Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          7eC6bkrncPAolLn6IKU56qfRmqc8IqETDEZC6UorgKY=
Subject key identifier:   B2:9A:84:35:6A:C3:87:3F:71:CE:0A:39:D8:47:60:8E:64:B5:2D:BE
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       6FE2174B9810DEE888447EF0D7501E421AD0C9F4
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20383334.roa
Signing time:             Sat 06 Apr 2024 02:57:05 +0000
ROA not before:           Sat 06 Apr 2024 02:52:05 +0000
ROA not after:            Sat 05 Apr 2025 02:57:05 +0000
asID:                     834
IP address blocks:        45.42.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:17:4b:98:10:de:e8:88:44:7e:f0:d7:50:1e:42:1a:d0:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Apr  6 02:52:05 2024 GMT
            Not After : Apr  5 02:57:05 2025 GMT
        Subject: CN=B29A84356AC3873F71CE0A39D847608E64B52DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:0a:a1:25:af:67:86:5a:11:84:57:5f:12:
                    e9:e2:fb:1d:63:24:a4:a6:0d:bf:c8:95:06:70:2d:
                    ec:84:e0:02:7e:74:c1:a8:e5:80:8c:2f:4f:a5:0e:
                    f9:d7:f7:c3:e0:0f:bc:4b:bc:3a:fb:d4:c8:02:3a:
                    71:84:9c:0e:6f:69:f2:3c:71:aa:73:40:ab:37:81:
                    02:c1:f2:19:40:67:44:ab:0a:de:2d:f9:cc:fa:c4:
                    1a:16:55:77:b9:a7:20:ce:1f:5b:11:a7:10:c8:8b:
                    8c:79:ab:64:69:bd:3c:93:3f:34:ba:b7:66:d0:3e:
                    e4:e8:8d:ce:90:ae:ff:8f:4e:a9:b3:59:cb:f0:88:
                    91:1c:90:3f:1a:14:53:9f:5a:b4:89:c1:f6:28:fa:
                    55:48:c3:8e:ad:e2:79:16:9f:90:a5:9f:ab:0d:71:
                    09:53:6d:1a:dd:9a:cb:54:ec:20:af:b5:25:09:53:
                    76:b0:c6:d9:66:e4:5e:9b:5d:15:9a:cd:43:5c:e7:
                    68:dc:3b:51:b1:00:a6:ce:1b:42:4e:14:f7:85:57:
                    26:4f:2b:46:ef:c3:09:f8:fb:4c:2b:e6:b5:83:c8:
                    3a:56:64:40:60:7b:24:f4:47:26:3e:3b:76:45:8a:
                    f4:82:51:c2:3a:3e:ab:74:36:4d:8e:30:87:96:c8:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:84:35:6A:C3:87:3F:71:CE:0A:39:D8:47:60:8E:64:B5:2D:BE
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:69:b1:d9:66:3f:cc:82:7a:13:19:83:87:a9:da:51:d5:08:
         e8:86:85:4d:ef:40:b6:1b:fe:9b:7c:16:98:4e:cc:c2:10:15:
         c4:40:a2:28:06:09:bb:78:d7:84:00:7a:0c:27:5a:e0:c8:0d:
         b3:a0:16:51:6d:b9:e1:d1:77:91:40:38:e2:91:b2:ec:45:c2:
         63:ae:85:58:c9:3a:7e:0b:f2:79:27:40:c2:4a:e0:b3:dd:79:
         71:e5:27:92:76:92:dd:9c:24:c7:58:f0:e4:c8:fd:b4:51:60:
         df:a4:01:ec:a5:15:e5:63:75:7a:89:f0:88:74:b0:32:bb:3e:
         fe:df:d1:5f:af:42:07:1d:49:4d:3b:2d:1f:05:1f:2a:0c:a3:
         61:5f:c0:ea:d3:62:56:18:c5:bf:64:d4:7e:11:51:83:d4:74:
         48:b8:85:88:01:dc:b0:ce:2a:ff:57:3a:03:b2:7e:f9:aa:7f:
         75:aa:35:bb:44:71:69:29:02:ec:7e:ff:9d:98:9b:ce:85:d3:
         d4:f9:16:9a:50:10:5c:9f:ea:89:44:a5:dc:01:64:1e:22:d9:
         dd:f8:7a:5e:b3:a0:ef:b2:ae:d7:0f:60:4c:4e:c8:01:aa:2b:
         36:d4:68:69:04:4b:e3:15:c9:63:4f:94:94:45:d5:b7:b7:58:
         c7:8a:a2:2e
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUb+IXS5gQ3uiIRH7w11AeQhrQyfQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjQwNDA2MDI1MjA1WhcNMjUwNDA1MDI1NzA1
WjAzMTEwLwYDVQQDEyhCMjlBODQzNTZBQzM4NzNGNzFDRTBBMzlEODQ3NjA4RTY0
QjUyREJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsicKoSWvZ4Za
EYRXXxLp4vsdYySkpg2/yJUGcC3shOACfnTBqOWAjC9PpQ751/fD4A+8S7w6+9TI
AjpxhJwOb2nyPHGqc0CrN4ECwfIZQGdEqwreLfnM+sQaFlV3uacgzh9bEacQyIuM
eatkab08kz80urdm0D7k6I3OkK7/j06ps1nL8IiRHJA/GhRTn1q0icH2KPpVSMOO
reJ5Fp+QpZ+rDXEJU20a3ZrLVOwgr7UlCVN2sMbZZuRem10Vms1DXOdo3DtRsQCm
zhtCThT3hVcmTytG78MJ+PtMK+a1g8g6VmRAYHsk9EcmPjt2RYr0glHCOj6rdDZN
jjCHlsgs4wIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFLKahDVqw4c/cc4KOdhHYI5k
tS2+MB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0qLDANBgkqhkiG9w0BAQsFAAOCAQEAXWmx
2WY/zIJ6ExmDh6naUdUI6IaFTe9Athv+m3wWmE7MwhAVxECiKAYJu3jXhAB6DCda
4MgNs6AWUW254dF3kUA44pGy7EXCY66FWMk6fgvyeSdAwkrgs915ceUnknaS3Zwk
x1jw5Mj9tFFg36QB7KUV5WN1eonwiHSwMrs+/t/RX69CBx1JTTstHwUfKgyjYV/A
6tNiVhjFv2TUfhFRg9R0SLiFiAHcsM4q/1c6A7J++ap/dao1u0RxaSkC7H7/nZib
zoXT1PkWmlAQXJ/qiUSl3AFkHiLZ3fh6XrOg77Ku1w9gTE7IAaorNtRoaQRL4xXJ
Y0+UlEXVt7dYx4qiLg==
-----END CERTIFICATE-----
Generated at Thu May 2 20:48:25 2024 by rpki-client on console-fra.rpki-client.org