Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          /BEsFY5yWzneUKS8lojGQ8uB5G3ph1dskG75Qi8WSVI=
Subject key identifier:   6C:FC:39:6C:8F:9F:A6:38:82:21:61:27:7E:F0:A5:EC:11:62:5F:7E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       454D060B806FCFDC15CB187B00C191B44520033A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62240.roa
Signing time:             Thu 04 Apr 2024 13:15:11 +0000
ROA not before:           Thu 04 Apr 2024 13:10:11 +0000
ROA not after:            Thu 03 Apr 2025 13:15:11 +0000
asID:                     62240
IP address blocks:        104.234.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:06:0b:80:6f:cf:dc:15:cb:18:7b:00:c1:91:b4:45:20:03:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  4 13:10:11 2024 GMT
            Not After : Apr  3 13:15:11 2025 GMT
        Subject: CN=6CFC396C8F9FA638822161277EF0A5EC11625F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:b3:c1:41:ff:72:0d:53:f6:f2:a7:6e:b7:
                    36:f2:f9:c7:e0:16:dc:5d:45:d4:da:f0:90:1f:5b:
                    ff:d1:e1:92:f4:6f:2e:24:8e:74:4e:69:11:4a:de:
                    82:96:7e:29:65:32:4b:ae:bb:ac:06:c5:86:ff:48:
                    25:38:05:bc:b6:bd:57:16:1e:9d:99:99:d2:90:2b:
                    e3:74:cc:e9:1e:8a:da:b8:72:29:ca:1b:c8:e5:0d:
                    b5:58:95:d6:42:a1:79:70:73:33:be:37:bb:28:16:
                    2d:b1:51:c2:aa:e8:41:0e:0b:be:dd:71:38:1f:ee:
                    9b:32:3f:52:0d:9f:2c:76:d6:da:dc:21:52:a8:ac:
                    57:29:16:48:8b:8d:e5:8a:fc:5c:1c:6e:3f:34:c2:
                    bd:13:3d:c6:52:7a:7f:0f:ea:32:6d:9a:48:3e:1a:
                    04:8c:dc:05:25:17:b3:c5:ec:a7:fd:5e:ac:bb:d8:
                    97:ff:0e:6e:8f:94:46:bc:e4:7e:4b:d0:a9:6f:c1:
                    b3:fd:c4:97:b5:a3:61:63:31:c1:5b:18:b1:9a:c2:
                    0b:07:8d:aa:ec:e4:64:11:70:b8:f2:36:45:eb:c6:
                    00:6e:ba:14:65:39:60:6b:72:36:b5:0d:22:51:8e:
                    38:50:ea:4a:cf:c9:e1:a2:35:c0:ac:ae:8b:f9:11:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FC:39:6C:8F:9F:A6:38:82:21:61:27:7E:F0:A5:EC:11:62:5F:7E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:8b:3f:51:16:0a:d2:0d:59:31:f0:e9:84:9d:43:2b:10:
         d1:95:ef:99:42:1f:0d:19:16:f4:2e:c7:56:c0:9b:49:c3:85:
         08:16:f8:9f:51:c8:1a:0c:d5:3a:79:43:2f:89:8b:c5:95:92:
         1a:9e:31:20:e5:a0:46:03:27:d8:6b:c2:0a:b4:a7:c8:0f:52:
         fb:f3:d3:48:45:16:4e:af:63:ae:80:27:3c:be:e7:fe:84:9d:
         52:05:0a:50:60:e1:4d:dc:87:ab:32:16:8b:75:9c:70:7b:6f:
         24:10:b2:0f:a9:e0:f3:c7:15:fe:48:cd:5c:b3:a3:9e:48:7f:
         1c:b5:d5:ab:bf:3c:23:f1:2e:30:16:59:f6:3b:36:7f:35:3d:
         02:08:f0:0f:06:12:a2:c8:8e:8d:af:fc:38:00:b6:44:a4:78:
         a8:2d:f9:7f:24:4c:c8:f2:81:1c:f5:d6:c6:0d:a1:23:9b:0a:
         c7:36:d3:78:0e:1c:39:8d:30:35:97:e4:03:24:0c:80:29:12:
         39:3a:9c:2f:db:6e:d8:b3:9a:70:d2:cb:d8:e1:8a:68:09:72:
         60:7b:65:03:2d:db:df:9a:41:f2:70:44:e8:b0:64:05:01:16:
         d7:56:16:f6:af:4f:aa:70:8a:f6:5a:21:ac:70:45:12:30:02:
         b0:4d:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:10:16 2024 by rpki-client on console-fra.rpki-client.org