Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7720.roa
File:                     AS7720.roa (raw, json)
Hash identifier:          StX35evhXytBIDS8Jpd+owQZI1hsUBIIBM1QF8Al2vc=
Subject key identifier:   CE:53:12:12:2B:B2:69:95:8B:A1:46:4E:B6:85:D2:8E:9A:1D:14:14
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       57FB395AE92E20CB38C488EAEE532DB1E5659343
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7720.roa
Signing time:             Thu 02 May 2024 21:01:15 +0000
ROA not before:           Thu 02 May 2024 20:56:15 +0000
ROA not after:            Thu 01 May 2025 21:01:15 +0000
asID:                     7720
IP address blocks:        104.234.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fb:39:5a:e9:2e:20:cb:38:c4:88:ea:ee:53:2d:b1:e5:65:93:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May  2 20:56:15 2024 GMT
            Not After : May  1 21:01:15 2025 GMT
        Subject: CN=CE5312122BB269958BA1464EB685D28E9A1D1414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:d4:3b:92:7f:a9:dd:7e:80:50:ec:53:57:
                    5c:30:de:5c:6b:ca:5e:3d:3a:95:94:f8:95:d7:e4:
                    07:d7:e3:4c:c8:7b:69:1d:91:23:11:27:78:05:20:
                    f1:8e:35:dd:ea:4f:a9:82:7a:bd:72:31:89:21:ba:
                    5f:fd:3b:49:d2:3a:44:d6:b7:fc:c0:91:95:48:66:
                    ef:ab:41:3b:fa:f3:00:b9:1f:ae:5f:79:8b:38:ad:
                    ab:e5:7f:22:21:3f:e5:95:e7:57:4a:78:4c:d1:78:
                    9d:40:b8:22:dc:84:10:12:08:5e:55:97:60:bb:0b:
                    6b:a7:c6:90:ad:0f:4e:45:ac:5f:e1:ee:40:87:6f:
                    7e:60:2c:bb:1f:ff:3f:58:51:36:1d:2d:74:6c:51:
                    ff:95:2f:ab:d8:a4:11:57:50:cd:56:d0:4a:6d:c0:
                    a3:bb:1e:c7:3b:c6:2e:3e:2e:b2:6e:46:53:cd:7c:
                    a5:49:13:22:5c:e1:21:75:a8:4a:e9:26:0c:84:3f:
                    81:eb:c1:78:72:e3:76:0b:72:e8:c9:54:09:83:2b:
                    5e:6b:fe:6a:8f:b4:a7:5e:d9:dd:a2:1a:bb:12:bd:
                    c3:ae:ef:fa:1f:40:60:db:f4:09:c4:42:e7:f2:4c:
                    15:cd:4a:a2:d2:72:1a:c7:6a:a7:dc:24:54:35:f0:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:12:12:2B:B2:69:95:8B:A1:46:4E:B6:85:D2:8E:9A:1D:14:14
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:c9:97:01:a2:f4:3d:4c:7c:6b:62:ee:89:0e:22:0d:2c:9a:
         89:ca:89:6c:6a:59:45:6b:bb:47:20:e7:7a:c9:da:47:c0:0e:
         0f:76:cf:93:fe:b4:39:eb:7c:55:df:a0:c4:b8:1b:e5:a5:3c:
         f5:bc:1e:12:eb:0e:29:4d:e7:c5:f6:49:75:ad:62:9c:f3:6b:
         4b:f9:c9:fb:2c:62:ff:bc:10:ae:c3:42:47:20:f5:02:e4:f1:
         58:2d:72:a5:71:d2:28:ff:ef:47:81:6f:0d:71:90:bf:ce:63:
         cc:eb:6c:ec:7a:fb:28:b1:a2:20:93:ce:6a:f7:fe:87:ae:be:
         01:c8:d6:67:fa:70:88:19:e1:eb:c9:c2:79:29:e5:26:f4:61:
         69:30:60:05:2d:25:15:4c:64:a4:c2:bd:df:2b:4b:fa:d4:f8:
         f9:49:cc:87:80:2a:69:62:f6:e0:b6:c0:32:af:fa:96:85:03:
         d9:1d:6e:bf:20:cf:d8:16:b3:11:ae:6b:c8:e1:46:06:a2:84:
         54:98:1d:79:e6:c4:db:e5:56:40:ea:5b:8f:0d:0a:25:63:90:
         fa:da:79:22:db:de:8e:83:7e:9e:4c:fc:74:78:b6:07:bb:00:
         7f:eb:3f:47:81:6e:8f:c0:c3:4f:06:6b:fa:5d:aa:ee:91:48:
         fe:20:fb:a7
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUV/s5WukuIMs4xIjq7lMtseVlk0MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNTAyMjA1NjE1WhcNMjUwNTAxMjEwMTE1
WjAzMTEwLwYDVQQDEyhDRTUzMTIxMjJCQjI2OTk1OEJBMTQ2NEVCNjg1RDI4RTlB
MUQxNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0vUO5J/qd1+
gFDsU1dcMN5ca8pePTqVlPiV1+QH1+NMyHtpHZEjESd4BSDxjjXd6k+pgnq9cjGJ
Ibpf/TtJ0jpE1rf8wJGVSGbvq0E7+vMAuR+uX3mLOK2r5X8iIT/lledXSnhM0Xid
QLgi3IQQEgheVZdguwtrp8aQrQ9ORaxf4e5Ah29+YCy7H/8/WFE2HS10bFH/lS+r
2KQRV1DNVtBKbcCjux7HO8YuPi6ybkZTzXylSRMiXOEhdahK6SYMhD+B68F4cuN2
C3LoyVQJgytea/5qj7SnXtndohq7Er3Dru/6H0Bg2/QJxELn8kwVzUqi0nIax2qn
3CRUNfDX5QIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFM5TEhIrsmmVi6FGTraF0o6a
HRQUMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzc3MjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFo6sowDQYJKoZIhvcNAQELBQADggEB
AKPJlwGi9D1MfGti7okOIg0smonKiWxqWUVru0cg53rJ2kfADg92z5P+tDnrfFXf
oMS4G+WlPPW8HhLrDilN58X2SXWtYpzza0v5yfssYv+8EK7DQkcg9QLk8VgtcqVx
0ij/70eBbw1xkL/OY8zrbOx6+yixoiCTzmr3/oeuvgHI1mf6cIgZ4evJwnkp5Sb0
YWkwYAUtJRVMZKTCvd8rS/rU+PlJzIeAKmli9uC2wDKv+paFA9kdbr8gz9gWsxGu
a8jhRgaihFSYHXnmxNvlVkDqW48NCiVjkPraeSLb3o6Dfp5M/HR4tge7AH/rP0eB
bo/Aw08Ga/pdqu6RSP4g+6c=
-----END CERTIFICATE-----
Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org