Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS57043.roa
File:                     AS57043.roa (raw, json)
Hash identifier:          /72kDQ44GdvafdQJVCOuoIPhqGAbwuhCY95P2AdKRnE=
Subject key identifier:   24:D3:9D:4C:6D:C5:2C:88:52:A5:DB:F5:09:B1:3A:42:25:30:1D:28
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       64F9FE749B6C10BAA36CA6EB4EEE1FC9BADE23C9
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS57043.roa
Signing time:             Fri 05 Apr 2024 13:47:34 +0000
ROA not before:           Fri 05 Apr 2024 13:42:34 +0000
ROA not after:            Fri 04 Apr 2025 13:47:34 +0000
asID:                     57043
IP address blocks:        104.234.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f9:fe:74:9b:6c:10:ba:a3:6c:a6:eb:4e:ee:1f:c9:ba:de:23:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  5 13:42:34 2024 GMT
            Not After : Apr  4 13:47:34 2025 GMT
        Subject: CN=24D39D4C6DC52C8852A5DBF509B13A4225301D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:79:38:92:4f:f9:96:94:6a:ec:9d:19:b4:12:
                    9f:2a:f1:07:9c:15:d8:02:03:bc:1a:90:45:d7:f7:
                    63:de:e2:b1:a3:43:6b:ab:3b:b8:f7:d7:31:e1:c3:
                    04:16:37:e5:e6:2e:ec:41:9d:b6:0d:6b:75:01:09:
                    a0:97:2c:b9:18:65:cd:3f:5f:31:24:85:55:2a:98:
                    63:31:08:ec:47:49:1c:7a:d0:af:86:40:e5:cb:fa:
                    ac:c4:2c:e5:de:c6:2d:9f:19:e4:25:a8:47:3f:d3:
                    a0:4c:65:0c:a9:35:2c:80:48:f1:54:b2:a5:ff:76:
                    79:92:ab:f3:e3:93:55:e7:f7:b0:aa:e9:a0:cb:09:
                    90:de:85:49:2c:32:55:fe:a7:34:47:7e:22:a6:8e:
                    f2:9e:e5:22:4b:ea:2c:d4:8a:c9:72:3a:59:91:71:
                    a6:47:b1:26:b8:32:ee:9c:e3:b1:50:1f:1e:6c:cb:
                    d0:28:28:81:6d:2f:9b:f9:89:26:59:b0:7b:d0:c6:
                    b0:23:36:a9:85:1c:8b:68:e2:54:2e:90:4c:11:3b:
                    84:12:74:46:1d:99:7b:b1:51:9e:02:13:a6:6d:01:
                    39:31:cc:e5:ab:a0:cb:81:b7:2e:1d:b7:bb:73:2f:
                    88:10:3c:a7:a1:81:01:50:f4:7d:d3:bf:82:7f:3e:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D3:9D:4C:6D:C5:2C:88:52:A5:DB:F5:09:B1:3A:42:25:30:1D:28
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS57043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:6d:07:17:bd:2d:dc:c6:11:d1:37:6d:60:c8:8d:2f:54:
         4e:df:e5:d1:c7:4e:59:0f:e9:83:95:c7:4c:86:5b:00:c5:f8:
         c7:13:ba:b6:6d:89:bc:ec:e7:9d:f4:02:9b:85:3b:d3:e2:3a:
         88:bd:a4:86:2b:19:1b:25:37:81:71:b4:28:d4:60:76:71:8f:
         b6:d1:f2:23:00:68:a8:a1:d6:35:48:e5:8e:0c:2d:5f:2f:5b:
         be:86:90:6c:4e:59:b6:62:3d:14:9d:f4:1b:91:2d:bd:55:66:
         b3:fc:64:a0:56:32:19:0d:e8:f8:9e:f2:6d:8c:a6:92:7f:67:
         18:14:02:45:b1:ae:46:29:9e:1c:6d:2d:40:31:a5:5c:76:8c:
         3f:cb:f4:34:aa:14:14:52:11:5a:92:20:07:fc:2b:e1:be:cd:
         38:be:ad:75:ce:a9:14:3a:ae:df:10:45:3a:34:03:95:99:fd:
         a6:d9:f0:62:28:b4:87:93:b0:fd:2f:ff:b0:01:83:29:ee:b5:
         d4:77:b3:b4:7e:0c:68:46:7b:d5:1b:3f:33:2f:d3:2e:70:79:
         58:e4:42:71:cc:dc:c8:1c:bb:ab:23:a2:41:05:58:2a:2f:24:
         ff:5b:49:46:c8:92:76:b6:2c:a4:30:b7:1b:91:1e:7f:cd:ce:
         4e:b0:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:27 2024 by rpki-client on console-ams.rpki-client.org