DD:79:14:EF:E6:40:2A:B8:72:0D:EA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401578.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:e3:1e:53:65:73:59:95:5f:2e:b0:71:8a:af:b5:58:b3:
         27:79:2f:78:e3:86:86:f7:13:80:97:7e:b3:5c:9d:6a:8f:4d:
         7e:dc:66:35:15:9e:9a:70:f8:0d:76:c5:b2:70:92:f9:fe:80:
         97:c5:b1:30:6a:90:fd:7c:ec:3b:4d:3a:a7:45:6f:57:ae:7c:
         e4:2a:5c:d9:8b:03:54:05:ca:01:32:f5:b0:5e:ac:21:d4:0f:
         f6:bc:f6:b3:b1:28:0a:ba:c0:cf:2e:f5:dc:40:a0:31:3b:46:
         f9:68:b7:f5:ed:c4:41:0f:72:b0:ad:ab:55:cd:0a:57:22:50:
         c9:31:21:9b:de:20:aa:95:b8:3f:88:05:aa:62:2e:a5:81:15:
         a9:fc:d6:fe:ec:fd:81:05:81:c8:aa:06:9f:91:25:51:3b:a6:
         97:3a:3c:c9:43:e6:c9:4e:f8:71:75:db:18:93:09:80:9f:d1:
         b0:5d:94:2e:e9:91:97:8b:fb:df:f8:ce:47:dc:72:7f:92:23:
         64:de:ad:8a:2f:d7:21:87:9c:1f:3d:20:a3:de:97:0e:d6:95:
         ed:06:ea:3b:8f:23:b1:ee:1e:db:de:dc:9c:1f:07:c1:3f:7e:
         00:33:b8:e5:74:ed:9f:bf:f6:ea:64:95:b8:c9:96:d9:b7:a5:
         55:a5:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:58 2025 by rpki-client