Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          Y4G8GGCUkUlQUeJfqhMX19Wd2p0gVIXj2kyYJ6vrF/o=
Subject key identifier:   03:96:3B:C0:09:48:39:6B:EF:67:85:7B:D7:D4:8B:8D:24:1E:14:1A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1210DC15807E41FD19E80EFDD3D7FC01BF24B43C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa
Signing time:             Thu 30 Jan 2025 12:07:15 +0000
ROA not before:           Thu 30 Jan 2025 12:02:15 +0000
ROA not after:            Thu 29 Jan 2026 12:07:15 +0000
asID:                     8075
IP address blocks:        104.234.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 11:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:10:dc:15:80:7e:41:fd:19:e8:0e:fd:d3:d7:fc:01:bf:24:b4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 30 12:02:15 2025 GMT
            Not After : Jan 29 12:07:15 2026 GMT
        Subject: CN=03963BC00948396BEF67857BD7D48B8D241E141A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:23:c2:02:cd:ab:7e:bd:59:ea:e1:7a:6f:
                    1b:fb:99:c3:2a:41:9f:0b:0d:ae:95:3e:a8:d0:6e:
                    6f:7c:74:d2:08:5a:a0:ee:03:fb:db:ac:ce:d1:e2:
                    ff:ad:6f:66:e8:f2:92:22:b3:8b:18:3d:7a:9a:6d:
                    60:3b:3b:9e:31:8f:0c:f3:60:eb:88:2b:72:c3:cc:
                    79:83:c1:ae:bb:63:63:c5:ca:f6:f9:79:64:8c:13:
                    dc:db:ab:82:5b:69:4c:cf:0e:03:73:e3:dd:6a:7f:
                    ae:7f:62:e1:48:24:12:9a:13:05:c7:46:35:48:fb:
                    40:3a:10:c4:fd:2c:df:33:1a:10:ad:0b:dc:e0:ea:
                    2b:86:da:99:fb:82:b2:3d:fe:05:c2:9b:23:87:53:
                    6e:76:53:8e:55:10:1d:f1:a7:41:61:8e:b1:45:31:
                    ea:4f:cd:9c:4e:d0:c9:0d:91:96:f3:c6:7c:58:9c:
                    56:90:22:02:81:7e:79:be:83:28:4e:ed:aa:42:c8:
                    a4:fe:de:56:94:ab:f8:77:df:bf:30:7d:b6:25:7a:
                    9f:56:cf:20:42:3e:30:cd:25:e9:4f:9d:51:c6:48:
                    89:15:5e:d2:3f:9c:e0:d8:d1:3b:2a:18:9a:6a:ff:
                    9f:e9:f3:d5:a2:48:7e:9e:4a:d3:d6:e5:3f:d8:0c:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:96:3B:C0:09:48:39:6B:EF:67:85:7B:D7:D4:8B:8D:24:1E:14:1A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0f:06:cb:94:4f:3c:f5:ee:de:20:af:a1:66:d3:ce:79:ed:
         84:02:d5:44:d1:ce:5b:12:ac:b0:b4:84:26:9b:ae:5c:76:fa:
         6e:66:ea:65:40:44:a1:d3:bc:69:fb:7c:f3:04:f4:b4:41:92:
         39:30:37:e2:16:78:d2:93:5c:78:27:51:8c:a5:05:08:19:c9:
         24:98:cc:61:13:ca:4b:6e:35:e7:c8:56:15:70:53:f5:6d:f2:
         d0:66:4c:4f:c0:74:49:28:02:50:11:ea:f9:f6:23:04:e7:e9:
         df:4c:f9:2f:61:88:7c:67:35:89:f3:f3:0e:29:ad:a1:e9:9a:
         0d:8e:4c:28:51:26:db:d7:29:2d:02:7d:f7:a0:66:be:30:c5:
         bd:de:7c:24:c0:56:02:71:b4:c9:36:5a:8c:92:94:17:1a:00:
         ae:b1:2c:ea:36:66:07:dc:da:fc:b3:51:1c:9d:d4:2c:c7:15:
         83:d3:10:e7:79:12:8e:81:ec:ac:22:a7:6d:39:04:d2:b0:67:
         6c:2e:5d:ba:e1:c8:db:15:2c:e3:42:9a:0f:ff:17:63:54:4a:
         8f:f0:67:93:e4:44:e5:54:fa:6d:5b:3c:15:a4:c1:4b:67:7c:
         ea:2d:ac:9e:f3:f7:07:b1:78:81:83:2f:5a:a9:d9:06:74:b9:
         fd:c5:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:30:01 2025 by rpki-client