Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
File:                     34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa (raw, json)
Hash identifier:          tAlW9FjEYIrz4oC5aH2TuRv4bKPeut4rP8TQvcPxfwU=
Subject key identifier:   DD:34:DA:A6:6C:8E:9D:D4:29:B2:9D:98:75:78:ED:05:79:C5:97:AF
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       653B2A3B8CEE2541C7866AA9763C169D7AC827B4
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
Signing time:             Fri 22 Sep 2023 14:41:48 +0000
ROA not before:           Fri 22 Sep 2023 14:36:48 +0000
ROA not after:            Fri 20 Sep 2024 14:41:48 +0000
asID:                     400175
IP address blocks:        45.135.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3b:2a:3b:8c:ee:25:41:c7:86:6a:a9:76:3c:16:9d:7a:c8:27:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 22 14:36:48 2023 GMT
            Not After : Sep 20 14:41:48 2024 GMT
        Subject: CN=DD34DAA66C8E9DD429B29D987578ED0579C597AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:c0:fc:aa:4e:ae:8f:f8:5d:77:90:7c:10:
                    5a:77:80:bd:c8:00:4c:a2:0c:dd:db:4c:2d:c2:1b:
                    a4:72:74:c5:c6:75:93:59:4f:42:56:9a:5c:da:16:
                    35:b5:e4:49:10:3e:c5:0d:4c:13:c5:7c:3e:49:be:
                    7d:35:51:ae:83:09:a7:6d:b4:c5:94:ac:9f:de:fe:
                    29:fc:5e:5f:75:21:2e:d2:c1:a6:0b:72:f6:96:bb:
                    c9:e1:73:f2:56:ac:c3:64:a5:c2:82:2c:4a:90:b5:
                    26:0a:5d:a7:4e:62:ca:e8:ae:00:85:f4:2e:d2:05:
                    e6:e8:19:ec:b8:0d:ce:b1:10:22:e8:1b:ec:51:43:
                    58:9d:05:cf:c1:fe:8e:f4:2e:fd:65:16:aa:83:3e:
                    5c:8d:68:72:9e:fb:0a:47:04:85:d1:86:ff:59:08:
                    92:50:9c:7d:4f:27:7f:78:35:72:0c:18:75:65:cc:
                    82:05:e9:fb:53:63:e8:b8:ed:7c:91:75:36:dc:eb:
                    0c:a6:ef:16:e0:cc:b4:00:17:5e:80:97:35:ad:20:
                    22:5b:30:31:e6:28:4c:32:68:48:e9:a7:e3:14:c4:
                    28:43:d6:70:54:b5:ec:1b:1c:45:ce:72:31:9a:81:
                    fc:e8:a5:68:eb:7f:da:1b:35:f5:3b:c0:99:f8:f8:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:34:DA:A6:6C:8E:9D:D4:29:B2:9D:98:75:78:ED:05:79:C5:97:AF
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:c1:c8:f9:88:e2:f6:3c:e1:d8:b1:4f:a1:ff:c3:f4:4b:
         b7:15:13:2d:36:33:93:f5:16:98:1a:ea:42:0e:28:da:35:6f:
         23:49:9f:92:79:cf:0d:af:b0:ef:02:58:91:0d:2d:2d:06:2a:
         f0:9a:cb:63:db:d4:68:3a:fd:30:1e:4c:8b:0c:e0:11:2a:eb:
         b2:4a:df:ce:8e:d4:f5:c4:3d:1e:39:cc:f8:4e:6e:da:8c:4f:
         72:ec:85:de:e3:f3:87:b7:b0:02:25:bf:17:88:43:94:6e:0a:
         cc:3b:10:c7:69:d3:f7:bd:ab:b7:53:47:96:0e:3c:d3:8a:ae:
         e7:9d:f7:e1:86:5d:21:fe:64:45:b1:04:6a:2b:52:7d:77:7f:
         95:a6:03:a8:bc:ac:c7:11:d9:23:47:fb:f8:d1:c1:82:3d:a8:
         6e:ae:83:58:f0:52:c6:e1:0f:53:cf:f6:d7:67:ad:bd:de:90:
         45:f1:79:3f:3f:c4:98:51:9d:85:88:b2:85:05:a9:f8:e6:8b:
         23:b9:62:aa:9e:71:4a:3e:2a:86:fc:f6:25:94:63:2e:91:48:
         10:37:67:31:a5:e8:d8:d3:d2:0b:c2:d5:ad:00:8f:52:bb:1d:
         d7:4c:0c:14:b9:8d:e2:84:bc:81:6e:23:80:72:da:04:54:8c:
         75:db:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:47:26 2024 by rpki-client on console-fra.rpki-client.org