Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          GRno5/O2BjeymCQO+ZcXDg+7SOfjjX4uREBTH5k+LCk=
Subject key identifier:   BD:34:88:90:F8:5A:77:71:26:00:35:C0:7E:DD:20:66:B4:AF:1E:7D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       31AE434B3B693E9FC0F005CA0484209E555A423F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa
Signing time:             Fri 13 Oct 2023 00:00:07 +0000
ROA not before:           Thu 12 Oct 2023 23:55:07 +0000
ROA not after:            Fri 11 Oct 2024 00:00:07 +0000
asID:                     8100
IP address blocks:        104.234.24.0/23 maxlen: 24
                          104.234.36.0/23 maxlen: 24
                          104.234.60.0/23 maxlen: 24
                          104.234.100.0/24 maxlen: 24
                          104.234.109.0/24 maxlen: 24
                          104.234.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 18:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ae:43:4b:3b:69:3e:9f:c0:f0:05:ca:04:84:20:9e:55:5a:42:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 12 23:55:07 2023 GMT
            Not After : Oct 11 00:00:07 2024 GMT
        Subject: CN=BD348890F85A7771260035C07EDD2066B4AF1E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:2f:12:24:29:b4:9c:81:88:4c:f6:52:af:
                    41:18:0a:4e:49:78:b8:e0:b7:b3:0f:0d:a4:9e:70:
                    f9:0c:d4:a3:70:21:99:b7:f8:37:a4:60:ab:d3:75:
                    76:68:4e:fc:87:44:2c:33:81:8f:37:26:af:b7:cb:
                    6a:ff:72:69:a1:78:43:2d:29:94:58:ad:53:0e:a9:
                    5e:d4:ca:42:2d:63:b5:c6:94:5b:56:d6:45:32:57:
                    9a:72:01:ee:54:43:d7:67:4f:64:3f:bd:8f:de:6b:
                    46:e3:71:60:a8:94:ef:a3:8c:f5:40:8a:dd:d1:82:
                    21:4e:b6:8e:6c:8a:4d:91:de:66:90:95:dc:06:77:
                    ad:73:31:73:3a:2d:5e:be:0e:8f:47:e0:bc:dd:b5:
                    ca:d5:89:d2:09:e2:ff:38:71:01:b0:e8:87:b1:76:
                    8d:17:06:97:cc:3c:4d:7f:ea:53:65:ab:df:35:0a:
                    46:7e:c9:fd:ce:4e:f4:43:b7:61:18:41:37:f6:bd:
                    1a:f1:94:34:fc:72:83:c9:a5:84:d7:c7:6b:86:24:
                    b2:c5:22:4f:94:f6:86:2d:06:08:0b:e6:ba:8c:fd:
                    3e:34:fb:e6:90:26:c5:76:1d:5b:4a:85:38:73:95:
                    d8:1f:12:d8:80:e7:df:82:c4:58:ec:cb:b3:90:cf:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:88:90:F8:5A:77:71:26:00:35:C0:7E:DD:20:66:B4:AF:1E:7D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.24.0/23
                  104.234.36.0/23
                  104.234.60.0/23
                  104.234.100.0/24
                  104.234.109.0/24
                  104.234.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b1:4b:f5:bf:36:d0:8a:f4:95:2e:7c:64:1a:1c:91:8c:8a:
         70:ac:f8:6b:2f:7c:c7:b0:a4:3a:0f:77:dd:6c:b3:b6:23:d9:
         be:d3:e9:05:fc:b6:65:78:35:ec:92:9b:c5:9c:ba:01:3f:57:
         66:10:22:04:49:29:3d:9b:f2:f7:c4:f7:a4:4b:13:28:a1:e4:
         e7:87:ea:e4:9f:9d:fd:d2:cf:a1:a0:dc:36:2a:c9:56:bb:e7:
         4d:31:0a:20:c0:c4:7b:c8:b5:f3:9a:63:23:8b:06:fc:3f:19:
         c0:90:3b:6d:22:49:31:9d:02:ff:ea:bd:25:1f:6c:54:51:49:
         63:99:00:82:1f:d8:0a:e9:91:75:bf:9f:20:72:c8:59:f0:8c:
         a2:db:55:e6:db:0b:c4:9a:a0:bc:76:4b:4e:48:b0:87:15:7b:
         bf:2e:a9:03:ec:1c:07:0e:fb:33:ae:66:11:a0:cb:0d:8b:9c:
         3e:70:d7:f1:8c:f9:9f:57:b1:f0:3d:ce:fc:d2:8d:1e:3e:e3:
         2a:58:d8:5f:c8:58:28:78:4d:80:ac:ba:4f:29:b7:10:41:aa:
         83:05:95:50:86:e0:c7:3d:15:bf:f7:cd:18:2d:35:95:76:ff:
         3e:a9:f1:61:61:dc:3b:5c:24:0b:df:0e:7e:1b:33:5b:19:a3:
         7c:36:5a:29
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUMa5DSztpPp/A8AXKBIQgnlVaQj8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMDEyMjM1NTA3WhcNMjQxMDExMDAwMDA3
WjAzMTEwLwYDVQQDEyhCRDM0ODg5MEY4NUE3NzcxMjYwMDM1QzA3RUREMjA2NkI0
QUYxRTdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorAvEiQptJyB
iEz2Uq9BGApOSXi44LezDw2knnD5DNSjcCGZt/g3pGCr03V2aE78h0QsM4GPNyav
t8tq/3JpoXhDLSmUWK1TDqle1MpCLWO1xpRbVtZFMleacgHuVEPXZ09kP72P3mtG
43FgqJTvo4z1QIrd0YIhTraObIpNkd5mkJXcBnetczFzOi1evg6PR+C83bXK1YnS
CeL/OHEBsOiHsXaNFwaXzDxNf+pTZavfNQpGfsn9zk70Q7dhGEE39r0a8ZQ0/HKD
yaWE18drhiSyxSJPlPaGLQYIC+a6jP0+NPvmkCbFdh1bSoU4c5XYHxLYgOffgsRY
7MuzkM98MQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFL00iJD4WndxJgA1wH7dIGa0
rx59MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzgxMDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI
KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAFo6hgDBAFo6iQDBAFo6jwDBABo6mQD
BABo6m0DBABo6uEwDQYJKoZIhvcNAQELBQADggEBAD2xS/W/NtCK9JUufGQaHJGM
inCs+GsvfMewpDoPd91ss7Yj2b7T6QX8tmV4NeySm8WcugE/V2YQIgRJKT2b8vfE
96RLEyih5OeH6uSfnf3Sz6Gg3DYqyVa7500xCiDAxHvItfOaYyOLBvw/GcCQO20i
STGdAv/qvSUfbFRRSWOZAIIf2ArpkXW/nyByyFnwjKLbVebbC8SaoLx2S05IsIcV
e78uqQPsHAcO+zOuZhGgyw2LnD5w1/GM+Z9XsfA9zvzSjR4+4ypY2F/IWCh4TYCs
uk8ptxBBqoMFlVCG4Mc9Fb/3zRgtNZV2/z6p8WFh3DtcJAvfDn4bM1sZo3w2Wik=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:32:14 2024 by rpki-client on console-fra.rpki-client.org