Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          ixodaE4VwZVMEdPKYEKOZZiHh4IIrAwBmKEU6lyF7FY=
Subject key identifier:   4A:FE:32:66:A9:F9:1B:45:1B:D8:C4:F6:F8:E0:BD:68:EC:4C:88:96
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       3BC74A919C4631DDC8CBC2D698A793147A030EFE
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 16 Aug 2024 10:48:59 +0000
ROA not before:           Fri 16 Aug 2024 10:43:59 +0000
ROA not after:            Fri 15 Aug 2025 10:48:59 +0000
asID:                     212238
IP address blocks:        45.135.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c7:4a:91:9c:46:31:dd:c8:cb:c2:d6:98:a7:93:14:7a:03:0e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 16 10:43:59 2024 GMT
            Not After : Aug 15 10:48:59 2025 GMT
        Subject: CN=4AFE3266A9F91B451BD8C4F6F8E0BD68EC4C8896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:73:f5:99:5d:ed:19:72:04:0f:2b:67:46:
                    0c:6e:cb:53:6e:ac:32:51:ef:cd:e6:65:9b:69:da:
                    4d:dc:59:c5:7f:f6:d5:97:c4:c5:5f:1b:29:92:81:
                    91:1c:5a:29:f3:6d:cd:fd:52:f2:fd:c7:67:aa:a6:
                    a7:d7:c0:52:2a:1c:83:bb:09:c5:b3:95:42:12:4f:
                    b2:da:82:c9:d5:11:cb:15:21:09:c8:3e:ca:70:22:
                    42:d5:9f:2d:cd:f4:03:7b:11:4d:ca:d8:d9:e7:be:
                    b8:2d:cc:5b:92:be:fb:c5:f8:8a:9b:cc:ef:a4:a7:
                    48:25:64:9a:f1:64:aa:70:d3:b9:4e:9b:3b:d3:03:
                    ab:40:4b:08:1f:3b:77:34:39:54:0d:b7:6e:7c:8c:
                    d7:f8:05:e5:f3:49:c1:cc:2c:da:a1:ab:6d:84:c2:
                    86:fd:44:84:02:7e:24:7e:ed:9c:57:b1:f5:ca:88:
                    6a:ad:8b:f2:4e:7d:77:bb:38:f6:b6:dd:f9:b2:73:
                    98:13:ce:ba:10:ac:57:1b:96:63:5d:84:9d:83:f0:
                    38:df:47:eb:d1:a3:21:3b:69:8a:d6:97:4d:b6:74:
                    6d:a3:d7:66:46:72:e4:51:aa:ef:89:d2:ce:c2:f5:
                    03:36:46:67:f2:ad:80:44:9c:d5:9a:52:7a:0a:fa:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:32:66:A9:F9:1B:45:1B:D8:C4:F6:F8:E0:BD:68:EC:4C:88:96
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:03:8c:43:82:9c:85:89:51:59:b9:a5:a3:0a:f7:4c:b3:ed:
         52:33:3e:f6:38:99:bd:7a:2e:39:93:5f:40:8b:5a:77:10:b4:
         4b:8c:e8:85:6a:81:22:f3:f8:c2:19:ee:4f:f9:0d:4f:c8:ff:
         b6:fb:f6:2b:be:b0:05:d0:14:75:5d:4e:55:c0:a1:34:0d:08:
         1e:2c:1c:2e:c5:41:cf:79:9c:85:76:f8:d1:e3:82:fc:26:d7:
         55:53:0e:cf:74:6d:13:bd:56:6b:22:a8:27:b9:fd:74:1b:2e:
         20:4b:ca:27:b5:12:a3:1a:e2:c5:f7:b0:47:39:c3:54:c6:c9:
         da:46:0f:9f:9b:4f:0b:b9:bc:aa:9e:7a:a4:e2:89:7a:55:3a:
         a8:8e:9c:b1:f7:e5:3d:33:f1:1d:cd:0d:7f:3b:bd:84:fb:12:
         72:c5:ed:2f:6b:a0:39:c2:4e:9a:32:11:04:79:76:21:00:b3:
         86:3e:b9:7b:8b:5d:35:22:04:05:5f:a7:53:c5:0c:3c:23:b2:
         66:0f:da:e0:5c:aa:ee:f0:82:96:44:44:2e:f1:2f:4c:23:d8:
         b7:22:4d:f8:5d:fa:fa:32:fd:63:c2:89:1d:29:6e:8c:2a:4c:
         b0:c9:ca:55:2e:a4:0b:2d:ff:df:ee:42:ff:72:2c:9c:68:78:
         cc:3c:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org