Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS46844.roa
File:                     AS46844.roa (raw, json)
Hash identifier:          VPQr4rOGKT/syfQAPlkJvsMhlDvPVBOl8Xa9HbdKxVI=
Subject key identifier:   2F:E6:44:A8:5F:4F:95:9F:59:8B:D1:E0:20:A3:70:CA:1E:F8:1E:0F
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4C4B648981C2F371DF4FD0242B612AEDF09E6BCA
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS46844.roa
Signing time:             Thu 21 Sep 2023 11:13:05 +0000
ROA not before:           Thu 21 Sep 2023 11:08:05 +0000
ROA not after:            Thu 19 Sep 2024 11:13:05 +0000
asID:                     46844
IP address blocks:        205.234.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4b:64:89:81:c2:f3:71:df:4f:d0:24:2b:61:2a:ed:f0:9e:6b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Sep 21 11:08:05 2023 GMT
            Not After : Sep 19 11:13:05 2024 GMT
        Subject: CN=2FE644A85F4F959F598BD1E020A370CA1EF81E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:39:03:c7:f3:7a:81:b2:c3:db:b1:7c:c4:
                    f7:bb:21:8b:05:c5:1d:1b:1b:a1:62:26:bb:64:54:
                    18:a2:d3:97:20:c9:ee:db:95:73:74:1a:cb:ee:bb:
                    37:67:2d:c9:e0:fd:f7:57:be:dd:61:a1:33:b4:97:
                    3c:68:6b:53:6f:65:00:3d:e9:b6:c8:aa:b2:0a:a1:
                    ae:20:c0:c5:a5:ad:f3:e4:3d:22:b4:f1:27:9a:47:
                    2f:ba:0b:b5:31:22:0f:a8:68:4c:9b:bd:02:bd:e2:
                    82:99:12:86:a4:83:52:50:e6:ad:79:1c:1b:4d:4e:
                    fc:db:64:b0:22:6a:f7:58:bd:73:15:d7:ea:9a:97:
                    30:96:ff:d8:91:e7:38:f8:1b:17:ee:3d:2d:1d:ed:
                    31:c2:5e:7f:03:80:b6:79:6c:fc:69:54:33:2f:19:
                    41:96:f3:2e:22:ce:a4:a0:8b:0c:10:24:45:7e:5e:
                    ba:3f:b2:a0:db:df:11:15:0b:68:1b:82:25:a1:a4:
                    b4:09:3a:c5:10:19:ec:f0:2b:5b:93:52:e0:c0:ba:
                    35:64:c1:80:02:eb:a3:60:d1:79:2d:f8:b7:3c:49:
                    dc:2b:2e:bf:46:76:f0:72:f2:4c:56:57:36:72:04:
                    ba:79:6f:8d:2b:8c:01:c1:8b:8e:62:1e:7b:3d:fb:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:44:A8:5F:4F:95:9F:59:8B:D1:E0:20:A3:70:CA:1E:F8:1E:0F
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS46844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:cb:7f:4f:07:a0:e1:4f:1e:8b:fa:1c:96:91:11:a5:00:
         fa:9a:f4:8a:31:e3:d2:a0:48:18:97:1e:0f:2e:91:cf:db:6e:
         ad:61:49:e0:de:19:39:15:ab:34:d3:9a:04:e0:99:cc:0b:d9:
         f4:93:82:46:26:90:be:ce:e6:8f:63:1e:76:c5:c3:66:3b:6f:
         ae:9d:5b:05:23:4d:57:c3:4f:5a:0d:dd:0a:32:7d:df:1a:c1:
         fb:2f:04:ab:db:69:f9:97:31:54:ae:f3:e3:bb:c5:70:44:88:
         29:84:53:fd:00:88:15:45:30:03:56:03:70:96:81:75:0f:dc:
         ce:c9:01:30:da:a5:6f:23:40:8a:54:de:b6:7d:2f:ad:e2:7e:
         1b:12:f3:56:a2:32:ac:35:1d:53:a3:e1:c6:ac:29:bf:76:e8:
         82:07:ea:ca:ab:b6:40:20:bd:27:0a:32:27:44:6d:fb:66:20:
         6d:61:f7:bb:10:7b:d2:fd:1c:c3:ae:75:e7:83:25:a0:f9:6e:
         37:0a:b9:22:bb:29:35:95:51:61:01:82:91:a0:02:12:d1:29:
         86:48:49:86:b9:1a:d1:2f:79:39:21:bf:04:72:69:b5:c2:83:
         de:78:4f:0a:4d:be:da:cd:09:6d:fa:c0:d3:ba:5f:11:e6:06:
         46:4a:cc:31
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUTEtkiYHC83HfT9AkK2Eq7fCea8owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwOTIxMTEwODA1WhcNMjQwOTE5MTExMzA1
WjAzMTEwLwYDVQQDEygyRkU2NDRBODVGNEY5NTlGNTk4QkQxRTAyMEEzNzBDQTFF
RjgxRTBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTs5A8fzeoGy
w9uxfMT3uyGLBcUdGxuhYia7ZFQYotOXIMnu25VzdBrL7rs3Zy3J4P33V77dYaEz
tJc8aGtTb2UAPem2yKqyCqGuIMDFpa3z5D0itPEnmkcvugu1MSIPqGhMm70CveKC
mRKGpINSUOateRwbTU7822SwImr3WL1zFdfqmpcwlv/Ykec4+BsX7j0tHe0xwl5/
A4C2eWz8aVQzLxlBlvMuIs6koIsMECRFfl66P7Kg298RFQtoG4IloaS0CTrFEBns
8Ctbk1LgwLo1ZMGAAuujYNF5Lfi3PEncKy6/RnbwcvJMVlc2cgS6eW+NK4wBwYuO
Yh57PfuQIwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFC/mRKhfT5WfWYvR4CCjcMoe
+B4PMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzQ2ODQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeqxMA0GCSqGSIb3DQEBCwUAA4IB
AQCwE8t/Tweg4U8ei/oclpERpQD6mvSKMePSoEgYlx4PLpHP226tYUng3hk5Fas0
05oE4JnMC9n0k4JGJpC+zuaPYx52xcNmO2+unVsFI01Xw09aDd0KMn3fGsH7LwSr
22n5lzFUrvPju8VwRIgphFP9AIgVRTADVgNwloF1D9zOyQEw2qVvI0CKVN62fS+t
4n4bEvNWojKsNR1To+HGrCm/duiCB+rKq7ZAIL0nCjInRG37ZiBtYfe7EHvS/RzD
rnXngyWg+W43Crkiuyk1lVFhAYKRoAIS0SmGSEmGuRrRL3k5Ib8Ecmm1woPeeE8K
Tb7azQlt+sDTul8R5gZGSswx
-----END CERTIFICATE-----
Generated at Fri May 3 11:55:58 2024 by rpki-client on console-fra.rpki-client.org