Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          8CoHXdKLfK8ayfSkTJEVlOZouoXe/93Dg6N9ac6ZUBA=
Subject key identifier:   B8:91:A6:B8:6C:12:81:2F:35:08:6B:EF:88:25:F4:CE:D4:6B:9C:27
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2DAFC61382604805188FB32A6AAC6962ED561F8B
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Sep 2023 10:05:20 +0000
ROA not before:           Fri 15 Sep 2023 10:00:20 +0000
ROA not after:            Fri 13 Sep 2024 10:05:20 +0000
asID:                     212238
IP address blocks:        45.135.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:af:c6:13:82:60:48:05:18:8f:b3:2a:6a:ac:69:62:ed:56:1f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 15 10:00:20 2023 GMT
            Not After : Sep 13 10:05:20 2024 GMT
        Subject: CN=B891A6B86C12812F35086BEF8825F4CED46B9C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:40:f0:93:b7:a8:20:3b:06:60:ff:d7:bd:
                    0d:8c:88:69:35:86:80:e5:48:35:94:0c:c1:00:0d:
                    48:21:dc:bb:c7:ce:ee:8b:43:31:2c:2d:56:07:ab:
                    02:99:f7:8b:6e:37:09:fd:e1:5c:73:34:97:ad:c5:
                    fc:35:51:0d:1c:d5:9d:38:00:33:07:1e:4c:f4:3f:
                    0c:c4:70:a9:9f:ee:85:08:37:ad:0f:2d:de:99:46:
                    3c:2a:2b:da:e4:3a:d9:10:ff:3c:06:40:f9:fc:fe:
                    90:10:15:9e:2c:55:ac:9f:6b:dd:71:18:63:2d:8a:
                    1f:4b:76:17:22:50:37:2c:e0:b2:2c:75:b3:2a:82:
                    02:3d:eb:09:ca:80:19:17:57:04:56:46:3d:3b:94:
                    27:b1:2f:3c:97:8c:7e:0f:c8:cd:46:f7:7f:32:ef:
                    0e:ff:fa:78:d2:7c:9c:cc:8f:5c:74:3b:e6:aa:56:
                    85:a0:cc:14:7f:b3:2e:4b:de:60:70:98:35:38:9c:
                    45:42:7b:83:38:86:98:10:ce:91:40:2d:17:1c:0a:
                    33:13:d4:dc:0c:98:08:14:00:42:30:c2:44:17:e0:
                    bb:e3:ed:4c:7a:be:db:27:de:9d:ff:73:fa:fe:ff:
                    4b:82:ff:ae:86:22:7b:1e:14:1f:2c:c5:f4:99:9f:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:A6:B8:6C:12:81:2F:35:08:6B:EF:88:25:F4:CE:D4:6B:9C:27
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:af:72:bc:08:f7:9f:bb:20:6b:b2:16:69:93:cc:7f:a3:
         32:3b:e6:a6:db:13:86:4f:42:c5:fd:e0:1c:b4:27:2f:59:b3:
         d6:86:6d:ab:a5:2a:29:97:20:8c:5f:a7:a3:94:39:af:b3:b0:
         ac:1d:51:d3:c8:12:f4:f1:3b:27:86:77:55:f8:ee:c9:ab:a2:
         df:dd:a3:ab:d9:06:9f:09:9a:9b:87:fd:e1:7e:d2:88:a0:b5:
         5d:9f:31:5e:f9:dd:6a:10:e6:e8:16:29:52:09:7b:14:2f:70:
         7f:00:22:c6:8e:d0:4d:06:0b:04:d3:c8:40:61:11:18:81:da:
         8c:24:e6:8c:c1:65:0f:1c:b2:8e:ec:18:c2:a4:c4:bf:31:8a:
         f1:fc:75:7e:d0:24:22:d3:ed:7c:7c:e2:1e:16:17:5a:74:98:
         de:92:94:2b:30:85:3f:c7:19:99:8b:2c:97:f6:87:5d:2f:21:
         d5:ca:9c:e4:49:ee:e5:bb:ab:4c:f9:86:31:17:80:a8:94:20:
         13:f7:aa:50:25:89:35:89:fe:79:59:7c:cd:c4:5a:4e:fa:82:
         ca:7a:53:98:4e:19:19:88:79:9c:6d:2f:c8:25:46:1b:df:43:
         63:fa:fd:c7:00:aa:a1:68:72:e8:e4:fc:a8:71:50:c7:b1:5a:
         bd:05:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org