Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203230343733.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          X1OsinrEeVHjILzMj07V6tVZeUrOINrTVditpEKUk48=
Subject key identifier:   45:22:23:84:75:6A:A6:99:8A:E9:6E:F8:5B:A2:DE:92:78:B8:52:E9
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6837DEDB05D103452AC6299117B32E433ACA280E
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203230343733.roa
Signing time:             Mon 16 Jan 2023 18:50:23 +0000
ROA not before:           Mon 16 Jan 2023 18:45:23 +0000
ROA not after:            Mon 15 Jan 2024 18:50:23 +0000
asID:                     20473
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 02:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:37:de:db:05:d1:03:45:2a:c6:29:91:17:b3:2e:43:3a:ca:28:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jan 16 18:45:23 2023 GMT
            Not After : Jan 15 18:50:23 2024 GMT
        Subject: CN=45222384756AA6998AE96EF85BA2DE9278B852E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:c3:fd:18:a0:00:24:0c:8a:10:e3:dc:e9:
                    7c:c1:57:21:da:09:13:f0:70:fa:77:8c:66:93:c7:
                    4b:3a:b4:1e:26:2d:5e:bf:7d:ec:f6:37:ea:c3:0b:
                    80:15:32:33:7d:27:91:7f:71:ad:e5:e0:ea:95:d7:
                    42:36:90:d1:8c:41:1c:78:05:e9:6a:29:0c:f6:6d:
                    6c:63:64:78:88:fb:5b:0e:50:1f:0f:cc:10:30:63:
                    e3:7d:4d:d8:30:48:50:d4:62:8d:43:2a:eb:9f:d7:
                    78:cf:5f:6e:46:8c:63:eb:fb:72:f4:a2:8e:53:53:
                    5e:11:ae:11:16:8f:cf:d5:29:9b:bf:ba:c0:c2:5c:
                    8f:71:db:5e:4a:79:e7:8a:d0:4a:34:64:c7:6d:bf:
                    66:d5:49:8d:4b:c6:a6:5c:f3:6e:d4:7f:e9:30:bf:
                    8b:19:c4:e2:82:19:e0:0f:63:fa:50:98:e8:02:91:
                    43:fc:3b:85:41:e0:48:bf:43:8e:43:02:53:c9:da:
                    ae:f5:12:2b:55:60:49:a9:c5:bc:a3:33:9b:df:bd:
                    b8:b4:27:57:83:de:41:0f:f7:45:f2:f8:72:a3:33:
                    5d:da:62:70:76:95:ab:54:af:18:57:e8:1f:5b:2d:
                    0d:48:a1:e3:4f:7a:a1:d9:be:da:28:b6:1c:2a:27:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:22:23:84:75:6A:A6:99:8A:E9:6E:F8:5B:A2:DE:92:78:B8:52:E9
            X509v3 Authority Key Identifier: 
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:ac:22:6c:92:df:97:25:bf:6a:0a:f6:f9:d0:bc:ab:fa:
         f8:1f:2d:9b:ae:e4:b5:3d:78:3c:c2:75:ff:2d:57:78:43:48:
         a5:38:35:8f:48:e1:65:58:5f:3d:a2:a2:98:b0:de:a6:e2:c7:
         bf:8b:b4:aa:1f:7d:96:fc:06:72:93:de:42:50:d5:b3:d2:14:
         ff:ba:0b:30:43:15:d2:24:65:5d:c2:3d:db:21:cd:ea:71:0a:
         04:0a:f4:44:cb:b6:8e:df:b3:24:7d:12:69:9f:4b:aa:54:0c:
         c4:2e:e2:8a:ba:09:7e:a8:15:12:7e:1c:b6:3e:b1:f6:08:62:
         fb:9b:c7:25:af:47:47:fd:57:90:8d:36:f2:24:10:8a:a6:2c:
         6a:a9:9c:6c:b0:81:6e:a9:e7:27:77:c8:50:60:da:a5:2c:19:
         3b:9e:ae:9a:39:7e:3b:d1:67:c2:df:61:34:ab:94:eb:d0:cc:
         4f:fc:c8:73:31:0a:6b:bf:4d:2b:bd:1f:d1:b8:54:0b:0b:73:
         8c:60:11:df:a3:a8:da:2e:d0:85:51:86:67:b0:bc:f9:dc:65:
         6b:9b:ee:7b:20:4f:7a:8a:47:a2:c9:11:c0:02:0d:36:3f:b8:
         30:ce:de:7b:76:ae:3b:66:2d:ef:85:f5:f6:32:ee:96:36:19:
         f1:5c:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:42:37 2023 by rpki-client on console-ams.rpki-client.org