Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          BXDWePIuNDeUhjgVNzblviu9hemgLGBOlI3B9+WBPc4=
Subject key identifier:   80:F3:9F:0A:3F:07:1F:01:E1:35:6E:A8:0A:24:16:56:F7:57:5E:1B
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       4C834B73A3E6CE93BC6182B4B674F91042ECAB53
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa
Signing time:             Sat 16 Nov 2024 06:15:29 +0000
ROA not before:           Sat 16 Nov 2024 06:10:29 +0000
ROA not after:            Sat 15 Nov 2025 06:15:29 +0000
asID:                     396356
IP address blocks:        75.102.48.0/24 maxlen: 24
                          205.234.163.0/24 maxlen: 24
                          205.234.184.0/24 maxlen: 24
                          205.234.185.0/24 maxlen: 24
                          205.234.186.0/24 maxlen: 24
                          205.234.187.0/24 maxlen: 24
                          205.234.222.0/24 maxlen: 24
                          205.234.223.0/24 maxlen: 24
                          205.234.224.0/24 maxlen: 24
                          205.234.225.0/24 maxlen: 24
                          216.246.0.0/24 maxlen: 24
                          216.246.1.0/24 maxlen: 24
                          216.246.2.0/24 maxlen: 24
                          216.246.24.0/24 maxlen: 24
                          216.246.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:83:4b:73:a3:e6:ce:93:bc:61:82:b4:b6:74:f9:10:42:ec:ab:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 16 06:10:29 2024 GMT
            Not After : Nov 15 06:15:29 2025 GMT
        Subject: CN=80F39F0A3F071F01E1356EA80A241656F7575E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:ba:3c:87:c8:7d:4e:9a:f4:de:46:2d:92:
                    f8:58:f0:f8:80:ed:ac:d0:f9:d8:15:f6:76:b8:55:
                    8c:fc:c4:2f:0e:b0:90:f6:f3:26:c8:ed:d7:19:56:
                    c5:11:c6:1b:4b:f2:10:93:71:ed:4e:03:78:11:db:
                    fc:c5:c0:cf:86:5f:f3:5e:6b:49:1c:c8:f7:1b:22:
                    bf:45:8c:55:55:ac:08:35:7e:3d:3e:0d:a9:69:64:
                    cf:a0:3b:5b:3c:13:4a:68:6d:ff:9c:32:c9:ed:9a:
                    32:79:33:f3:88:a1:d4:bb:cd:bc:3a:51:b1:2f:44:
                    3c:d1:db:bf:24:40:34:83:86:38:ae:4f:19:42:07:
                    f8:e4:dd:d8:5c:92:26:fb:26:c1:7e:a6:5c:ab:f8:
                    88:cb:d6:b3:66:01:95:47:5a:30:20:71:25:f3:e5:
                    c5:a9:57:c6:76:08:72:8d:f0:11:e2:ac:c9:4e:c4:
                    89:1d:48:12:a1:e7:96:87:e6:4b:89:2b:e1:6d:41:
                    56:de:ae:e8:e2:d4:87:6f:fc:43:21:ca:f4:8a:e9:
                    42:63:e2:0c:b7:4b:16:3d:56:0a:a7:2e:bc:1c:b5:
                    71:c6:90:35:22:b7:ab:ec:0a:af:af:72:48:a0:8d:
                    1d:ac:11:d9:1c:ef:b6:e9:97:d3:80:2d:e0:a2:24:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F3:9F:0A:3F:07:1F:01:E1:35:6E:A8:0A:24:16:56:F7:57:5E:1B
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.48.0/24
                  205.234.163.0/24
                  205.234.184.0/22
                  205.234.222.0-205.234.225.255
                  216.246.0.0-216.246.2.255
                  216.246.24.0/24
                  216.246.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:5e:8e:73:4a:7e:d5:ea:98:76:c5:6c:4c:91:62:96:b3:
         d9:09:6e:9a:0c:e1:44:b4:fd:dd:02:ad:a5:c3:82:2d:36:f0:
         df:74:98:e0:15:3c:b5:59:85:c2:b7:13:d6:58:d9:c6:8d:39:
         f0:13:71:58:03:28:8f:30:9e:09:bf:1f:90:bb:5d:b6:89:21:
         18:ae:b6:97:52:72:98:71:cb:96:c4:de:3d:28:03:da:d3:23:
         38:b8:12:93:f9:c5:45:0d:a5:2e:0a:97:0b:cc:58:c8:13:c4:
         59:6c:fd:7d:a5:8b:72:c3:b1:c6:93:21:f7:8c:bc:4f:73:df:
         2a:60:1e:5b:6e:48:a3:c1:e8:ba:55:41:8a:ab:bc:7c:d4:fb:
         8d:b3:37:2c:c1:75:a3:32:5b:c7:dd:1d:16:ad:51:3c:9f:f1:
         15:57:9c:e7:a6:ba:dc:d6:f3:cf:69:36:d9:23:2f:98:8b:1b:
         4b:41:56:89:62:a8:46:91:96:9e:5f:a0:8e:80:50:9d:c3:3b:
         0d:e3:c8:78:52:fe:aa:56:64:a0:19:1d:61:b9:c6:23:fd:f5:
         3f:91:6f:89:0f:01:bd:70:6e:77:e0:77:d6:d4:6d:fa:43:ea:
         8d:62:96:cc:81:b5:57:fd:0e:9e:92:d5:69:d6:4a:84:4d:3e:
         af:1a:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:40 2024 by rpki-client on console-fra.rpki-client.org