Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa
File:                     34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa (raw, json)
Hash identifier:          d8kpuHyaDsN6CD8pGu+E5cY6gTCTtIOST868HJiNK7g=
Subject key identifier:   6F:57:40:29:60:4C:8D:A4:70:EF:24:68:BD:74:E0:4A:CF:81:60:36
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       0AD54C2BE8CFE42BE62EF54D9DD1F70D6E7FEB1D
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa
Signing time:             Tue 07 Nov 2023 17:10:33 +0000
ROA not before:           Tue 07 Nov 2023 17:05:33 +0000
ROA not after:            Tue 05 Nov 2024 17:10:33 +0000
asID:                     142036
IP address blocks:        45.135.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 06:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d5:4c:2b:e8:cf:e4:2b:e6:2e:f5:4d:9d:d1:f7:0d:6e:7f:eb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov  7 17:05:33 2023 GMT
            Not After : Nov  5 17:10:33 2024 GMT
        Subject: CN=6F574029604C8DA470EF2468BD74E04ACF816036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:26:76:e1:f3:61:e7:b0:54:5b:33:0e:4f:
                    8c:08:03:5a:2e:46:52:e8:2d:8e:52:11:92:fd:c1:
                    4b:70:22:5b:7f:87:95:a5:67:2d:75:66:8a:05:ad:
                    fc:7e:2b:a9:19:5b:2c:c4:99:3c:6b:19:a7:06:ca:
                    c6:97:8e:ce:5d:47:0d:6b:e1:08:4b:fb:73:b0:c1:
                    7e:8a:26:21:d6:9b:d1:69:fd:a8:e2:4c:9f:b2:ee:
                    4b:49:44:ad:1b:0c:bb:e2:d5:cc:21:5c:8e:a5:6a:
                    a0:94:d9:91:bf:ae:29:66:be:94:5f:eb:89:ff:48:
                    f9:dd:65:8b:7b:8f:9e:2d:c2:3b:78:f0:e4:1a:f4:
                    48:89:9b:13:64:d4:5d:5f:6e:36:cb:c2:39:ae:45:
                    b4:98:bb:46:5b:86:5a:bc:a3:cb:3d:64:16:ad:1b:
                    c1:be:fc:1e:f8:96:69:62:bc:8f:ad:50:76:22:74:
                    b4:04:4f:66:f8:7a:b2:5f:8a:f1:18:3c:17:c2:15:
                    1d:0e:f0:9c:98:14:07:6c:57:c0:ad:8e:9f:d9:4e:
                    19:cd:d4:f2:83:66:9f:67:78:33:7f:c4:99:10:02:
                    de:ad:49:38:81:03:33:00:bb:ce:1c:c9:de:a4:d5:
                    d8:54:4d:0e:c9:8d:10:9d:d0:f8:0a:f6:14:14:01:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:40:29:60:4C:8D:A4:70:EF:24:68:BD:74:E0:4A:CF:81:60:36
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:8b:aa:9e:75:33:f7:1d:98:65:fb:af:e4:b0:ea:5b:3c:
         8f:01:8f:df:a8:36:44:cc:52:f6:19:26:08:05:f3:f0:41:5c:
         3f:bf:50:92:68:e2:3d:60:b2:e2:31:d6:67:8c:fd:66:5e:19:
         38:b9:d2:0e:87:fc:da:b1:49:9c:9b:59:ee:cd:31:b0:c1:28:
         54:23:64:ad:2e:66:eb:5e:80:ad:d0:ba:10:2d:8e:5a:77:ca:
         6a:18:60:c7:b6:34:16:6f:43:7b:d5:04:ac:c5:21:f6:6a:53:
         cd:f2:5a:a5:89:45:00:f0:ff:3b:06:bb:03:8c:9f:97:08:d2:
         98:71:2d:28:57:4c:75:f3:ca:c1:ec:f3:ac:5b:54:d3:fe:fb:
         a8:94:ef:fd:27:2a:d1:e7:9e:4d:b6:64:48:0e:72:0a:ae:9a:
         75:ee:f2:c0:8a:7e:4a:fc:ee:68:27:f0:f5:25:e7:46:b9:35:
         a0:54:b4:44:0a:45:5a:61:b1:a5:3d:23:69:47:45:bc:d5:b1:
         b7:83:c2:51:b5:92:d9:b9:53:da:e5:5c:0b:d5:73:73:5a:8a:
         15:e3:ce:7a:18:31:88:bb:0b:93:e8:f5:c8:06:3f:90:1b:ae:
         41:fc:ff:91:f0:48:1c:a3:9c:55:ed:b6:62:45:a7:95:58:ac:
         79:ce:97:9e
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUCtVMK+jP5CvmLvVNndH3DW5/6x0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjMxMTA3MTcwNTMzWhcNMjQxMTA1MTcxMDMz
WjAzMTEwLwYDVQQDEyg2RjU3NDAyOTYwNEM4REE0NzBFRjI0NjhCRDc0RTA0QUNG
ODE2MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycsmduHzYeew
VFszDk+MCANaLkZS6C2OUhGS/cFLcCJbf4eVpWctdWaKBa38fiupGVssxJk8axmn
BsrGl47OXUcNa+EIS/tzsMF+iiYh1pvRaf2o4kyfsu5LSUStGwy74tXMIVyOpWqg
lNmRv64pZr6UX+uJ/0j53WWLe4+eLcI7ePDkGvRIiZsTZNRdX242y8I5rkW0mLtG
W4ZavKPLPWQWrRvBvvwe+JZpYryPrVB2InS0BE9m+HqyX4rxGDwXwhUdDvCcmBQH
bFfArY6f2U4ZzdTyg2afZ3gzf8SZEALerUk4gQMzALvOHMnepNXYVE0OyY0QndD4
CvYUFAHuIwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFG9XQClgTI2kcO8kaL104ErP
gWA2MB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzM0MzUyZTMxMzMzNTJlMzEzNjMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNDMyMzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeiMA0GCSqGSIb3DQEB
CwUAA4IBAQANP4uqnnUz9x2YZfuv5LDqWzyPAY/fqDZEzFL2GSYIBfPwQVw/v1CS
aOI9YLLiMdZnjP1mXhk4udIOh/zasUmcm1nuzTGwwShUI2StLmbrXoCt0LoQLY5a
d8pqGGDHtjQWb0N71QSsxSH2alPN8lqliUUA8P87BrsDjJ+XCNKYcS0oV0x188rB
7POsW1TT/vuolO/9JyrR555NtmRIDnIKrpp17vLAin5K/O5oJ/D1JedGuTWgVLRE
CkVaYbGlPSNpR0W81bG3g8JRtZLZuVPa5VwL1XNzWooV4856GDGIuwuT6PXIBj+Q
G65B/P+R8Egco5xV7bZiRaeVWKx5zpee
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:16:04 2024 by rpki-client on console-ams.rpki-client.org