Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa
File:                     AS61112.roa (raw, json)
Hash identifier:          H9cCpjyKvYCSTQMOkhgRmafp2lqC5dzW7xcw4hV7wl4=
Subject key identifier:   78:2C:E4:3F:45:4D:34:12:CC:1A:82:EA:0C:74:22:3C:46:3B:D4:AB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       170855F110E69E51FF1B2CE6379BEB038FA1184F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa
Signing time:             Sat 22 Jun 2024 14:52:54 +0000
ROA not before:           Sat 22 Jun 2024 14:47:54 +0000
ROA not after:            Sat 21 Jun 2025 14:52:54 +0000
asID:                     61112
IP address blocks:        104.234.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:55:f1:10:e6:9e:51:ff:1b:2c:e6:37:9b:eb:03:8f:a1:18:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 22 14:47:54 2024 GMT
            Not After : Jun 21 14:52:54 2025 GMT
        Subject: CN=782CE43F454D3412CC1A82EA0C74223C463BD4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:07:a0:26:77:67:ec:d9:c5:cd:49:79:26:
                    b1:8b:0b:e6:e6:45:69:fd:a6:e4:ad:aa:fd:c9:88:
                    12:2d:da:88:3a:8a:1a:b4:bf:6e:99:d4:49:0f:7e:
                    a6:1f:4f:b4:b3:82:c9:38:9b:21:18:1b:ae:f6:6e:
                    58:a0:d7:09:8c:2f:71:cf:5d:9e:a8:8d:a3:77:86:
                    e0:54:61:ea:aa:a1:40:ec:e6:28:c6:6e:ab:fb:3e:
                    98:df:ca:fc:07:a1:bf:e1:06:8a:ce:f6:89:5c:55:
                    af:e3:75:0d:b1:4b:23:ee:20:a8:c2:30:fd:56:7c:
                    03:cf:4d:df:26:d8:45:3d:ab:34:56:fa:11:5a:56:
                    a1:5a:a2:3c:02:8f:0c:5c:74:93:88:a6:fd:f1:0a:
                    f8:bd:ff:4d:a8:3d:74:35:b3:79:aa:19:ab:88:02:
                    6f:53:58:10:91:78:cd:ac:c9:a2:1a:2b:fc:52:93:
                    f5:f2:01:e2:fc:59:6d:fe:0d:da:47:d9:b0:ac:46:
                    5c:49:cc:78:ce:b1:48:c3:f7:70:dd:74:c7:2a:46:
                    b8:30:3f:45:e2:00:79:9c:58:7b:c0:54:30:6f:c4:
                    03:52:49:5e:d5:b3:e7:66:bb:96:23:71:7a:32:3b:
                    4e:d2:9a:91:61:e3:17:31:be:31:a8:8e:37:4d:65:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2C:E4:3F:45:4D:34:12:CC:1A:82:EA:0C:74:22:3C:46:3B:D4:AB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:69:c9:3a:44:c3:c8:23:e4:0a:75:aa:2c:d6:b9:12:49:05:
         85:ed:12:c4:50:11:4d:9b:b0:bd:0b:89:bd:fd:57:bc:07:48:
         51:16:cf:ba:8c:2f:85:86:94:b8:49:0e:a8:de:33:8d:9f:7b:
         67:4c:ea:9b:4c:27:6a:71:ac:93:3c:9d:c2:10:8c:09:ef:06:
         d1:58:34:1a:e8:02:69:db:1e:ea:39:71:dd:7a:d7:e9:c9:fd:
         19:35:ae:13:99:cf:4b:f2:b5:70:f5:22:9d:21:56:4d:58:b6:
         72:a5:87:a5:4d:4f:a5:b9:33:51:fd:86:e1:ed:e8:32:aa:4c:
         5a:f7:7b:a3:58:4c:b3:1c:2d:b2:e9:cc:ab:91:b9:13:3c:3f:
         44:dd:12:58:35:61:04:04:23:b1:ee:64:48:a5:62:f4:eb:3d:
         63:c8:55:e6:2f:2f:46:d3:30:6d:d6:49:77:55:00:3c:1c:b6:
         b2:cf:5e:63:78:f8:ce:d3:21:a9:05:e6:2f:1c:d5:b7:b8:9a:
         95:1b:b2:29:1d:7b:e0:80:f6:98:a5:ed:74:84:ba:91:d3:18:
         33:f1:2e:d7:11:39:52:b0:3a:cf:04:10:81:8f:45:47:45:4e:
         de:28:a7:d6:4d:f5:24:fa:0b:24:71:70:c0:7a:2f:58:22:c8:
         5f:be:b1:5b
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUFwhV8RDmnlH/GyzmN5vrA4+hGE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNjIyMTQ0NzU0WhcNMjUwNjIxMTQ1MjU0
WjAzMTEwLwYDVQQDEyg3ODJDRTQzRjQ1NEQzNDEyQ0MxQTgyRUEwQzc0MjIzQzQ2
M0JENEFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBAHoCZ3Z+zZ
xc1JeSaxiwvm5kVp/abkrar9yYgSLdqIOooatL9umdRJD36mH0+0s4LJOJshGBuu
9m5YoNcJjC9xz12eqI2jd4bgVGHqqqFA7OYoxm6r+z6Y38r8B6G/4QaKzvaJXFWv
43UNsUsj7iCowjD9VnwDz03fJthFPas0VvoRWlahWqI8Ao8MXHSTiKb98Qr4vf9N
qD10NbN5qhmriAJvU1gQkXjNrMmiGiv8UpP18gHi/Flt/g3aR9mwrEZcScx4zrFI
w/dw3XTHKka4MD9F4gB5nFh7wFQwb8QDUkle1bPnZruWI3F6MjtO0pqRYeMXMb4x
qI43TWWgsQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHgs5D9FTTQSzBqC6gx0IjxG
O9SrMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzYxMTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOrpMA0GCSqGSIb3DQEBCwUAA4IB
AQBpack6RMPII+QKdaos1rkSSQWF7RLEUBFNm7C9C4m9/Ve8B0hRFs+6jC+FhpS4
SQ6o3jONn3tnTOqbTCdqcayTPJ3CEIwJ7wbRWDQa6AJp2x7qOXHdetfpyf0ZNa4T
mc9L8rVw9SKdIVZNWLZypYelTU+luTNR/Ybh7egyqkxa93ujWEyzHC2y6cyrkbkT
PD9E3RJYNWEEBCOx7mRIpWL06z1jyFXmLy9G0zBt1kl3VQA8HLayz15jePjO0yGp
BeYvHNW3uJqVG7IpHXvggPaYpe10hLqR0xgz8S7XETlSsDrPBBCBj0VHRU7eKKfW
TfUk+gskcXDAei9YIshfvrFb
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org