Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53616.roa
File:                     AS53616.roa (raw, json)
Hash identifier:          jx5Q/NjWh5JrOCVcj062/MpeI8TeWaFGg2z91xaBfO8=
Subject key identifier:   23:C4:6A:C0:12:1F:FC:F8:C9:3D:4C:7B:31:F1:DF:2D:94:AD:50:8B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       266476CC109AD3C5786CC1A4F5449951C65A12A3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53616.roa
Signing time:             Wed 14 Aug 2024 22:48:59 +0000
ROA not before:           Wed 14 Aug 2024 22:43:59 +0000
ROA not after:            Wed 13 Aug 2025 22:48:59 +0000
asID:                     53616
IP address blocks:        104.234.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:64:76:cc:10:9a:d3:c5:78:6c:c1:a4:f5:44:99:51:c6:5a:12:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 14 22:43:59 2024 GMT
            Not After : Aug 13 22:48:59 2025 GMT
        Subject: CN=23C46AC0121FFCF8C93D4C7B31F1DF2D94AD508B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:57:ee:ab:f2:b7:4e:11:15:9a:bb:85:49:
                    d1:d4:e3:95:dd:3c:0d:20:6b:2a:45:9c:88:b4:57:
                    bc:e8:e5:0d:cd:ac:d2:3f:95:b0:5a:98:0f:af:e2:
                    71:f6:72:76:4c:1f:b5:df:1d:26:65:61:44:a6:d7:
                    75:8d:3c:09:8a:57:1c:e5:7e:0e:51:c9:40:0a:11:
                    b3:24:95:9f:97:d2:95:99:20:48:fb:1b:45:fe:35:
                    01:a6:db:0d:b0:7a:db:e3:4f:e0:4c:2c:d6:2d:fa:
                    85:ca:2f:79:2e:56:49:65:d3:4c:ee:73:49:7d:a4:
                    b9:be:57:0d:fe:53:c2:77:89:c6:16:a3:b5:7e:9f:
                    f1:c7:88:bf:9c:97:77:5c:02:51:ad:7a:18:71:2e:
                    eb:f7:16:be:dc:58:c7:13:37:6d:cf:f1:04:74:c6:
                    df:9b:4f:73:0d:c0:7d:a6:e3:21:a6:c8:bc:64:50:
                    9f:26:30:a5:72:39:a4:21:bf:63:54:55:31:f6:d7:
                    5c:30:82:04:e1:1e:a0:77:b6:ad:05:47:62:1c:6a:
                    ce:29:e0:74:06:f0:93:b1:e8:f2:b2:b8:4c:dd:41:
                    89:f1:65:52:92:86:51:88:06:47:44:c8:ef:64:e3:
                    6a:5e:dc:02:24:b0:33:44:e4:21:b6:7c:49:ab:30:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:6A:C0:12:1F:FC:F8:C9:3D:4C:7B:31:F1:DF:2D:94:AD:50:8B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:20:ed:02:b1:6c:9f:4a:3d:98:26:e1:c3:12:bd:a2:e1:7f:
         0c:35:d0:15:66:f0:46:5d:53:20:f6:d3:95:5e:c9:f3:43:a4:
         fc:7c:86:1d:b6:a2:41:29:4a:17:25:e2:c8:f5:54:bf:37:16:
         36:bc:c2:04:cd:e1:80:f7:0c:0b:6e:04:4d:4f:56:40:d0:ae:
         f6:a9:88:0a:94:75:e7:0e:1d:a5:f2:9a:18:0c:31:04:b1:d9:
         30:7d:bf:bc:8b:9f:45:f4:c5:38:cd:d5:fe:d3:8b:80:4e:4b:
         d4:b1:ad:3e:7e:c7:08:67:0b:6e:40:c4:be:9e:c7:75:86:17:
         39:13:99:af:b8:60:8c:71:38:c8:57:b0:0a:8c:e9:1b:38:9e:
         5d:d0:83:b7:41:3f:9c:0b:de:46:e2:13:14:fe:73:4e:e4:ce:
         a3:f5:35:c8:d8:87:d7:5a:4c:1b:67:21:9b:1a:b0:b8:21:30:
         4a:ce:77:0b:c1:5d:f8:3f:b8:f2:28:98:34:7b:e5:17:7f:c5:
         85:10:88:b2:41:bc:77:9b:cc:7f:87:d5:9d:33:1c:87:6c:20:
         48:16:ec:2b:eb:36:da:3c:4c:ba:81:c8:ff:4a:33:b3:3f:18:
         66:3b:1f:f3:4c:eb:12:66:4e:09:83:8c:25:67:f5:3c:3a:76:
         40:b1:e5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:16:14 2024 by rpki-client on console-ams.rpki-client.org