Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49901.roa
File:                     AS49901.roa (raw, json)
Hash identifier:          PEEezKR4JQIALvE9U9CLdUU+lNKlkzx/b1fNZTrdp0w=
Subject key identifier:   0D:2A:AD:F3:D3:D0:EE:18:48:42:C5:66:AC:8E:86:7F:D0:57:B9:BB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       58DE0A2D6450CAAB8A40813D4627AA0E3B37217C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49901.roa
Signing time:             Thu 07 Dec 2023 06:35:37 +0000
ROA not before:           Thu 07 Dec 2023 06:30:37 +0000
ROA not after:            Thu 05 Dec 2024 06:35:37 +0000
asID:                     49901
IP address blocks:        104.234.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:de:0a:2d:64:50:ca:ab:8a:40:81:3d:46:27:aa:0e:3b:37:21:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec  7 06:30:37 2023 GMT
            Not After : Dec  5 06:35:37 2024 GMT
        Subject: CN=0D2AADF3D3D0EE184842C566AC8E867FD057B9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:f7:75:67:ec:f0:1d:13:a6:05:0a:81:08:
                    3a:74:06:73:dd:85:7d:4a:32:f7:f4:f9:75:d0:fe:
                    b4:8d:88:c2:2c:51:a9:93:66:a5:81:81:76:69:e5:
                    08:7a:f1:7a:46:77:03:3e:9f:61:c1:bf:55:e8:41:
                    3c:4b:16:97:64:52:c2:2b:11:3d:04:c7:5f:01:32:
                    24:1b:de:1d:f0:20:88:62:72:28:9f:f9:16:2f:72:
                    86:e8:65:30:5b:29:a0:7c:d4:95:b1:0c:59:47:8a:
                    75:17:15:76:48:27:18:a8:f0:02:f9:2a:1b:d2:7e:
                    24:4d:94:50:d7:03:ac:70:d5:98:c7:6e:9f:f5:8a:
                    7e:e8:6a:cf:8e:77:3b:04:6a:c0:dc:8e:a6:1b:ca:
                    24:01:d1:21:2f:8c:4d:83:3f:b9:c3:e1:99:98:f6:
                    08:05:43:56:db:b9:39:e8:af:ba:4d:57:77:6c:68:
                    43:87:92:26:86:57:41:cf:36:5e:61:99:e8:5d:4f:
                    a5:f3:d9:48:4c:89:81:33:2d:ff:32:e7:2f:1d:91:
                    bb:a2:94:a8:0a:9e:4d:a2:21:1f:5d:7e:7b:cf:05:
                    c0:9d:75:d8:f5:5c:2f:13:1b:fd:e8:8c:cd:2b:a7:
                    c8:86:b8:77:75:62:34:10:0b:bd:84:75:27:f4:77:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:AD:F3:D3:D0:EE:18:48:42:C5:66:AC:8E:86:7F:D0:57:B9:BB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49901.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:88:d0:63:c0:1a:7d:dc:82:b7:d0:83:ae:de:42:d3:6f:d4:
         a5:af:b1:6e:b9:ca:23:b8:60:ca:13:0f:a0:77:8b:a6:81:99:
         ca:14:db:64:76:e6:da:78:a4:e4:c4:61:92:8f:49:36:3f:b4:
         64:8d:8b:4a:aa:38:20:5e:c9:1f:76:b6:f3:93:06:60:db:25:
         af:93:e8:60:e5:8e:89:f5:76:5b:f1:13:7b:e6:27:dc:e7:eb:
         2a:2f:19:05:70:bc:54:88:78:25:be:78:42:60:2c:62:32:33:
         13:c9:2d:b0:cf:6b:3a:c4:85:fa:cf:e8:1e:a4:5f:13:c2:12:
         0e:6d:65:dc:eb:f8:50:93:60:ef:9c:bd:a4:e2:cd:ca:a0:f1:
         f8:e1:3b:8d:7c:9b:30:5d:7b:34:eb:ef:68:34:b0:ff:e2:9b:
         df:65:87:e7:6f:95:90:c4:75:89:e1:ce:c4:99:cc:c8:c2:6d:
         d5:5a:67:a3:bd:d6:a3:41:55:7f:a8:80:6b:9d:dd:ee:d6:94:
         05:a8:9f:3c:db:39:88:f7:51:67:19:a8:f2:d1:30:53:23:1a:
         c7:06:c1:aa:13:65:30:26:f2:0a:ae:46:ca:e0:c5:34:1c:13:
         dc:4f:4d:58:34:0a:f1:1d:be:c8:96:88:7f:2f:b9:ae:2d:02:
         c7:78:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org