Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          mwqbCgvJxToUc3zfCgSVMbrZDV/ZJHv2eFqqIZjOaD4=
Subject key identifier:   08:8F:93:2C:3E:12:34:49:91:DB:38:74:58:41:A9:9D:61:CB:52:F4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5F2C6EBDBCD844A7EF0CC415CCE4F1DA8AF4EEA7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Thu 02 May 2024 00:02:19 +0000
ROA not before:           Wed 01 May 2024 23:57:19 +0000
ROA not after:            Thu 01 May 2025 00:02:19 +0000
asID:                     834
IP address blocks:        104.234.136.0/24 maxlen: 24
                          104.234.143.0/24 maxlen: 24
                          104.234.248.0/23 maxlen: 24
                          206.53.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2c:6e:bd:bc:d8:44:a7:ef:0c:c4:15:cc:e4:f1:da:8a:f4:ee:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May  1 23:57:19 2024 GMT
            Not After : May  1 00:02:19 2025 GMT
        Subject: CN=088F932C3E12344991DB38745841A99D61CB52F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:d0:66:12:b2:64:d3:a2:73:93:59:2a:0f:
                    9e:29:5f:a2:cd:c7:a8:d3:a0:3d:8c:83:ed:e9:bc:
                    a3:90:86:67:f2:12:47:2a:43:f9:27:b0:5d:e7:e6:
                    48:5d:5d:f8:ed:eb:cf:66:60:ff:0e:06:d6:96:ac:
                    a6:08:f6:01:46:4d:30:11:ee:be:a5:4c:c4:36:26:
                    0d:6b:4c:23:a8:3b:89:87:f2:37:5b:a8:6a:90:8c:
                    e8:f9:6d:40:15:5e:37:23:56:97:43:e3:ae:5c:de:
                    37:e4:f1:19:3b:a4:25:37:b4:d1:17:4f:13:a4:3e:
                    fd:ad:71:f6:21:4c:45:65:a8:4c:c4:72:7f:ff:2b:
                    35:83:2c:c9:1d:55:62:47:09:bb:29:95:78:dd:12:
                    6b:00:4c:69:0e:e7:ac:e2:1d:54:69:77:e3:9c:c3:
                    2a:6b:0b:0a:2b:eb:ef:8a:fd:39:0c:ad:f8:09:78:
                    61:e2:04:e4:76:1e:89:74:15:89:cc:9a:a8:89:df:
                    5c:53:43:bb:65:06:f6:2a:f3:89:24:ed:57:1d:9d:
                    45:c0:03:56:c4:e7:b9:d9:fe:44:04:31:cb:cb:5c:
                    3b:49:5a:0b:a9:d5:8d:d8:0a:4c:7d:59:84:e4:ee:
                    f9:ba:31:5c:52:e8:ed:28:94:1e:e3:b7:19:9c:14:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8F:93:2C:3E:12:34:49:91:DB:38:74:58:41:A9:9D:61:CB:52:F4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.136.0/24
                  104.234.143.0/24
                  104.234.248.0/23
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:41:8f:e4:b8:1c:a2:d0:b8:a4:fb:d7:a5:86:af:36:5f:96:
         f6:62:d9:15:88:fd:db:8c:64:84:f4:a7:c2:d8:7e:84:36:70:
         a4:a6:e3:7e:c9:88:9e:64:fc:18:bc:ca:6a:9a:03:5e:27:8e:
         74:17:8f:a1:93:53:7f:d6:9c:e6:ed:7b:37:aa:c2:7d:15:6e:
         b1:5a:74:da:f6:b1:1b:0c:48:0a:d7:c2:43:3b:87:d9:d3:a1:
         09:67:eb:aa:7c:19:31:5b:2b:d8:83:bf:d4:ad:6c:bb:7d:c3:
         55:e0:36:39:c1:5d:99:f7:5e:36:ed:a0:00:79:58:57:c7:22:
         3e:1c:70:2e:ff:a3:af:db:b7:f1:74:91:78:6a:09:04:a9:8b:
         02:85:bd:4d:0d:eb:98:b4:81:f1:15:b9:5b:b6:22:e4:90:60:
         34:cf:c7:e9:c4:62:2f:5f:4f:53:16:c1:84:41:d0:2e:26:bd:
         ab:9a:fd:da:c0:4e:bf:2e:4a:24:fa:fc:b6:5e:4d:54:f0:44:
         37:34:4a:b1:b4:fb:4c:d4:be:55:c7:87:7f:e0:3c:44:0d:3a:
         b6:83:53:a1:66:3f:48:20:5d:6a:8e:5f:fa:45:08:87:ee:94:
         18:01:85:30:50:3c:d3:ac:1c:0e:f4:51:fb:cd:0c:a6:97:a1:
         6b:eb:88:80
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUXyxuvbzYRKfvDMQVzOTx2or07qcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNTAxMjM1NzE5WhcNMjUwNTAxMDAwMjE5
WjAzMTEwLwYDVQQDEygwODhGOTMyQzNFMTIzNDQ5OTFEQjM4NzQ1ODQxQTk5RDYx
Q0I1MkY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypfQZhKyZNOi
c5NZKg+eKV+izceo06A9jIPt6byjkIZn8hJHKkP5J7Bd5+ZIXV347evPZmD/DgbW
lqymCPYBRk0wEe6+pUzENiYNa0wjqDuJh/I3W6hqkIzo+W1AFV43I1aXQ+OuXN43
5PEZO6QlN7TRF08TpD79rXH2IUxFZahMxHJ//ys1gyzJHVViRwm7KZV43RJrAExp
Dues4h1UaXfjnMMqawsKK+vviv05DK34CXhh4gTkdh6JdBWJzJqoid9cU0O7ZQb2
KvOJJO1XHZ1FwANWxOe52f5EBDHLy1w7SVoLqdWN2ApMfVmE5O75ujFcUujtKJQe
47cZnBRz2wIDAQABo4ICjjCCAoowHQYDVR0OBBYEFAiPkyw+EjRJkds4dFhBqZ1h
y1L0MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggr
BgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqiAMEAGjqjwMEAWjq+AMEAM41PzAN
BgkqhkiG9w0BAQsFAAOCAQEAGUGP5LgcotC4pPvXpYavNl+W9mLZFYj924xkhPSn
wth+hDZwpKbjfsmInmT8GLzKapoDXieOdBePoZNTf9ac5u17N6rCfRVusVp02vax
GwxICtfCQzuH2dOhCWfrqnwZMVsr2IO/1K1su33DVeA2OcFdmfdeNu2gAHlYV8ci
PhxwLv+jr9u38XSReGoJBKmLAoW9TQ3rmLSB8RW5W7Yi5JBgNM/H6cRiL19PUxbB
hEHQLia9q5r92sBOvy5KJPr8tl5NVPBENzRKsbT7TNS+VceHf+A8RA06toNToWY/
SCBdao5f+kUIh+6UGAGFMFA806wcDvRR+80Mppeha+uIgA==
-----END CERTIFICATE-----
Generated at Thu May 2 01:05:20 2024 by rpki-client on console-fra.rpki-client.org