Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
File:                     AS48925.roa (raw, json)
Hash identifier:          N3GzFjSHFBIAQSKoNRGqlRRl7O5xdOMMb1eNtpBHJ8s=
Subject key identifier:   F7:23:9F:69:05:EF:AA:15:45:0D:62:16:75:33:E0:16:19:FF:A5:37
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       644AFF2C1CCE067AE479318AEADF0192C7CEE1FC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
Signing time:             Fri 30 Aug 2024 08:41:44 +0000
ROA not before:           Fri 30 Aug 2024 08:36:44 +0000
ROA not after:            Fri 29 Aug 2025 08:41:44 +0000
asID:                     48925
IP address blocks:        104.234.180.0/24 maxlen: 24
                          104.234.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4a:ff:2c:1c:ce:06:7a:e4:79:31:8a:ea:df:01:92:c7:ce:e1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 30 08:36:44 2024 GMT
            Not After : Aug 29 08:41:44 2025 GMT
        Subject: CN=F7239F6905EFAA15450D62167533E01619FFA537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d6:06:7d:16:08:28:87:43:53:c1:bf:3b:97:
                    72:2f:94:ff:70:4a:78:18:f6:ad:dd:c9:e8:db:bf:
                    3b:00:51:37:4f:f5:48:d4:94:70:50:60:71:68:db:
                    38:b2:3c:3c:0c:23:47:f0:18:50:b8:b0:54:5e:62:
                    99:c6:71:ba:f3:b2:f1:3a:0c:f3:01:5b:5a:e8:9a:
                    53:2f:e2:52:2b:c8:2e:72:fb:19:4a:2d:8a:c7:9e:
                    47:fa:8b:1a:57:58:3a:17:1c:73:f2:71:de:5b:29:
                    4f:88:ad:af:49:1a:d5:ac:8b:d3:56:d7:b5:c4:00:
                    57:73:35:26:b9:43:0b:af:f1:00:06:7d:ce:c4:fd:
                    f0:d7:34:27:8e:a3:41:e4:f2:d6:e4:c3:1f:6c:66:
                    aa:25:32:ce:8e:30:79:0b:80:7f:1c:91:92:dd:1d:
                    21:b7:4e:29:0c:17:24:30:2a:8d:43:56:ba:f8:f6:
                    27:98:40:75:db:b3:ce:46:98:f1:e4:66:f1:c2:15:
                    b2:fc:f1:bc:11:7d:8e:01:85:a7:a7:4d:ba:06:72:
                    a9:6a:80:43:88:5a:9c:1f:16:26:96:d2:ba:2b:5a:
                    b9:fb:50:ad:77:d8:ed:a2:d2:da:c1:2a:3f:c8:59:
                    86:2e:57:de:b5:c7:ec:65:af:73:86:77:a7:5e:57:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:9F:69:05:EF:AA:15:45:0D:62:16:75:33:E0:16:19:FF:A5:37
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.180.0/24
                  104.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:39:3c:c4:2a:fb:4e:eb:70:c9:9d:52:62:77:6e:78:c7:
         2f:99:9d:9b:1b:10:1f:a6:50:d1:18:80:1d:95:13:06:a3:16:
         b1:6f:7f:60:6c:a4:f9:2f:cb:4f:f8:9a:71:4b:42:3c:dc:a3:
         46:f7:de:df:01:3e:85:41:ed:bc:6a:cf:19:5e:bc:23:54:52:
         45:d1:df:c6:cd:56:dd:01:4b:7c:3e:42:be:c5:8a:dc:83:87:
         fa:99:99:fe:60:d4:ac:4d:de:ff:fe:78:94:93:39:d6:c7:78:
         2f:ec:67:e0:82:a9:ca:00:70:c0:fb:36:3b:fb:96:d8:32:5c:
         c3:64:44:36:1d:42:0d:dc:04:bd:9e:91:9b:13:a6:09:72:2d:
         0b:63:2a:a7:f1:28:ef:4e:6a:62:e7:fc:76:f9:0c:39:8a:f4:
         a8:b1:b9:ce:ca:c5:14:9c:c5:b3:43:78:82:39:b3:31:04:70:
         1c:f0:a5:29:b8:e7:f6:53:c6:11:92:af:e9:c1:c6:c7:2b:6c:
         7c:20:b1:3a:88:b1:10:e0:f9:bf:79:3a:7d:58:c7:58:c3:db:
         af:52:d7:72:7c:09:c7:ec:b4:f8:28:c9:07:f9:c7:90:88:7e:
         a3:e6:da:04:04:78:5e:c8:35:96:da:21:14:c1:f7:b7:99:b2:
         c4:d0:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org