Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          6pc5Qj6QNqepyzwz3xUEbJFCR5iMRGcrRJkATF6FzVw=
Subject key identifier:   0F:95:B7:98:AC:34:DE:FD:7C:EC:39:49:70:0D:61:22:88:F2:74:BC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1BC34020102DFA76C8B9167D904CF45E6BE8BAB1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa
Signing time:             Thu 11 Jan 2024 14:44:41 +0000
ROA not before:           Thu 11 Jan 2024 14:39:41 +0000
ROA not after:            Thu 09 Jan 2025 14:44:41 +0000
asID:                     54252
IP address blocks:        104.234.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c3:40:20:10:2d:fa:76:c8:b9:16:7d:90:4c:f4:5e:6b:e8:ba:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 11 14:39:41 2024 GMT
            Not After : Jan  9 14:44:41 2025 GMT
        Subject: CN=0F95B798AC34DEFD7CEC3949700D612288F274BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:6d:35:47:8c:22:97:c0:c9:70:d7:a6:4f:
                    7d:4f:e9:37:c8:6d:13:e2:1a:30:9b:24:cf:ad:bd:
                    8f:f5:ad:79:3f:51:7a:83:06:80:32:c6:5d:86:b5:
                    99:76:36:92:94:c6:29:cf:60:54:5c:c4:2b:dd:1b:
                    c1:22:98:26:f3:33:49:af:7e:cf:5c:6b:cd:87:a6:
                    1c:fb:30:7d:0c:52:68:5c:ff:20:b5:0a:fe:f7:24:
                    c7:82:c1:29:d6:68:fa:f5:58:58:67:aa:09:47:02:
                    51:6f:c6:4b:0c:52:7f:76:82:da:93:6f:4c:ce:e4:
                    ee:c6:b4:50:28:ca:78:dd:a3:72:0c:34:b1:80:17:
                    f5:82:b2:7e:1a:43:df:3a:b3:50:fb:d5:1c:2c:1b:
                    e4:a9:c1:be:78:18:79:06:db:e5:3b:4f:0f:5c:f0:
                    d4:25:d0:b5:3f:18:d4:74:89:69:ac:d8:68:f5:8b:
                    e2:65:f4:64:54:de:18:38:28:22:5b:fd:b9:39:df:
                    02:ae:83:ef:d7:97:6d:97:dd:7a:51:87:78:3c:b1:
                    c9:09:12:81:4d:a0:03:7a:b8:57:1e:3a:15:cf:e8:
                    04:62:32:a0:1b:36:88:43:10:90:dc:47:2e:3a:ed:
                    0d:07:56:39:94:ba:19:9a:9c:31:78:26:de:5d:89:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:95:B7:98:AC:34:DE:FD:7C:EC:39:49:70:0D:61:22:88:F2:74:BC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:47:48:a6:f0:e2:1b:ba:fb:3d:87:72:d2:e4:bb:7a:96:7c:
         74:70:b8:83:c6:66:59:d9:ed:b4:ff:63:99:3e:2f:67:37:b2:
         d9:7d:a2:54:e2:c4:84:7b:7e:8b:2e:2b:53:3c:3e:6c:55:82:
         ec:2f:c0:bf:e4:2d:b1:fd:c0:1d:cd:33:ba:fc:20:62:ac:20:
         cc:8e:a6:14:92:30:98:e1:b4:40:84:8d:92:4a:d9:c8:af:63:
         ab:8c:6b:33:89:17:9b:3a:b8:f6:17:75:ad:d0:39:ca:86:58:
         75:f2:7b:89:00:eb:52:cd:d1:38:ab:ae:64:f9:67:1f:f4:dc:
         c3:52:4e:29:4d:7e:cf:ce:4d:f1:fa:29:cb:dc:b7:6e:92:ac:
         48:78:c5:2f:c3:f9:53:0b:94:a9:e5:d9:2c:02:31:b6:9d:8b:
         65:d5:22:7e:be:63:47:3d:63:b5:ac:0c:09:6e:21:65:c2:69:
         3d:2b:f5:84:14:bf:d6:14:a6:d1:4d:7b:bb:5f:3d:25:8a:38:
         52:6b:81:51:49:23:38:fa:63:c9:4a:cb:8f:76:72:78:e8:53:
         1c:9b:75:14:d3:d9:1f:59:86:36:53:75:e2:eb:83:fc:68:f1:
         62:55:7a:a4:92:18:8f:c9:fd:11:5c:c4:f8:d9:79:7f:5a:4c:
         4c:05:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org