Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          crTd6wNXWBfIVxUqHMXHV279iQlEDoXX4S/8k8j+eHQ=
Subject key identifier:   CD:06:97:EA:49:C5:5C:3F:78:BB:E3:3D:A6:B5:4D:CD:2E:AA:58:25
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3255702131FEC35306D13C292C84E18817471E3C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46450.roa
Signing time:             Tue 06 Feb 2024 00:00:06 +0000
ROA not before:           Mon 05 Feb 2024 23:55:06 +0000
ROA not after:            Tue 04 Feb 2025 00:00:06 +0000
asID:                     46450
IP address blocks:        104.234.152.0/24 maxlen: 24
                          104.234.165.0/24 maxlen: 24
                          104.234.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:55:70:21:31:fe:c3:53:06:d1:3c:29:2c:84:e1:88:17:47:1e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb  5 23:55:06 2024 GMT
            Not After : Feb  4 00:00:06 2025 GMT
        Subject: CN=CD0697EA49C55C3F78BBE33DA6B54DCD2EAA5825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:ba:48:a3:14:b1:e1:eb:af:bc:00:23:6a:
                    e4:f5:49:62:b3:19:1b:e6:f1:c8:c2:bf:dc:94:fd:
                    f2:20:14:c4:6c:5d:26:af:0b:5c:20:46:89:40:bd:
                    7f:28:81:a2:7b:74:d3:d8:7b:87:39:39:de:8a:0e:
                    e4:2a:ef:0c:b3:dd:41:0f:eb:37:1d:d6:cf:9d:e7:
                    1c:74:8f:64:44:87:ab:df:0b:d5:68:67:66:de:ee:
                    d5:ad:08:35:ea:79:9c:df:df:e0:b7:4f:aa:fd:ce:
                    1e:eb:89:1c:c5:2d:3a:55:ec:de:c9:92:31:2f:3c:
                    37:f3:5b:b7:26:e6:42:09:8e:50:b7:4e:21:a2:01:
                    59:29:e6:b3:c7:a9:89:62:29:fc:ad:ec:f4:8a:e9:
                    ea:25:88:4e:4f:e3:33:b4:40:75:87:f4:75:c0:fc:
                    7e:19:a1:55:0b:f1:60:e2:ec:3e:64:35:d6:4f:af:
                    4f:1a:72:ca:a0:62:8f:4f:38:7b:90:10:e1:e4:9c:
                    55:0b:52:bf:3f:0e:2a:e6:6c:50:8a:d7:3c:78:15:
                    2c:b0:b1:63:fc:b1:ac:2a:ad:dd:86:f5:69:ee:ae:
                    1b:f0:ff:13:4c:f7:71:67:96:89:c9:28:5a:34:40:
                    e7:1c:27:77:3e:7a:0f:67:fa:73:ff:a2:6b:ce:90:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:06:97:EA:49:C5:5C:3F:78:BB:E3:3D:A6:B5:4D:CD:2E:AA:58:25
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.152.0/24
                  104.234.165.0/24
                  104.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:30:0e:e5:84:70:67:33:3c:bb:21:be:f1:12:0d:d8:5e:c4:
         ea:50:79:04:09:d6:29:47:af:df:55:88:26:7c:e0:65:8b:90:
         92:d7:53:73:cb:d2:6e:be:76:39:28:69:fe:f4:7a:8a:e1:af:
         ea:04:28:40:52:58:90:79:66:a8:3b:62:5c:8a:2c:48:b0:bf:
         cd:e9:2b:ef:d8:76:bd:13:5c:fa:b4:7e:be:95:ba:1c:fe:66:
         6e:b7:bd:2a:30:e3:79:df:53:fb:a7:0f:db:3f:34:79:dd:ec:
         db:97:87:10:25:03:8a:a8:4f:39:4c:70:cd:45:e1:af:4b:9c:
         06:1d:f4:b7:de:86:bc:fa:ef:7f:da:41:5b:06:7c:8f:9c:ea:
         be:57:56:73:1f:28:40:74:d3:5c:78:df:08:33:c4:f8:00:e9:
         ac:1a:98:c2:47:e9:ed:91:16:9b:37:cb:3b:18:98:3b:f6:a7:
         18:a7:a2:df:89:b6:50:cb:fb:e5:27:5c:21:3a:f5:20:3f:df:
         8c:fc:9b:ec:d6:a0:15:42:90:4c:d2:36:df:97:c0:83:bb:c9:
         fa:70:3e:38:ee:24:99:3d:a7:21:63:aa:39:bf:2c:20:68:57:
         53:cd:51:6e:1c:e2:50:66:5f:c0:7b:e6:54:3b:90:c7:e5:12:
         a4:a6:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org