Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46432.roa
File:                     AS46432.roa (raw, json)
Hash identifier:          UqrOaAVpedScDod4olBYTtDttlH0VUVWEIcBMFk5yx0=
Subject key identifier:   FC:17:83:1C:12:5C:BE:B4:03:19:DE:06:A8:5E:C2:F8:DE:67:78:03
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6609CF5504EDED9E73D1FD1B8393FBEEACBCBA72
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46432.roa
Signing time:             Thu 01 Aug 2024 02:47:19 +0000
ROA not before:           Thu 01 Aug 2024 02:42:19 +0000
ROA not after:            Thu 31 Jul 2025 02:47:19 +0000
asID:                     46432
IP address blocks:        104.234.19.0/24 maxlen: 24
                          104.234.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:09:cf:55:04:ed:ed:9e:73:d1:fd:1b:83:93:fb:ee:ac:bc:ba:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  1 02:42:19 2024 GMT
            Not After : Jul 31 02:47:19 2025 GMT
        Subject: CN=FC17831C125CBEB40319DE06A85EC2F8DE677803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:dd:f3:24:22:0c:61:d6:3b:5e:ff:eb:0d:
                    a0:ee:26:00:d2:4a:74:a5:b6:97:c1:81:38:eb:6d:
                    da:50:1e:16:9e:cb:85:e0:26:56:0f:e5:ff:c0:7d:
                    f4:06:d4:56:c0:e8:43:17:ce:3d:04:63:3a:69:40:
                    de:f0:84:90:1e:7a:4e:2f:88:e1:09:c3:b8:cb:81:
                    97:79:26:72:4c:c1:20:8f:b9:a7:3d:53:83:e1:0d:
                    a4:9e:6b:69:8a:14:ac:ab:61:ab:c5:cd:fe:40:af:
                    b9:fa:47:51:74:e2:d3:02:6b:17:3b:ea:57:d3:6d:
                    6f:e9:c1:34:aa:9f:fe:71:c0:da:2b:d5:d9:83:0d:
                    15:61:f6:45:04:72:99:3e:7d:82:23:30:f5:2c:6a:
                    73:4c:ff:21:f1:ef:67:a3:c9:8d:b7:27:1b:b7:a2:
                    eb:0e:b1:28:17:c0:7c:bb:86:d8:50:ab:84:6b:77:
                    c9:31:b8:b5:f7:62:7e:f3:76:bc:97:19:4e:ae:81:
                    be:6f:c9:48:37:00:f2:cf:03:c5:5b:08:99:e5:6a:
                    0a:aa:bb:b8:fa:48:0e:1f:3a:42:52:e1:b6:4c:52:
                    28:e6:2f:23:0c:59:4f:74:8c:d2:a0:87:d4:c3:07:
                    8a:c1:22:d4:ee:d5:7b:b1:16:2a:6e:41:13:58:08:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:83:1C:12:5C:BE:B4:03:19:DE:06:A8:5E:C2:F8:DE:67:78:03
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.19.0/24
                  104.234.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:34:46:48:17:8e:46:53:9c:1d:26:bb:43:27:86:99:f2:93:
         f8:fa:ed:2b:89:df:95:78:5d:0a:ec:8f:89:c6:59:ea:8e:f2:
         44:83:d0:03:8f:79:80:8b:fc:e8:d7:4e:a3:b5:13:f8:81:41:
         ac:9c:29:6c:68:c3:fe:dc:7b:0c:b1:8f:85:aa:fb:22:80:04:
         5e:81:ac:d2:33:5d:8d:d5:5e:02:fd:e5:45:2e:15:e6:40:67:
         3a:5b:26:36:fa:02:bb:70:50:ce:49:0c:fc:a1:b6:bd:a6:7e:
         53:e9:c1:b4:2e:65:fd:71:75:35:b6:fd:27:9e:0d:b9:3a:f0:
         07:5b:cd:91:25:62:de:fa:35:59:76:38:95:44:63:d5:cb:c9:
         6e:75:54:0d:1e:fe:96:8e:2f:0d:73:5a:89:9f:2d:e1:b4:3c:
         77:a1:df:d6:a5:de:6a:4d:8b:e1:ea:ec:37:ba:ad:e7:28:0c:
         6d:2e:60:59:aa:71:33:d6:3e:0e:d4:e6:9e:35:14:07:fa:fc:
         4d:d5:c3:ff:cc:69:55:73:1b:b2:bd:53:91:f5:7e:a2:4e:95:
         2e:f9:35:b7:88:a3:38:04:df:75:f8:3e:f4:92:ff:40:66:71:
         38:7d:c3:c1:24:67:9d:0f:42:af:da:3e:b1:e3:42:83:1e:b8:
         f6:97:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:16:14 2024 by rpki-client on console-ams.rpki-client.org