Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          tUuRHqHt9mvRkydjpLKh0Gy5TALEDcZbLNyuTfOl1BE=
Subject key identifier:   B3:6D:7F:E0:B2:8B:16:4D:22:5A:19:B6:FD:B1:92:BF:20:E0:C7:29
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       486EA76DCA19928915094EA8A9BE3B9ECCCF4440
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS6939.roa
Signing time:             Thu 25 Jan 2024 00:00:07 +0000
ROA not before:           Wed 24 Jan 2024 23:55:07 +0000
ROA not after:            Thu 23 Jan 2025 00:00:07 +0000
asID:                     6939
IP address blocks:        104.234.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6e:a7:6d:ca:19:92:89:15:09:4e:a8:a9:be:3b:9e:cc:cf:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 24 23:55:07 2024 GMT
            Not After : Jan 23 00:00:07 2025 GMT
        Subject: CN=B36D7FE0B28B164D225A19B6FDB192BF20E0C729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:39:44:70:ac:e5:ae:89:7f:02:de:c5:03:
                    9f:39:01:cd:b4:98:6d:20:28:97:a3:ac:6b:ac:a5:
                    34:e3:d4:e0:da:64:b7:9d:d1:8d:59:47:16:41:86:
                    4b:26:13:55:3a:ac:fe:ce:91:36:d2:80:ac:94:3d:
                    33:0b:51:05:2d:e1:a1:10:d2:8b:ed:02:c9:92:1d:
                    3a:15:0a:d7:12:f5:10:8a:66:a9:31:b3:9c:25:9f:
                    b6:56:42:aa:69:8e:1b:f0:e0:51:30:3a:61:41:8a:
                    4b:4c:dc:6d:d1:58:18:77:1f:d5:05:82:94:12:26:
                    0d:73:38:ca:bb:f8:77:14:04:62:d5:b1:32:c9:2d:
                    e2:f7:9f:97:65:06:c3:89:95:5c:18:eb:42:01:5b:
                    9e:e7:93:49:9e:53:77:97:67:4b:58:3a:a0:05:d0:
                    4e:33:ec:84:30:c5:6a:1a:8d:36:23:c5:eb:bb:29:
                    3a:50:4e:0c:e7:bc:1b:6c:7c:0b:49:33:f8:05:3e:
                    a1:99:3f:a8:59:3d:46:47:52:e1:a5:07:8b:81:9a:
                    82:0f:2a:d8:0f:b7:83:9e:98:c6:a7:dc:fd:7b:93:
                    47:20:5e:1e:7e:82:9a:62:42:6f:d0:76:71:eb:be:
                    6b:1a:11:96:79:e5:d4:6a:ba:71:1c:2c:b9:83:2a:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6D:7F:E0:B2:8B:16:4D:22:5A:19:B6:FD:B1:92:BF:20:E0:C7:29
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:93:ad:94:8a:1e:e3:36:49:c6:3b:1b:df:d3:67:c0:da:
         65:57:e6:8f:9d:c2:bc:63:8a:bc:a1:49:b7:95:fd:26:c0:da:
         38:57:41:6d:af:69:4b:e0:dd:1b:02:be:f1:0b:93:52:34:8e:
         e8:4e:79:c9:32:b3:00:65:78:55:47:a2:23:31:68:ba:31:45:
         94:99:0b:4b:74:a8:16:a6:a5:60:04:26:dc:b8:59:81:0f:90:
         8b:27:d8:3e:f5:b7:78:cb:84:69:91:10:2b:8f:9e:06:4f:01:
         0a:20:06:42:e5:1e:d8:40:03:86:d6:43:d0:7a:70:fa:30:20:
         91:8c:97:6b:0a:ca:67:06:7b:0a:5a:ae:ff:46:f1:64:5b:a7:
         56:3d:1d:0c:6d:6b:ea:d4:fa:21:db:c4:9b:c9:4a:54:0e:df:
         b8:ba:21:89:f5:6d:b5:9d:db:f7:11:75:2e:8f:40:5d:03:c9:
         57:e6:d9:7b:3b:33:66:86:54:59:d5:d6:2f:67:42:6a:1b:41:
         87:27:dd:8d:f9:e6:9d:38:ef:52:cb:d5:eb:0d:34:a2:9d:46:
         48:6f:1c:a0:db:3d:c5:fb:b5:05:48:e9:9a:2c:28:00:4a:3d:
         ca:4d:43:c4:a6:55:b6:bc:d9:d5:56:f7:9c:5a:5d:79:73:d5:
         55:e7:99:a8
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUSG6nbcoZkokVCU6oqb47nszPREAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMTI0MjM1NTA3WhcNMjUwMTIzMDAwMDA3
WjAzMTEwLwYDVQQDEyhCMzZEN0ZFMEIyOEIxNjREMjI1QTE5QjZGREIxOTJCRjIw
RTBDNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEM5RHCs5a6J
fwLexQOfOQHNtJhtICiXo6xrrKU049Tg2mS3ndGNWUcWQYZLJhNVOqz+zpE20oCs
lD0zC1EFLeGhENKL7QLJkh06FQrXEvUQimapMbOcJZ+2VkKqaY4b8OBRMDphQYpL
TNxt0VgYdx/VBYKUEiYNczjKu/h3FARi1bEyyS3i95+XZQbDiZVcGOtCAVue55NJ
nlN3l2dLWDqgBdBOM+yEMMVqGo02I8Xruyk6UE4M57wbbHwLSTP4BT6hmT+oWT1G
R1LhpQeLgZqCDyrYD7eDnpjGp9z9e5NHIF4efoKaYkJv0HZx675rGhGWeeXUarpx
HCy5gyosdwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFLNtf+CyixZNIloZtv2xkr8g
4McpMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzY5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo6i8wDQYJKoZIhvcNAQELBQADggEB
AHPkk62Uih7jNknGOxvf02fA2mVX5o+dwrxjiryhSbeV/SbA2jhXQW2vaUvg3RsC
vvELk1I0juhOeckyswBleFVHoiMxaLoxRZSZC0t0qBampWAEJty4WYEPkIsn2D71
t3jLhGmRECuPngZPAQogBkLlHthAA4bWQ9B6cPowIJGMl2sKymcGewparv9G8WRb
p1Y9HQxta+rU+iHbxJvJSlQO37i6IYn1bbWd2/cRdS6PQF0DyVfm2Xs7M2aGVFnV
1i9nQmobQYcn3Y355p0471LL1esNNKKdRkhvHKDbPcX7tQVI6ZosKABKPcpNQ8Sm
Vba82dVW95xaXXlz1VXnmag=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org