Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS56367.roa
File:                     AS56367.roa (raw, json)
Hash identifier:          +BWpsu/GURZRWakXip0v+ITJBjIf0hIx1j63UftbtE4=
Subject key identifier:   04:12:8D:77:DB:33:43:7A:01:85:A2:60:A5:E2:13:EF:5D:88:68:F8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       39A96313431ED3EF82CCC8C0B7A79E8EE6FEC8F9
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS56367.roa
Signing time:             Fri 21 Feb 2025 16:41:14 +0000
ROA not before:           Fri 21 Feb 2025 16:36:14 +0000
ROA not after:            Fri 20 Feb 2026 16:41:14 +0000
asID:                     56367
IP address blocks:        104.234.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a9:63:13:43:1e:d3:ef:82:cc:c8:c0:b7:a7:9e:8e:e6:fe:c8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 21 16:36:14 2025 GMT
            Not After : Feb 20 16:41:14 2026 GMT
        Subject: CN=04128D77DB33437A0185A260A5E213EF5D8868F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:81:47:80:54:3a:7d:4e:03:5c:70:a9:f5:
                    3f:ba:8b:04:59:5d:41:41:8a:46:41:71:dd:cb:e9:
                    c7:8d:96:93:31:4f:1c:aa:e8:b0:d5:7e:94:46:89:
                    f0:84:91:18:56:aa:8c:dc:4c:4a:bd:39:13:fe:75:
                    8a:f4:8a:67:db:17:8f:29:65:0b:3c:51:52:45:bd:
                    52:6f:41:5a:18:43:93:e0:79:46:95:85:19:46:dd:
                    a1:82:f9:0b:48:5a:4b:f7:c9:74:b6:d0:66:e6:06:
                    25:4e:62:a7:a0:c2:03:bc:a0:34:2b:9e:be:6f:30:
                    2d:51:a6:88:5c:95:c2:ab:47:5f:55:e0:ab:11:c1:
                    e4:d3:89:f5:ec:be:f0:4a:f9:64:80:c7:bb:9d:36:
                    bb:d4:f0:81:16:6f:99:58:c4:96:10:bd:7f:e9:dc:
                    b9:f5:4d:9f:9d:76:99:87:a4:ed:d2:b9:e6:1a:57:
                    bc:bc:ad:fa:92:a8:4b:ba:6a:19:2e:95:22:1d:60:
                    0c:42:04:e9:1d:bd:c4:76:6e:b7:0d:ee:dc:57:02:
                    48:3a:86:ed:7e:31:7a:b8:85:4f:13:3b:d8:5f:c8:
                    d7:62:a2:5f:7d:17:6f:53:47:9b:15:e4:5f:29:0f:
                    38:25:a0:96:4e:df:97:ba:69:86:88:4b:fb:38:07:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:12:8D:77:DB:33:43:7A:01:85:A2:60:A5:E2:13:EF:5D:88:68:F8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS56367.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:cf:06:95:07:f2:c1:18:16:93:62:1f:f0:fd:11:9b:f7:
         b9:d5:7a:47:40:2d:f9:00:69:1e:40:7c:5b:fb:95:93:e3:bc:
         dc:5e:5f:46:71:b3:d7:a7:aa:dc:28:12:05:7b:33:da:50:ef:
         86:87:be:0e:89:45:5f:68:7e:f7:c6:22:00:1a:a7:d0:e2:66:
         b0:4b:8d:e0:fe:b3:2b:29:9a:46:60:f4:30:f3:7f:bf:4d:18:
         77:2d:23:39:37:3a:4b:67:05:e0:f9:a1:b4:07:bc:9e:3a:f9:
         37:9a:b7:59:d0:27:a3:3b:2d:f9:a1:3f:a4:a1:0c:56:57:42:
         16:cd:e5:3c:4f:bd:88:99:a3:81:ae:d8:4e:33:bf:77:94:ba:
         8e:7a:2a:13:3d:6a:53:a3:b6:db:ca:d8:84:7a:dc:c2:20:2e:
         d9:ef:3d:ad:62:8b:56:86:35:54:7d:6b:45:87:fe:02:64:7f:
         db:9a:0f:58:64:a4:27:69:cc:e1:d0:84:f3:a6:e1:af:cc:bb:
         8b:41:37:51:e7:d5:f0:2c:1d:cf:d2:51:13:34:43:f8:e7:ff:
         7a:10:89:02:73:e2:9f:78:97:4d:ea:a6:57:99:bc:e8:4b:53:
         d3:61:6e:ea:9a:a2:47:68:16:01:f4:17:c1:f1:06:0b:fa:a1:
         30:c0:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:58 2025 by rpki-client