Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46261.roa
File:                     AS46261.roa (raw, json)
Hash identifier:          7Zaj/7HTQbNFyYOE/u2Ux19eCPFgxaLy15CXejQHEWc=
Subject key identifier:   73:C5:5A:A7:94:C4:F1:82:4B:35:D3:BF:CB:04:2D:0A:68:B5:81:8A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5D6D79E62E364A5B963B4D335A746ACAF874FFCD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46261.roa
Signing time:             Mon 16 Dec 2024 10:28:23 +0000
ROA not before:           Mon 16 Dec 2024 10:23:23 +0000
ROA not after:            Mon 15 Dec 2025 10:28:23 +0000
asID:                     46261
IP address blocks:        104.234.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6d:79:e6:2e:36:4a:5b:96:3b:4d:33:5a:74:6a:ca:f8:74:ff:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 16 10:23:23 2024 GMT
            Not After : Dec 15 10:28:23 2025 GMT
        Subject: CN=73C55AA794C4F1824B35D3BFCB042D0A68B5818A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:28:12:27:cf:20:37:84:54:77:7f:fa:d4:ef:
                    33:c8:6a:ff:51:96:a3:a2:2a:35:db:74:1f:0b:6b:
                    c5:a6:dc:24:85:d6:71:37:6c:72:98:e6:47:ff:84:
                    f4:6e:7a:e7:24:df:86:5b:ec:ae:63:80:a2:aa:51:
                    1f:ce:bf:6d:a7:df:c0:3f:d3:ce:83:8c:fd:8d:fa:
                    12:c4:f2:24:74:23:f6:c4:63:c2:df:3e:53:23:b7:
                    fc:2b:8d:ab:6b:b3:a2:1a:b6:ec:68:6f:a7:b3:ed:
                    db:ee:17:68:a2:64:99:dd:f2:38:da:f3:c6:1d:fe:
                    ad:f4:85:bb:6d:74:a4:1e:9f:a4:88:7f:a4:39:a6:
                    30:5f:30:95:90:3a:9f:a6:42:92:3a:f3:5c:5d:60:
                    77:4d:06:6a:68:3f:f7:54:58:69:99:7b:30:90:ae:
                    14:84:4b:85:e0:c9:3d:41:1b:8c:bb:c3:81:56:69:
                    21:a7:31:78:b7:45:d5:72:d7:24:90:62:48:f5:95:
                    c7:85:92:f7:1d:3d:53:49:e3:8d:75:20:18:d0:6c:
                    b6:fd:7e:48:b6:57:db:ab:98:64:fd:fd:a7:79:c8:
                    40:34:e9:3a:22:5e:36:3c:dd:39:32:6a:e1:fc:12:
                    0a:c0:52:50:2c:fa:f7:be:67:ad:c4:d6:f9:82:40:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:5A:A7:94:C4:F1:82:4B:35:D3:BF:CB:04:2D:0A:68:B5:81:8A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46261.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:4f:46:e9:33:de:cc:e6:8b:fa:4c:28:b2:a0:a7:88:f2:9c:
         db:e9:d3:ea:a6:79:d9:ed:62:91:23:72:19:60:c8:08:ab:37:
         1c:df:b9:16:57:ab:b8:54:93:75:80:a1:a8:8a:12:78:01:6e:
         e5:89:13:8d:ab:11:ce:3a:38:37:1c:e7:2c:28:9a:4e:07:ed:
         a5:43:b5:8a:9f:cc:62:bd:f8:1f:d7:2a:0b:3e:a2:16:18:e6:
         3c:1f:01:90:8d:72:c2:93:c9:cb:88:f1:e5:1a:05:4a:8c:5c:
         77:7d:92:cb:89:c7:b6:5e:98:d2:ee:f4:07:b4:14:40:e0:38:
         40:9d:2d:10:8a:8d:96:6f:ad:8b:4d:34:8b:a8:db:6f:52:c2:
         8d:98:c5:e0:ca:21:f0:58:b5:c9:4a:fa:54:7b:9b:76:2e:c3:
         f8:c3:e7:5a:a8:59:d4:c8:4e:2f:cb:f2:93:a6:5f:05:ed:d0:
         1c:12:72:38:78:4a:41:5c:e8:f2:c2:71:79:d3:1e:97:70:13:
         b1:f0:4f:20:06:c3:93:1f:ff:78:b9:ff:dc:c4:8c:85:c2:0f:
         86:c2:ea:dc:d7:0d:97:6f:ce:b8:f5:f3:c0:12:52:3b:68:44:
         d9:3e:bc:cf:81:3f:c4:48:13:4f:2b:75:89:63:4e:cc:92:e9:
         38:ee:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:29 2025 by rpki-client