Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          hRUgiNeJY6gByVaikBGcf1nJtMm6pmIKF4btwYH8Nq4=
Subject key identifier:   DF:E2:DD:A4:79:E1:8A:B5:A1:9C:C7:20:D3:FD:41:58:B5:83:08:A3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4423D7A0AC25F0C0BE03E195B668DE9085C27AA6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa
Signing time:             Thu 12 Dec 2024 15:28:23 +0000
ROA not before:           Thu 12 Dec 2024 15:23:23 +0000
ROA not after:            Thu 11 Dec 2025 15:28:23 +0000
asID:                     54252
IP address blocks:        104.234.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:23:d7:a0:ac:25:f0:c0:be:03:e1:95:b6:68:de:90:85:c2:7a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 12 15:23:23 2024 GMT
            Not After : Dec 11 15:28:23 2025 GMT
        Subject: CN=DFE2DDA479E18AB5A19CC720D3FD4158B58308A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e0:e5:15:b9:6e:dd:d8:22:b2:6e:98:f5:58:
                    39:1a:5c:48:71:33:bf:31:0b:16:3e:d7:47:2f:be:
                    b4:0e:4e:ac:32:c4:4b:c6:01:a7:ed:27:e5:ad:22:
                    84:df:5a:4c:6d:66:b0:ed:e7:51:55:7b:58:bb:4b:
                    66:cd:be:72:e0:7f:c0:3c:ea:1f:0a:4a:64:a5:a9:
                    b1:ac:32:4e:20:af:59:f2:8f:fe:98:1f:fc:a8:94:
                    93:69:38:e2:57:12:c7:2a:51:a9:ec:0a:a6:f5:5c:
                    c5:23:2d:ab:9b:44:72:c8:9d:3b:f0:32:d2:83:42:
                    6b:4c:a3:7a:a1:9a:77:0d:81:8d:fd:30:44:6a:17:
                    b8:f8:20:63:c8:03:0b:f9:fc:e0:b7:c4:f8:f6:d1:
                    c9:00:27:87:00:02:62:e6:66:5a:1a:0c:1c:cd:b3:
                    8a:1b:69:9d:16:02:dc:5c:53:48:b8:d8:a5:d5:8b:
                    f6:22:66:0e:8f:7e:49:8e:2f:20:30:31:f4:00:fc:
                    91:54:29:49:08:6e:d1:55:d3:d9:34:ee:4f:de:bc:
                    b8:ff:6a:69:34:c4:96:c1:2c:99:06:2c:46:5f:26:
                    c8:67:ae:bf:0d:95:2a:08:25:f5:41:1f:19:88:47:
                    79:e4:96:b2:20:69:63:9a:ce:53:dc:32:38:55:9e:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E2:DD:A4:79:E1:8A:B5:A1:9C:C7:20:D3:FD:41:58:B5:83:08:A3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d8:a0:e0:b2:cb:cf:dc:22:1d:99:be:12:a9:00:de:7d:0a:
         97:08:7c:80:a2:9e:04:ac:09:b2:55:92:0c:44:c5:94:fd:57:
         6f:55:3b:05:c4:c4:81:a8:03:72:2e:88:7a:5d:b9:7e:70:79:
         fd:a9:e8:6c:8c:ed:d4:9a:3a:c8:42:73:34:98:13:af:16:a7:
         e8:88:87:48:07:2d:e6:2d:a0:7c:51:c5:3d:8e:a5:98:6f:35:
         29:7b:9d:e9:7d:e5:a1:4f:f4:74:2a:ac:43:47:d0:cb:ca:d1:
         6a:a3:ed:07:04:51:5a:54:28:18:2f:0b:21:a4:81:33:74:e8:
         ef:3e:85:0d:93:2e:48:13:79:85:f9:9b:88:cf:c1:a9:c3:85:
         c1:26:09:f3:1f:a4:2b:b3:01:54:a0:d2:ac:1c:79:d8:7d:fa:
         12:19:5c:e8:98:f4:a8:90:00:df:4b:2e:80:97:e7:89:b3:99:
         7d:40:69:33:99:7d:33:f6:e1:52:53:7c:b1:73:16:42:8b:1a:
         d0:d0:51:bd:6c:07:b5:bc:96:df:22:f8:a3:3b:de:1b:a8:f7:
         23:d7:7c:cf:d8:ea:92:7f:32:d0:b8:fc:07:73:c9:d2:6b:9b:
         34:07:45:8f:bb:b7:4b:e2:fb:c9:80:de:6c:ef:88:5e:5c:3c:
         4d:56:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:27 2025 by rpki-client