Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203435333233.roa
File:                     34392e35302e342e302f32342d3234203d3e203435333233.roa (raw, json)
Hash identifier:          w8rLySnAPELmupPP+GiblzNEg8/BFXeI0jXd+VxNbTY=
Subject key identifier:   1B:B7:E4:98:F6:BB:73:26:D0:8E:F5:36:7A:87:79:7A:34:78:BA:56
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       16F13419C405AB792AE75A515623A38E264CD7E3
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203435333233.roa
Signing time:             Wed 03 Jan 2024 13:36:39 +0000
ROA not before:           Wed 03 Jan 2024 13:31:39 +0000
ROA not after:            Wed 01 Jan 2025 13:36:39 +0000
asID:                     45323
IP address blocks:        49.50.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f1:34:19:c4:05:ab:79:2a:e7:5a:51:56:23:a3:8e:26:4c:d7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Jan  3 13:31:39 2024 GMT
            Not After : Jan  1 13:36:39 2025 GMT
        Subject: CN=1BB7E498F6BB7326D08EF5367A87797A3478BA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:6a:de:34:3c:17:a5:32:72:7e:06:1e:5d:
                    c3:ab:0f:7d:e8:06:ec:72:cc:46:e5:59:4d:c5:56:
                    b3:04:d5:a0:23:d3:7e:5f:38:6f:78:a9:9f:9f:50:
                    e5:8f:4f:eb:3d:a8:c5:a7:25:ae:8f:88:c4:ed:65:
                    b5:29:08:11:8e:01:22:c4:0c:5c:4a:98:49:b1:7c:
                    34:ff:8d:d0:ad:26:03:ad:56:eb:94:65:23:48:30:
                    3e:5c:2d:e9:04:f2:6f:2a:8f:56:d4:98:8b:6f:bf:
                    1f:63:b8:e0:fa:1b:ab:c5:a1:1a:3f:f1:35:83:0e:
                    c5:22:a5:10:94:f0:6f:c3:63:b1:b9:2c:31:2e:6a:
                    d3:3c:de:c6:5e:c4:54:73:94:8a:c4:ab:f8:1e:6c:
                    28:7a:ff:14:d6:43:c9:32:b1:74:b3:eb:21:8f:9f:
                    1b:7a:97:84:99:d6:0a:af:b1:58:98:3b:04:f3:af:
                    f7:51:4b:dd:1d:e1:8a:13:bc:28:e3:59:ea:5f:8e:
                    a2:9b:f2:4e:5a:4b:85:b0:a7:c6:71:66:ef:f2:d5:
                    8b:87:aa:06:42:de:b6:18:73:d9:62:ab:b7:a1:7c:
                    ee:2f:3c:21:2e:40:1d:23:6d:93:51:b1:df:2f:48:
                    ae:2b:2c:90:bb:1e:65:61:92:ca:2d:c6:ec:28:e8:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:E4:98:F6:BB:73:26:D0:8E:F5:36:7A:87:79:7A:34:78:BA:56
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203435333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.50.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ae:52:0f:4f:e1:43:6a:88:20:24:68:47:ce:83:2c:d4:22:
         66:6f:ea:44:bf:a6:93:93:f1:78:c9:4d:c1:5a:1f:f3:53:00:
         45:b4:e2:49:63:61:ab:9c:90:a4:89:d2:36:cc:14:db:99:9f:
         a9:bf:5f:6e:d9:18:50:0d:56:a0:14:be:39:66:39:b4:f3:b5:
         7e:3e:c8:bd:d5:df:34:58:7d:c1:6e:37:7f:79:19:c0:8f:53:
         9a:82:c2:6c:77:5a:92:2a:32:32:50:f2:0f:94:13:98:8f:62:
         aa:af:0f:bd:81:5c:94:da:20:1c:ef:e1:7d:82:11:bc:3b:5b:
         d4:5a:91:0f:98:ab:5e:fe:fa:8c:78:53:ba:79:66:95:12:ec:
         c0:27:54:6e:8b:09:12:dc:43:90:d7:59:62:12:d5:68:0a:40:
         d3:bf:cd:ac:ce:0e:ca:28:fb:6f:49:99:75:c5:69:f0:10:8f:
         17:da:4c:16:45:ce:8f:c7:5b:68:51:06:c0:e1:6e:b8:2a:60:
         77:72:f6:29:3a:c6:0f:01:3d:14:4c:62:34:82:fe:d7:86:07:
         35:7c:ea:a4:81:ed:c9:eb:2f:7b:aa:19:bf:25:43:36:c1:5c:
         06:91:51:61:d3:51:b2:b1:3d:3b:b8:59:1d:a2:3e:71:19:03:
         0f:70:9b:61
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUFvE0GcQFq3kq51pRViOjjiZM1+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD
ODg2RjFERTAeFw0yNDAxMDMxMzMxMzlaFw0yNTAxMDExMzM2MzlaMDMxMTAvBgNV
BAMTKDFCQjdFNDk4RjZCQjczMjZEMDhFRjUzNjdBODc3OTdBMzQ3OEJBNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vGreNDwXpTJyfgYeXcOrD33o
BuxyzEblWU3FVrME1aAj035fOG94qZ+fUOWPT+s9qMWnJa6PiMTtZbUpCBGOASLE
DFxKmEmxfDT/jdCtJgOtVuuUZSNIMD5cLekE8m8qj1bUmItvvx9juOD6G6vFoRo/
8TWDDsUipRCU8G/DY7G5LDEuatM83sZexFRzlIrEq/gebCh6/xTWQ8kysXSz6yGP
nxt6l4SZ1gqvsViYOwTzr/dRS90d4YoTvCjjWepfjqKb8k5aS4Wwp8ZxZu/y1YuH
qgZC3rYYc9liq7ehfO4vPCEuQB0jbZNRsd8vSK4rLJC7HmVhksotxuwo6LWdAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUG7fkmPa7cybQjvU2eod5ejR4ulYwHwYDVR0j
BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw
M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2
RjFERS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVlYzI1ZTQtOWFhOC00YmVmLTkw
OTctYzBiZWMwYjI2NmE3LzAvMzQzOTJlMzUzMDJlMzQyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzNDM1MzMzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMTIEMA0GCSqGSIb3DQEBCwUA
A4IBAQCjrlIPT+FDaoggJGhHzoMs1CJmb+pEv6aTk/F4yU3BWh/zUwBFtOJJY2Gr
nJCkidI2zBTbmZ+pv19u2RhQDVagFL45Zjm087V+Psi91d80WH3Bbjd/eRnAj1Oa
gsJsd1qSKjIyUPIPlBOYj2Kqrw+9gVyU2iAc7+F9ghG8O1vUWpEPmKte/vqMeFO6
eWaVEuzAJ1RuiwkS3EOQ11liEtVoCkDTv82szg7KKPtvSZl1xWnwEI8X2kwWRc6P
x1toUQbA4W64KmB3cvYpOsYPAT0UTGI0gv7Xhgc1fOqkge3J6y97qhm/JUM2wVwG
kVFh01GysT07uFkdoj5xGQMPcJth
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org