Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
File:                     34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa (raw, json)
Hash identifier:          exIhaBxNBCcpAoP08S8qSY/1bcmLIpW1YWnzWfmBX8s=
Subject key identifier:   9B:14:A1:5A:63:D9:A2:29:DC:CF:CD:52:B5:0A:DE:28:82:D7:1B:63
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       360B0EABB5C5D705E218DA2CDE44793D9FE79F40
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
Signing time:             Fri 23 Aug 2024 14:48:59 +0000
ROA not before:           Fri 23 Aug 2024 14:43:59 +0000
ROA not after:            Fri 22 Aug 2025 14:48:59 +0000
asID:                     400175
IP address blocks:        45.135.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 04:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0b:0e:ab:b5:c5:d7:05:e2:18:da:2c:de:44:79:3d:9f:e7:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 23 14:43:59 2024 GMT
            Not After : Aug 22 14:48:59 2025 GMT
        Subject: CN=9B14A15A63D9A229DCCFCD52B50ADE2882D71B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:44:18:d5:91:9f:ab:4c:07:ef:d8:70:9d:
                    5d:d1:73:61:cf:52:42:99:4d:69:c0:3a:51:70:ba:
                    85:39:a1:f7:fa:c8:f0:07:c3:ab:1d:d4:77:7e:86:
                    78:93:4f:91:08:87:d0:7e:8c:b9:89:0b:79:5a:4c:
                    aa:4a:42:f8:7a:ce:f4:11:c3:dd:26:45:fc:54:2d:
                    dc:cc:9c:36:0e:53:94:09:24:fc:58:aa:59:c1:10:
                    31:cd:a6:fb:3b:79:60:f3:23:ca:a3:ef:ad:64:b7:
                    25:51:f5:cc:94:42:3b:11:70:ee:35:8f:21:ef:f7:
                    d0:9c:3a:cf:57:4d:f1:c9:be:ac:7a:f1:71:1e:b0:
                    b9:82:45:7b:fd:68:93:53:d1:d5:fc:95:48:1d:db:
                    8c:38:fc:04:cd:7d:9a:78:0a:58:d5:be:21:14:6b:
                    fe:0c:f3:86:d4:a9:60:c2:1d:a2:2d:99:96:f8:f0:
                    4e:f7:8d:73:fa:8a:fc:d5:cc:14:f5:0d:83:c5:8e:
                    da:32:28:3d:45:a1:62:1a:c8:46:ee:03:d1:c4:8b:
                    46:ee:f0:8a:8e:c0:ca:92:1e:3f:9f:84:12:34:c5:
                    cb:b7:bd:a9:83:74:9a:72:b4:90:52:1b:91:d6:ef:
                    0f:88:64:eb:4c:48:38:c4:70:59:41:aa:33:c5:49:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:14:A1:5A:63:D9:A2:29:DC:CF:CD:52:B5:0A:DE:28:82:D7:1B:63
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:9d:db:cf:ff:99:2f:bf:70:ff:23:da:c5:a2:98:6a:37:
         4a:1e:a6:62:4c:41:64:3e:ae:8b:46:d4:2c:06:6c:d7:e8:32:
         b4:63:b6:e8:c0:db:7a:b9:6e:65:f0:0b:ce:05:11:b0:24:b0:
         ba:a3:a6:4e:20:ea:97:dd:20:a6:86:47:8b:63:de:4c:2d:ff:
         3a:8a:6c:0c:5e:21:e4:23:2a:ac:22:c3:2e:74:d0:94:af:6a:
         e0:61:5d:78:6c:78:05:7e:50:76:60:f0:b8:97:c8:f3:ff:33:
         34:17:d4:e4:59:85:1b:e7:b1:85:25:69:3e:59:76:2d:fc:1e:
         54:fd:da:e5:82:31:11:b2:c9:38:8e:3c:bd:9b:00:b4:76:a6:
         4f:99:c7:ba:84:d4:24:36:07:b6:b3:09:71:e7:59:8c:6a:eb:
         be:5f:db:16:e3:03:85:01:03:66:ea:37:c1:6b:fd:5b:98:ea:
         63:e5:a5:29:f9:73:10:56:a3:36:d8:a1:be:76:14:64:2c:be:
         d8:0c:0d:0f:25:77:05:81:78:83:a0:db:95:8c:79:2f:53:77:
         d0:f4:4f:69:7b:1c:11:fd:1a:d7:27:2d:a8:c4:49:2b:3b:97:
         3d:2b:d8:31:01:b6:ae:7e:54:a9:2b:ba:9a:64:19:13:30:1a:
         f7:7b:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:19 2025 by rpki-client