Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
File:                     AS48925.roa (raw, json)
Hash identifier:          O8FJ3kdXqRwboHfVKS00obmGAseshVemm7bGgOYchQA=
Subject key identifier:   70:65:0B:36:1E:BE:3F:6D:80:A1:04:8A:DB:CB:86:42:9C:0D:EE:07
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       226463465264A92994940A5894D1B040D3A03B69
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
Signing time:             Thu 15 Feb 2024 16:12:13 +0000
ROA not before:           Thu 15 Feb 2024 16:07:13 +0000
ROA not after:            Thu 13 Feb 2025 16:12:13 +0000
asID:                     48925
IP address blocks:        104.234.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:63:46:52:64:a9:29:94:94:0a:58:94:d1:b0:40:d3:a0:3b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 15 16:07:13 2024 GMT
            Not After : Feb 13 16:12:13 2025 GMT
        Subject: CN=70650B361EBE3F6D80A1048ADBCB86429C0DEE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:af:46:e7:f8:ac:49:4e:f1:39:4d:ff:0e:
                    99:45:18:6a:d7:57:fc:97:97:b3:65:f7:cf:b2:6b:
                    15:b1:d7:8d:d2:16:aa:b2:4c:03:65:64:f2:7f:fa:
                    8e:58:ef:94:b8:a1:33:97:2e:b1:a8:73:a1:3a:30:
                    23:63:08:f2:7e:08:41:42:88:bd:a5:7f:ad:c9:ba:
                    06:d1:88:ed:fb:da:25:e1:ee:dc:48:70:e4:9e:8b:
                    68:57:3d:05:1f:7c:da:ca:a5:df:3a:6b:e1:6c:12:
                    e4:3c:fd:35:49:d5:07:94:97:da:1d:35:ef:6f:d9:
                    f4:b5:ee:19:d0:92:b3:4e:ff:ba:7d:79:9f:7f:a6:
                    a3:59:ef:45:b8:0d:df:7f:de:dd:df:c8:9d:ed:8f:
                    ed:4a:0f:63:06:76:83:71:3d:60:e9:53:c6:7a:42:
                    ab:da:14:02:13:9c:a7:63:6b:51:23:f8:21:8a:eb:
                    d8:18:f0:a8:6d:07:41:c1:58:28:16:6c:8f:0d:3c:
                    04:27:ca:fc:bf:16:6a:a6:57:01:40:7a:c4:5b:7c:
                    a9:d3:6d:fe:3b:b5:5d:04:88:33:bf:44:c4:66:fd:
                    e1:bc:01:95:26:c9:61:71:c2:5e:20:4f:f3:0e:f1:
                    99:e7:a0:e4:6b:04:e3:3b:99:e1:fa:5e:cf:72:b9:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:0B:36:1E:BE:3F:6D:80:A1:04:8A:DB:CB:86:42:9C:0D:EE:07
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:58:1d:81:94:01:72:0c:8f:d0:40:fe:da:a3:84:35:77:2a:
         ec:83:25:b2:6b:54:8f:f2:dd:7e:49:21:7c:ff:3f:84:03:39:
         41:b0:4a:b2:ca:f6:6d:a1:89:d1:91:b2:5e:a4:2e:16:0a:91:
         7f:c7:c8:cf:a9:11:65:bf:18:96:65:e5:ac:c4:d7:08:e4:b0:
         79:1c:c8:d3:27:eb:aa:94:05:c9:11:28:42:28:e7:5c:68:df:
         f4:90:97:89:01:d4:63:58:0b:41:31:c6:e5:9e:38:15:a7:ba:
         d8:cc:ff:4f:6c:2c:29:1b:13:bd:3b:eb:b1:62:4a:49:da:97:
         9e:95:ac:3c:cc:1f:52:22:90:1e:f0:be:64:e7:3c:5c:c2:97:
         e8:fd:a8:0f:42:26:34:59:af:c7:10:6a:fd:f2:df:8e:af:eb:
         5d:39:fe:1a:d9:84:8a:8e:ca:91:70:6d:93:0c:5e:23:23:3c:
         4d:c5:59:56:98:fe:83:fe:4c:2e:90:57:3b:73:50:21:02:43:
         9e:a5:41:fc:6e:24:0f:5f:a0:b0:20:fc:65:82:34:3a:df:66:
         ff:bf:5a:ed:1b:65:c1:52:6e:84:ac:bd:b4:e4:a0:2e:92:7b:
         99:8e:86:4d:59:cc:f3:9a:f5:f8:2f:3b:49:91:76:4c:d2:00:
         33:a5:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org