Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62564.roa
File:                     AS62564.roa (raw, json)
Hash identifier:          SgBP6gZyjW65hkR+Es0M841T331/dDjLJr8q5zR9emo=
Subject key identifier:   8E:57:93:79:6E:6C:FC:70:BA:DB:5A:A3:70:4B:C0:18:AC:C6:3C:89
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6A05506B372BE82FA07E43B427E3D21AE8C5C555
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62564.roa
Signing time:             Tue 13 Feb 2024 21:02:29 +0000
ROA not before:           Tue 13 Feb 2024 20:57:29 +0000
ROA not after:            Tue 11 Feb 2025 21:02:29 +0000
asID:                     62564
IP address blocks:        104.234.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:05:50:6b:37:2b:e8:2f:a0:7e:43:b4:27:e3:d2:1a:e8:c5:c5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 13 20:57:29 2024 GMT
            Not After : Feb 11 21:02:29 2025 GMT
        Subject: CN=8E5793796E6CFC70BADB5AA3704BC018ACC63C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:d2:44:62:9b:9f:2a:4e:84:94:a8:56:68:
                    ee:bb:54:90:1c:3e:56:1e:70:ba:ab:b1:b1:5b:60:
                    a6:47:f6:20:ed:16:06:a9:22:b1:b9:a8:9f:bf:4e:
                    7b:5c:d6:fe:88:1d:8b:d3:3a:c2:c0:b3:4c:48:4a:
                    d1:9a:58:ee:62:f7:17:a0:a6:27:b1:3c:9a:28:0e:
                    22:fb:33:85:8d:f1:10:af:26:06:e9:5c:97:a9:04:
                    77:29:d8:e9:ab:54:6c:22:12:89:11:ba:b7:78:e9:
                    2a:a4:fd:58:d1:2c:c7:4a:e5:c7:db:33:ff:e7:62:
                    15:9d:e9:ba:47:3f:07:d7:91:09:ab:1f:13:ee:a7:
                    ab:4e:5c:db:8d:6a:94:df:3e:97:7b:87:cb:55:ee:
                    d4:95:33:fb:90:55:58:41:9b:d1:96:9e:49:d9:b2:
                    77:09:86:fe:a1:74:f6:08:a0:0f:91:89:8f:db:10:
                    6e:77:ae:e2:60:03:b2:4b:0c:09:f6:4b:18:d9:a5:
                    d2:1f:f5:90:77:18:9c:18:e3:d5:1c:27:26:10:4c:
                    8a:cd:5a:8d:6f:84:13:d4:ae:9d:24:51:0b:af:64:
                    88:fb:6a:8d:4f:df:fb:1b:24:6c:ac:97:f1:31:5b:
                    4f:3f:08:ee:03:23:a3:90:10:78:f3:44:39:9d:72:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:57:93:79:6E:6C:FC:70:BA:DB:5A:A3:70:4B:C0:18:AC:C6:3C:89
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62564.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:f0:dc:4b:be:d4:da:2b:69:b6:45:01:41:56:73:8e:36:
         91:2b:bc:3b:8c:f8:3b:c6:9b:7d:49:5b:b2:eb:49:c2:cf:27:
         f6:1e:1c:73:37:5d:5e:06:1f:d3:f7:48:eb:aa:2d:b9:d9:89:
         da:97:39:cc:c3:12:db:d0:e7:06:f4:18:5a:78:d5:63:8d:12:
         ab:b2:aa:78:89:b9:08:f6:db:8a:ef:e5:09:30:01:f6:c1:1e:
         6c:ab:f0:3a:98:04:2e:be:02:16:c0:b7:4b:6c:65:16:5b:88:
         dc:fa:45:95:25:29:9e:57:cb:fa:60:65:b6:1e:3a:34:42:2e:
         29:86:ec:8d:b0:66:fc:26:54:99:22:ab:dc:39:65:65:99:12:
         4f:5a:ce:ae:00:77:d6:16:62:43:cb:5d:db:7d:ef:25:e1:50:
         70:62:00:85:a6:bd:68:a5:29:90:6f:37:b0:ce:27:ca:e3:57:
         60:51:0c:ca:9e:f1:a2:31:d0:10:e1:02:85:47:3a:90:e4:52:
         2e:00:b9:19:c3:10:40:89:fb:63:4b:8f:1a:d3:92:a6:5a:11:
         58:03:a2:1f:08:7f:a3:03:35:27:98:fa:e4:78:b2:f2:ff:63:
         11:7d:e7:ea:21:ed:51:66:d1:22:47:e7:45:90:07:85:db:b1:
         a9:1b:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org