Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS52695.roa
File:                     AS52695.roa (raw, json)
Hash identifier:          93IhGFZPW8ymzdRpKX3ghdINIxV/N50XiaJOlC6DXqU=
Subject key identifier:   AC:73:89:39:78:01:E3:B9:B2:A3:29:46:0A:50:5C:97:C4:F1:E1:2B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7F8632C33BC554ED17E2E8BFD090038ACF9702DA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS52695.roa
Signing time:             Thu 17 Oct 2024 21:17:22 +0000
ROA not before:           Thu 17 Oct 2024 21:12:22 +0000
ROA not after:            Thu 16 Oct 2025 21:17:22 +0000
asID:                     52695
IP address blocks:        107.172.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:32:c3:3b:c5:54:ed:17:e2:e8:bf:d0:90:03:8a:cf:97:02:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 17 21:12:22 2024 GMT
            Not After : Oct 16 21:17:22 2025 GMT
        Subject: CN=AC7389397801E3B9B2A329460A505C97C4F1E12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:73:40:bc:ce:40:7e:f8:65:2a:fe:94:55:50:
                    f8:46:af:a3:40:1c:66:53:4b:02:09:91:fc:d3:f0:
                    32:97:19:d9:64:5c:5c:81:91:dc:dd:f5:1d:b4:03:
                    c1:28:65:36:5a:5f:71:9f:7e:70:38:ae:c6:1e:06:
                    f9:cf:bf:81:5a:2a:cb:0a:f5:a7:01:d7:30:40:98:
                    25:62:cc:75:17:55:cc:23:e5:f0:d4:e2:88:d2:4a:
                    e7:cb:24:5b:f7:f3:d8:93:a0:c0:f5:57:d3:95:d0:
                    31:48:aa:7f:0d:ad:56:e9:8e:36:51:d3:c0:07:eb:
                    72:6c:61:c1:26:94:10:57:3d:fe:b3:02:1d:b8:03:
                    d5:dc:11:a9:e5:c1:a1:0a:a4:c7:1a:63:bb:ad:ae:
                    a5:11:a9:c7:f1:41:00:4d:14:3c:ba:65:dd:62:4a:
                    b5:ee:f6:35:33:c0:31:9f:bd:56:ac:d4:5b:85:64:
                    c2:74:f8:9d:02:b0:da:d7:06:59:a9:e5:91:f2:d9:
                    29:15:7f:93:52:f0:4b:52:4b:83:a3:10:d0:ab:7a:
                    a8:72:4b:ca:51:49:f4:1b:c5:b1:bb:c1:77:ad:e3:
                    74:12:f2:d6:77:99:b7:fd:81:75:63:77:c5:1b:15:
                    02:83:9b:77:00:b0:69:0d:0f:28:59:6c:01:30:09:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:73:89:39:78:01:E3:B9:B2:A3:29:46:0A:50:5C:97:C4:F1:E1:2B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS52695.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.172.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:84:90:31:dd:2c:83:7b:52:d9:7b:08:9b:d0:fa:08:40:50:
         54:87:04:81:53:e1:aa:cc:25:a3:2e:57:09:46:f7:ac:1f:0d:
         33:b0:03:98:d5:a9:08:bd:c8:67:41:f9:c0:b4:2f:69:ac:22:
         b4:b2:a4:fd:7b:59:a1:0e:01:f6:cf:a1:b6:0c:58:1c:58:38:
         08:bc:78:11:6c:d2:31:fa:62:09:f9:ce:3e:35:c9:f4:f1:7a:
         74:38:b0:cb:50:ce:c4:6c:5c:e7:fe:b5:2c:9d:5a:6a:df:13:
         ae:6a:31:e0:e0:56:41:4a:32:cc:91:a2:f8:24:3a:29:b3:47:
         ae:78:13:0b:52:14:aa:9f:b6:89:e0:f7:53:91:58:bc:ee:0e:
         8c:26:76:5f:7b:cd:15:fb:2f:8c:32:a6:d7:44:78:68:8f:bd:
         d2:16:9a:e1:69:39:0a:bf:73:db:b5:98:16:32:88:c6:5e:db:
         be:34:f8:d9:9a:84:3a:81:b0:83:62:e6:88:bd:71:fe:66:d1:
         cd:4d:5c:68:36:b6:bc:09:ab:5e:2a:2f:ec:d8:49:80:db:82:
         31:34:92:7f:6e:bd:37:df:a9:5e:2a:a5:15:c6:9c:f5:10:7f:
         c4:fe:72:df:bf:d6:85:08:d3:5a:07:e6:c2:e3:2c:6e:31:3b:
         9f:57:b0:6a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUf4YywzvFVO0X4ui/0JADis+XAtowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQxMDE3MjExMjIyWhcNMjUxMDE2MjExNzIy
WjAzMTEwLwYDVQQDEyhBQzczODkzOTc4MDFFM0I5QjJBMzI5NDYwQTUwNUM5N0M0
RjFFMTJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHNAvM5Afvhl
Kv6UVVD4Rq+jQBxmU0sCCZH80/AylxnZZFxcgZHc3fUdtAPBKGU2Wl9xn35wOK7G
Hgb5z7+BWirLCvWnAdcwQJglYsx1F1XMI+Xw1OKI0krnyyRb9/PYk6DA9VfTldAx
SKp/Da1W6Y42UdPAB+tybGHBJpQQVz3+swIduAPV3BGp5cGhCqTHGmO7ra6lEanH
8UEATRQ8umXdYkq17vY1M8Axn71WrNRbhWTCdPidArDa1wZZqeWR8tkpFX+TUvBL
UkuDoxDQq3qockvKUUn0G8Wxu8F3reN0EvLWd5m3/YF1Y3fFGxUCg5t3ALBpDQ8o
WWwBMAn29wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKxziTl4AeO5sqMpRgpQXJfE
8eErMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzUyNjk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6yYMA0GCSqGSIb3DQEBCwUAA4IB
AQA5hJAx3SyDe1LZewib0PoIQFBUhwSBU+GqzCWjLlcJRvesHw0zsAOY1akIvchn
QfnAtC9prCK0sqT9e1mhDgH2z6G2DFgcWDgIvHgRbNIx+mIJ+c4+Ncn08Xp0OLDL
UM7EbFzn/rUsnVpq3xOuajHg4FZBSjLMkaL4JDops0eueBMLUhSqn7aJ4PdTkVi8
7g6MJnZfe80V+y+MMqbXRHhoj73SFprhaTkKv3PbtZgWMojGXtu+NPjZmoQ6gbCD
YuaIvXH+ZtHNTVxoNra8CateKi/s2EmA24IxNJJ/br0336leKqUVxpz1EH/E/nLf
v9aFCNNaB+bC4yxuMTufV7Bq
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org