Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          aEFJ6nZmlXedxm+MLN66kE/+4MLFCRAIiQ0OXkW2SKE=
Subject key identifier:   4F:6C:14:D3:58:9E:73:FC:83:65:09:1E:AC:F5:77:FF:92:81:BD:01
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       75FFC729C5230DC3BAA0539C75B3C6850B1912AB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa
Signing time:             Fri 13 Sep 2024 00:48:59 +0000
ROA not before:           Fri 13 Sep 2024 00:43:59 +0000
ROA not after:            Fri 12 Sep 2025 00:48:59 +0000
asID:                     8100
IP address blocks:        104.234.24.0/23 maxlen: 24
                          104.234.36.0/23 maxlen: 24
                          104.234.60.0/23 maxlen: 24
                          104.234.100.0/24 maxlen: 24
                          104.234.109.0/24 maxlen: 24
                          104.234.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ff:c7:29:c5:23:0d:c3:ba:a0:53:9c:75:b3:c6:85:0b:19:12:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 13 00:43:59 2024 GMT
            Not After : Sep 12 00:48:59 2025 GMT
        Subject: CN=4F6C14D3589E73FC8365091EACF577FF9281BD01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:cc:c1:02:ac:b8:e6:6a:4e:13:4b:b9:8c:
                    67:3b:99:e5:f7:ae:20:21:9c:fa:f3:a7:72:a5:5f:
                    7b:0f:57:7c:8e:95:81:84:61:97:fa:7f:5d:bd:af:
                    a4:19:d4:e6:50:7b:ae:39:99:0d:ff:cb:dc:9c:61:
                    2a:c5:72:d6:89:3d:ea:d6:f0:d7:7b:c9:2c:4a:40:
                    6a:54:c1:a3:51:b0:7c:f4:40:9b:8a:28:86:6d:f5:
                    77:c0:3f:9d:69:65:d7:34:79:b4:65:52:9a:34:33:
                    94:5f:63:99:af:db:95:5e:71:c3:56:4b:ee:03:01:
                    ea:6b:63:5c:a5:c0:53:3e:63:23:1c:4e:9d:98:8d:
                    1c:2a:da:69:6c:06:72:5b:16:28:fa:9f:13:56:42:
                    33:c4:6d:b1:77:18:2e:58:10:16:d4:35:db:20:bc:
                    a5:ab:ed:8d:4a:6b:cb:3d:5d:a2:46:2c:2c:85:26:
                    41:44:dd:42:31:6e:99:0d:48:d2:02:9c:a0:d7:b0:
                    ba:9f:d3:8b:e5:b9:08:37:6e:0e:64:3c:64:bf:d9:
                    1d:cd:77:e6:e1:bb:c3:b2:98:83:74:4c:0d:cd:e9:
                    d9:f7:b8:eb:92:96:52:e4:af:c5:c2:8a:a4:6e:a2:
                    b5:4f:e9:a2:dc:04:8d:aa:74:02:55:16:36:c9:ee:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:14:D3:58:9E:73:FC:83:65:09:1E:AC:F5:77:FF:92:81:BD:01
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.24.0/23
                  104.234.36.0/23
                  104.234.60.0/23
                  104.234.100.0/24
                  104.234.109.0/24
                  104.234.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:71:ec:c2:6a:6e:d1:0f:8d:c1:d2:07:1f:2d:63:41:8c:aa:
         b5:ba:db:89:c1:65:95:3f:26:d9:a7:66:6e:9e:1a:87:ab:c3:
         da:9c:40:a3:02:a6:5c:c5:ac:92:7c:83:4f:e6:4d:b9:8e:50:
         0e:b7:d6:c4:52:68:93:a7:ed:cf:ba:06:9a:fc:3b:fc:19:d2:
         a3:5b:73:1d:3c:35:23:c9:51:1c:e6:d3:6d:bb:b8:63:94:5d:
         b1:53:5e:a0:f8:84:dd:33:3d:67:5b:1e:e5:a8:35:71:21:0d:
         af:2d:8f:a5:bc:ff:ca:84:a8:f4:d0:d8:3b:c8:6c:87:e9:54:
         f3:f0:b0:36:99:5f:7a:da:9d:54:95:4c:27:69:cd:08:2f:bb:
         f9:96:75:fb:b5:c2:5b:4c:a5:f5:21:81:88:32:c1:ec:8b:e6:
         14:98:ff:e8:49:7a:98:52:35:43:bf:e7:98:15:bd:cc:47:8e:
         42:48:47:53:39:33:b2:ce:30:58:a3:e9:d0:3c:0d:37:6d:63:
         18:41:cc:b6:60:23:60:18:cd:a5:8c:ba:0e:3e:24:bb:10:57:
         dd:6f:ab:92:4a:ac:20:82:8a:52:3b:3c:b1:5d:b8:24:c2:83:
         35:c2:0f:e8:bf:60:85:7c:5c:0d:90:e0:05:86:4e:5f:7b:1e:
         f9:d9:a8:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org