Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49901.roa
File:                     AS49901.roa (raw, json)
Hash identifier:          AjH1GhznY+CL1bldL/h3+Gvpa/L/cm5+o9QQ44OKWo8=
Subject key identifier:   F3:23:FE:DA:75:01:C2:16:CA:E8:06:BD:3B:8E:E3:FD:8D:46:86:4B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       223F6B60FFD3942EDEF50C5324CD818A46FB4857
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49901.roa
Signing time:             Thu 07 Nov 2024 06:49:21 +0000
ROA not before:           Thu 07 Nov 2024 06:44:21 +0000
ROA not after:            Thu 06 Nov 2025 06:49:21 +0000
asID:                     49901
IP address blocks:        104.234.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3f:6b:60:ff:d3:94:2e:de:f5:0c:53:24:cd:81:8a:46:fb:48:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov  7 06:44:21 2024 GMT
            Not After : Nov  6 06:49:21 2025 GMT
        Subject: CN=F323FEDA7501C216CAE806BD3B8EE3FD8D46864B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:f4:32:12:72:2d:18:ce:f7:49:43:53:c9:
                    72:7e:35:7c:7a:01:e7:0e:3a:2d:90:77:9e:cb:3e:
                    6e:20:76:b3:a9:2c:ae:79:04:75:5a:83:ef:64:01:
                    cc:a5:08:0e:98:18:e3:13:89:ef:c1:b8:97:87:c0:
                    52:cb:f4:2f:46:13:25:cd:0e:e4:cf:27:69:28:e1:
                    bf:5d:e4:ab:df:51:2d:49:a4:a8:24:8d:b1:c4:d6:
                    44:24:09:11:1e:b4:07:c9:c3:24:4e:d1:76:0e:b7:
                    91:24:c8:d1:84:dd:cf:d3:23:e9:4e:54:a6:11:13:
                    45:72:55:cb:92:c5:e2:f6:5a:fc:75:16:c4:a3:53:
                    67:b8:2e:fd:a2:68:76:86:bc:98:1d:dd:07:21:7d:
                    9d:4a:ca:2c:d4:a9:56:d8:55:51:45:26:1b:91:1a:
                    52:71:72:ec:62:88:7e:ed:11:10:84:60:23:8e:60:
                    f1:86:29:c7:2d:bf:fe:b2:c2:bc:d0:2d:56:ff:2b:
                    d5:23:cd:5f:11:b2:95:e0:bf:e2:10:66:47:4b:6a:
                    34:dc:0f:27:55:03:12:ed:ef:98:cf:21:e5:bd:3d:
                    b5:7b:ce:25:ae:36:b4:32:f3:aa:1a:bc:c6:08:16:
                    3a:f8:6d:a6:42:28:81:5d:17:3a:8a:47:fb:e4:63:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:23:FE:DA:75:01:C2:16:CA:E8:06:BD:3B:8E:E3:FD:8D:46:86:4B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49901.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:11:d5:f2:2f:f6:16:6f:bb:18:02:b1:48:ca:4f:b6:d4:01:
         43:ea:65:9c:05:90:c9:b6:4e:7a:76:25:7f:16:8a:62:a0:d4:
         43:af:f8:6a:f5:cc:c3:d9:12:ac:ce:43:17:ab:05:96:1c:79:
         62:c1:be:2e:1d:ee:60:ee:72:f9:85:b4:be:97:76:47:40:71:
         66:f5:5a:b8:4c:b9:4b:64:d2:5d:44:2c:cb:a8:6b:80:57:f4:
         46:be:f5:45:5c:5b:48:f9:54:42:e6:30:ab:7d:9b:a2:22:7b:
         f8:dd:18:af:7c:9c:fc:27:f8:d8:7f:be:58:b6:62:d2:e8:3e:
         03:a4:b2:fe:4d:9a:ef:4f:87:43:f9:23:a2:b4:bc:91:a8:49:
         8d:f7:93:b3:07:c4:79:46:ee:0d:29:a4:f4:1e:af:c0:b7:b6:
         e7:c0:20:83:b3:9f:82:c8:17:3f:e2:43:41:01:36:65:d6:1a:
         08:f4:6d:fa:97:74:50:f0:f7:c1:9c:9c:90:ea:b7:04:ae:a6:
         b6:c1:d6:4c:eb:26:99:77:b5:b9:53:ef:cf:c3:87:60:9a:f0:
         32:ee:bb:2f:ae:64:ad:89:3c:e4:f5:fc:97:d5:71:cb:4e:86:
         5d:d2:89:fa:e3:fc:9b:69:21:64:4b:db:5b:95:9a:cd:c8:c7:
         27:9f:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org