Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46432.roa
File:                     AS46432.roa (raw, json)
Hash identifier:          W5wOYrSX/wASPewX4bTJwM7ZgnhwV0S20PkF+sYBlnk=
Subject key identifier:   56:9C:A0:8C:97:32:3A:EF:F4:B8:BC:45:E4:1B:1E:EA:5E:EF:9D:CA
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4142505EC8F84D052A3D9E6BCAFA1D8C922EF1D4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46432.roa
Signing time:             Sat 01 Mar 2025 00:02:10 +0000
ROA not before:           Fri 28 Feb 2025 23:57:10 +0000
ROA not after:            Sat 28 Feb 2026 00:02:10 +0000
asID:                     46432
IP address blocks:        104.234.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:50:5e:c8:f8:4d:05:2a:3d:9e:6b:ca:fa:1d:8c:92:2e:f1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 28 23:57:10 2025 GMT
            Not After : Feb 28 00:02:10 2026 GMT
        Subject: CN=569CA08C97323AEFF4B8BC45E41B1EEA5EEF9DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:a7:71:69:35:91:0c:4f:04:1d:2d:44:44:
                    07:61:aa:11:6f:b1:e1:b9:ef:7f:14:f3:af:56:9a:
                    cd:aa:0b:5d:71:07:66:59:69:e0:15:d2:6f:ff:14:
                    ef:21:be:eb:ed:8a:d0:8a:64:36:ab:01:72:cd:13:
                    b4:34:f7:a8:52:3a:16:e4:65:9c:74:d1:83:ac:e9:
                    39:a7:dc:e3:af:33:91:b7:2f:38:27:79:7a:34:85:
                    c5:ff:08:72:07:6e:05:87:3d:4e:0d:3e:f5:de:7b:
                    1d:7a:4f:7b:50:86:95:e8:10:89:1a:b4:c0:7c:7a:
                    ca:4d:69:0c:51:ce:e1:b9:6f:d0:72:f8:56:d1:d2:
                    ba:01:96:a2:80:c7:d2:14:e2:1d:86:f7:4b:b2:1d:
                    fa:63:e6:72:64:85:c7:30:6e:20:7a:3d:d4:98:ec:
                    48:e0:c0:99:c8:b0:03:33:ff:91:c2:3e:05:31:0c:
                    17:c0:e8:52:32:8a:17:b6:c5:c5:14:38:f4:1b:b0:
                    d2:5f:71:a0:2e:52:a4:aa:ad:7c:bd:29:16:7b:d3:
                    de:e1:fb:17:e7:33:41:21:4c:de:29:84:b9:68:f3:
                    d6:0c:85:e0:4b:3f:09:c1:4a:22:83:09:c9:45:b7:
                    ea:66:4f:3c:8a:0e:20:89:70:33:96:5e:5a:09:f4:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9C:A0:8C:97:32:3A:EF:F4:B8:BC:45:E4:1B:1E:EA:5E:EF:9D:CA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:83:db:f6:f4:0b:7b:3f:80:87:d2:fb:50:66:df:2a:32:4f:
         f3:11:c5:8c:63:4b:cd:65:84:35:66:22:9c:6b:f5:81:a5:c3:
         25:de:95:ff:fc:02:da:00:99:ca:76:40:32:b4:f5:51:93:bd:
         a2:26:ef:cc:25:cf:98:ab:b8:b1:6d:cf:37:03:e1:19:3c:e4:
         be:f3:c1:b3:bf:a5:4a:7d:37:0c:3c:3d:82:1b:16:0b:d4:b4:
         6c:1c:1a:1c:2a:a3:50:85:6d:a1:5b:fd:d1:6f:e3:90:86:4f:
         68:f6:48:77:f3:e7:3e:96:98:bf:d2:6a:6c:02:37:4a:da:7e:
         db:b8:14:8c:62:73:0c:db:f3:9f:b2:a6:5a:02:90:ad:36:23:
         1b:07:e0:c7:23:7b:94:13:dc:06:64:4b:d3:69:5e:90:89:07:
         9b:8a:cc:a6:f9:e6:2e:27:33:bc:06:79:f0:b0:ab:2c:07:87:
         cb:f2:7c:48:29:b2:40:e1:48:dd:2f:57:6d:aa:b5:78:ed:dc:
         88:4e:76:03:9c:71:08:9f:03:94:45:28:59:82:1f:5b:d0:22:
         66:05:6f:98:fe:48:c3:a5:2f:fb:8d:da:eb:aa:c7:e7:07:50:
         b9:6c:c9:9d:ee:a6:f6:f0:7a:25:18:41:6d:95:ba:db:97:aa:
         67:d6:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:57 2025 by rpki-client