Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203230343733.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          Jli34zVZNtMdvm288SWnHboAf951PMKh/oU9VQM0phI=
Subject key identifier:   C9:18:3B:44:F2:52:EF:3F:7D:DC:48:11:69:FE:A9:5D:E9:7A:EB:77
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       0A0E29910F347C6DF72F2D382738E452548AFCA9
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203230343733.roa
Signing time:             Mon 18 Nov 2024 19:49:21 +0000
ROA not before:           Mon 18 Nov 2024 19:44:21 +0000
ROA not after:            Mon 17 Nov 2025 19:49:21 +0000
asID:                     20473
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 23:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0e:29:91:0f:34:7c:6d:f7:2f:2d:38:27:38:e4:52:54:8a:fc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 18 19:44:21 2024 GMT
            Not After : Nov 17 19:49:21 2025 GMT
        Subject: CN=C9183B44F252EF3F7DDC481169FEA95DE97AEB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:9b:1c:11:79:0a:e0:44:08:e1:08:71:3a:
                    2d:82:5f:5f:0c:fc:c0:f5:e4:cc:26:9d:3e:3c:54:
                    76:df:02:07:1c:81:ec:4c:a4:53:52:46:00:f5:83:
                    04:f9:7e:dc:8a:e7:72:12:22:6a:4c:a2:02:78:5a:
                    11:93:fc:91:2e:58:67:a4:c5:57:69:a5:dc:22:b9:
                    64:eb:fc:5d:dd:d3:cc:55:fa:a4:c7:93:01:b0:a0:
                    02:ab:be:51:de:aa:f6:4f:7d:63:be:7b:5d:58:c2:
                    4b:45:65:cd:4a:16:40:e1:77:98:35:09:11:4a:78:
                    22:b9:cc:65:fb:37:90:48:31:2a:44:41:66:3b:74:
                    2a:35:dc:7b:96:46:a6:50:2b:fc:b5:87:5d:69:44:
                    ec:5f:5b:60:71:b4:3d:d5:33:82:64:a4:cf:3c:87:
                    fa:42:10:fd:57:ef:fd:f2:f3:4b:33:ce:25:f7:e1:
                    b8:77:34:b6:21:a4:ef:08:f6:7e:b0:e4:59:dc:75:
                    a0:2f:09:10:42:b2:df:0f:98:eb:8e:8f:be:b6:5e:
                    47:66:61:44:77:58:a7:63:b7:32:c7:d4:db:1e:44:
                    d1:55:e4:c2:d8:fd:82:b9:92:95:a8:93:3d:4e:d4:
                    05:b4:a6:e3:18:c3:91:fc:89:f1:3d:de:da:4b:da:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:18:3B:44:F2:52:EF:3F:7D:DC:48:11:69:FE:A9:5D:E9:7A:EB:77
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:19:58:94:97:aa:5e:76:75:be:76:78:0e:5d:8c:fa:bd:53:
         32:6c:fa:42:2a:c5:6e:4d:f9:dc:c8:33:99:0c:09:b0:6e:be:
         be:77:ef:0d:ae:d1:42:ed:c2:c6:23:73:db:bb:f6:5d:6c:19:
         de:13:d3:5a:fc:b8:0e:48:6d:82:f7:36:59:18:9e:6c:1f:6b:
         4a:a6:bc:4f:7b:d3:3c:e1:91:e3:33:e6:c6:71:61:df:f4:1f:
         c1:3a:4f:2d:9e:7e:66:e1:d2:62:6a:5e:eb:72:e1:46:66:4d:
         98:e8:14:83:4a:c7:07:e9:40:17:cc:fb:65:b7:47:31:66:ba:
         a8:12:e9:c5:e5:16:b0:77:1e:90:62:28:bd:b1:78:c4:db:ba:
         70:ca:71:e0:43:56:ce:01:c9:d0:20:18:4f:3c:50:94:b5:d5:
         9b:a2:d8:30:4a:5a:f7:8b:4d:e0:1f:bc:6b:80:85:9f:76:a1:
         4f:4f:16:13:f4:d1:40:ce:b3:b0:40:6a:21:fc:da:c5:a8:71:
         35:d1:63:e1:da:19:df:33:d1:3b:bd:6b:38:f4:68:b4:9f:28:
         33:49:09:8a:98:ed:56:96:a6:b6:c9:45:b3:e7:42:63:cd:46:
         0d:21:43:05:60:27:8d:40:4e:06:4c:cc:36:6f:d8:10:3a:dc:
         5e:ad:c8:d4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUCg4pkQ80fG33Ly04JzjkUlSK/KkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjQxMTE4MTk0NDIxWhcNMjUxMTE3MTk0OTIx
WjAzMTEwLwYDVQQDEyhDOTE4M0I0NEYyNTJFRjNGN0REQzQ4MTE2OUZFQTk1REU5
N0FFQjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTSbHBF5CuBE
COEIcTotgl9fDPzA9eTMJp0+PFR23wIHHIHsTKRTUkYA9YME+X7ciudyEiJqTKIC
eFoRk/yRLlhnpMVXaaXcIrlk6/xd3dPMVfqkx5MBsKACq75R3qr2T31jvntdWMJL
RWXNShZA4XeYNQkRSngiucxl+zeQSDEqREFmO3QqNdx7lkamUCv8tYddaUTsX1tg
cbQ91TOCZKTPPIf6QhD9V+/98vNLM84l9+G4dzS2IaTvCPZ+sORZ3HWgLwkQQrLf
D5jrjo++tl5HZmFEd1inY7cyx9TbHkTRVeTC2P2CuZKVqJM9TtQFtKbjGMOR/Inx
Pd7aS9ovIQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMkYO0TyUu8/fdxIEWn+qV3p
eut3MB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzM0MzUyZTMxMzMzNTJlMzEzNjMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2HoTANBgkqhkiG9w0BAQsF
AAOCAQEAHxlYlJeqXnZ1vnZ4Dl2M+r1TMmz6QirFbk353MgzmQwJsG6+vnfvDa7R
Qu3CxiNz27v2XWwZ3hPTWvy4Dkhtgvc2WRiebB9rSqa8T3vTPOGR4zPmxnFh3/Qf
wTpPLZ5+ZuHSYmpe63LhRmZNmOgUg0rHB+lAF8z7ZbdHMWa6qBLpxeUWsHcekGIo
vbF4xNu6cMpx4ENWzgHJ0CAYTzxQlLXVm6LYMEpa94tN4B+8a4CFn3ahT08WE/TR
QM6zsEBqIfzaxahxNdFj4doZ3zPRO71rOPRotJ8oM0kJipjtVpamtslFs+dCY81G
DSFDBWAnjUBOBkzMNm/YEDrcXq3I1A==
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:35 2024 by rpki-client on console-ams.rpki-client.org