Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          Gz8sBGnIqst410e1NFsb4evQAR04e343PKW6+XnmwBM=
Subject key identifier:   6F:33:5B:DD:CA:EC:4A:9E:E7:BA:E8:DA:A1:38:AA:51:19:09:FF:B0
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       43E08FF41FC44636CE4160C271E9A44590B3E40B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa
Signing time:             Tue 02 Apr 2024 10:04:05 +0000
ROA not before:           Tue 02 Apr 2024 09:59:05 +0000
ROA not after:            Tue 01 Apr 2025 10:04:05 +0000
asID:                     8075
IP address blocks:        104.234.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e0:8f:f4:1f:c4:46:36:ce:41:60:c2:71:e9:a4:45:90:b3:e4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  2 09:59:05 2024 GMT
            Not After : Apr  1 10:04:05 2025 GMT
        Subject: CN=6F335BDDCAEC4A9EE7BAE8DAA138AA511909FFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:de:57:7d:ff:72:33:be:a8:a7:78:df:24:
                    0e:b2:e9:60:68:50:4a:e9:f6:f2:10:be:4c:22:ed:
                    cc:1b:cf:b5:a1:68:67:31:ed:da:fd:da:b4:89:19:
                    b9:74:77:24:55:fd:26:4b:f2:c5:ea:b9:1d:ca:21:
                    9b:6d:83:72:9e:17:66:eb:fb:c6:7b:32:6e:87:d5:
                    ff:27:eb:85:0b:b8:27:29:38:1c:ac:79:60:e7:a5:
                    d7:af:5a:64:fa:97:1a:77:04:0e:fd:f1:87:8c:eb:
                    9c:ac:24:ca:3b:08:ec:3a:1c:e1:98:02:e5:61:29:
                    2f:b5:56:b4:8b:07:5e:f4:5a:16:57:c8:87:8a:20:
                    51:bd:6d:84:db:dc:70:0a:c9:ff:fe:de:83:dc:ea:
                    29:2d:c4:e8:52:e9:44:59:d6:12:d7:76:e7:46:f1:
                    bd:c2:11:fe:5e:54:af:ee:08:f1:28:a9:8e:ad:41:
                    7d:61:3a:8e:3e:db:89:a2:fc:af:0f:b5:32:2f:f1:
                    b7:65:08:3b:50:2a:4f:2d:71:f4:17:78:94:7a:43:
                    63:11:f4:c4:59:8c:4f:a8:4f:52:79:9d:80:a9:b2:
                    dd:2f:7b:45:20:6c:e6:d3:11:83:e9:8a:1f:df:89:
                    bc:19:18:50:d6:47:f1:44:e7:9c:98:50:c0:1d:2d:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:33:5B:DD:CA:EC:4A:9E:E7:BA:E8:DA:A1:38:AA:51:19:09:FF:B0
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:34:90:19:bb:dc:a3:66:ec:3c:ac:29:97:50:fb:41:0b:4e:
         f8:93:e7:db:98:47:f2:bd:c4:fe:8e:ed:ac:dd:da:0b:1c:06:
         de:58:51:94:4b:d3:a2:60:e1:18:ae:8e:59:89:7b:d4:7d:ba:
         f8:1e:25:ad:1b:ca:a4:41:8f:1e:6f:51:90:85:ff:71:2e:14:
         28:21:f7:33:b3:15:c1:09:df:90:2b:35:c9:48:8f:fc:2d:87:
         33:77:8c:97:b0:22:93:64:4b:e2:23:81:b7:2c:49:04:4f:46:
         6b:b7:08:c9:b6:d3:55:3b:cf:b6:75:ac:03:5c:89:08:c0:42:
         39:ca:04:d6:dd:a0:a1:43:f4:5a:fe:63:6d:d0:d2:e9:c6:32:
         59:24:c4:68:a9:77:52:34:a7:48:7e:52:f1:00:4f:44:66:48:
         1e:36:4a:23:36:e3:36:5a:d8:21:da:ed:de:59:1e:9c:c2:35:
         87:e3:98:8d:c1:77:c3:af:54:2f:50:cb:26:ec:63:5b:b8:e5:
         cc:4d:f9:1c:04:23:23:3e:69:2a:09:74:50:f4:96:dc:57:18:
         4e:1c:72:b3:f2:29:9b:65:cc:d9:e9:17:25:f2:81:63:51:d1:
         fb:5f:46:4e:ec:98:6b:19:17:3f:3d:0d:a5:b6:99:67:16:6e:
         fb:13:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:31 2024 by rpki-client on console-fra.rpki-client.org