Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          ifg9+AkG2WN4Of1UIzGcKg1vNITRKzjHN4UEcnj60ZI=
Subject key identifier:   1B:77:23:94:64:91:C8:73:9D:DC:53:E5:98:CB:E8:A9:35:22:FC:32
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7B998E735AD96FA32F755DCCEC1DC09347128815
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa
Signing time:             Thu 01 Aug 2024 17:43:33 +0000
ROA not before:           Thu 01 Aug 2024 17:38:33 +0000
ROA not after:            Thu 31 Jul 2025 17:43:33 +0000
asID:                     5065
IP address blocks:        104.234.18.0/24 maxlen: 24
                          104.234.121.0/24 maxlen: 24
                          104.234.164.0/24 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.218.0/24 maxlen: 24
                          104.234.221.0/24 maxlen: 24
                          104.234.248.0/24 maxlen: 24
                          104.234.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:99:8e:73:5a:d9:6f:a3:2f:75:5d:cc:ec:1d:c0:93:47:12:88:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  1 17:38:33 2024 GMT
            Not After : Jul 31 17:43:33 2025 GMT
        Subject: CN=1B7723946491C8739DDC53E598CBE8A93522FC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:19:54:5a:a3:e6:b8:22:3c:88:f1:b6:c5:
                    f1:20:b0:aa:79:16:7e:24:f0:36:63:57:79:f0:ef:
                    cd:2a:d1:84:85:be:55:7b:c2:47:94:63:90:4a:da:
                    45:eb:2a:b0:4e:72:a8:07:81:39:8a:11:92:af:84:
                    63:0f:79:06:b3:d4:dd:80:f9:44:8a:65:b5:c2:93:
                    3b:fc:be:52:79:51:3b:df:57:04:d8:8f:a1:9d:9e:
                    5b:7d:d4:34:58:4a:1b:6e:85:e2:ef:37:61:bb:4a:
                    a2:c8:84:9e:8a:dc:7c:2a:40:93:a7:e7:7d:4b:02:
                    26:c4:48:76:30:a1:c9:c2:6a:5f:c4:fc:33:aa:27:
                    df:51:ea:1c:6b:b8:41:b7:b9:86:ae:94:fc:79:e1:
                    1f:4b:84:01:59:fd:b0:a3:26:d9:f1:33:42:7d:49:
                    12:ab:e2:6d:41:4f:26:dd:92:cf:0e:45:60:ca:58:
                    14:bf:9f:06:11:36:25:0d:4b:74:d0:ac:62:51:f9:
                    39:d9:eb:77:5a:0f:34:e5:01:b2:34:b4:0d:e6:2b:
                    2d:e7:32:82:30:a8:63:44:59:c1:7b:e8:cd:2a:08:
                    de:c5:71:72:e6:e1:fb:45:83:6d:5d:62:59:06:7a:
                    de:76:64:a5:1c:ea:0c:61:25:8c:b4:c9:32:7e:d9:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:23:94:64:91:C8:73:9D:DC:53:E5:98:CB:E8:A9:35:22:FC:32
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.18.0/24
                  104.234.121.0/24
                  104.234.164.0/24
                  104.234.201.0/24
                  104.234.218.0/24
                  104.234.221.0/24
                  104.234.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:f6:54:b1:c1:ed:74:71:3c:a4:40:6a:7c:e7:7d:e2:b1:9c:
         4e:a8:28:68:c0:ca:cd:42:1a:43:62:42:18:79:9b:b1:1c:1a:
         b8:2e:28:2a:61:96:56:e1:09:f1:0e:5b:57:eb:43:b1:6c:34:
         c7:0f:c0:6e:c6:d9:c1:d5:e5:32:35:1c:e4:76:02:ff:e1:53:
         4e:de:af:66:ea:29:ea:89:40:60:6b:27:b5:22:86:38:ab:f7:
         86:d5:5a:ee:0a:ea:3b:5b:a2:af:f1:a7:2a:69:a5:1c:c7:61:
         0d:91:c7:58:65:06:63:ae:87:d5:fe:91:1c:61:0f:03:59:ae:
         03:89:37:e2:71:b0:d8:de:a0:c8:50:f8:c9:37:23:8e:ef:f7:
         36:95:c7:38:14:de:d3:aa:ce:50:15:da:dd:11:8b:fb:0c:9f:
         2f:34:e0:19:ee:f4:46:90:a0:f3:12:c4:af:04:67:a6:d2:f4:
         aa:26:f2:46:19:38:3a:74:d2:b9:24:90:5a:55:0a:3d:73:d8:
         20:3e:06:35:9a:79:fb:51:12:70:86:8a:76:f3:8e:70:50:a9:
         e9:ad:19:17:c5:08:23:54:cf:65:07:af:98:9f:e4:08:1a:87:
         a6:be:b8:71:c0:87:22:5c:4f:d5:cd:aa:4a:b5:ad:50:dc:a6:
         0f:d8:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org