Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS42210.roa
File:                     AS42210.roa (raw, json)
Hash identifier:          a7H9rksCHqd8YfGQGsV2YJsZNs8kRlZaU7s7C2STwuU=
Subject key identifier:   24:8C:C4:52:E9:1C:A6:28:5D:75:79:D1:95:99:87:59:58:F7:0F:E6
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       5E73A092CE8E4C0105A8022EB58A8C4D3C056750
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS42210.roa
Signing time:             Mon 02 Sep 2024 22:13:10 +0000
ROA not before:           Mon 02 Sep 2024 22:08:10 +0000
ROA not after:            Mon 01 Sep 2025 22:13:10 +0000
asID:                     42210
IP address blocks:        45.54.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:73:a0:92:ce:8e:4c:01:05:a8:02:2e:b5:8a:8c:4d:3c:05:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Sep  2 22:08:10 2024 GMT
            Not After : Sep  1 22:13:10 2025 GMT
        Subject: CN=248CC452E91CA6285D7579D19599875958F70FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:a4:bb:45:de:b6:cb:71:f4:1b:7f:d9:77:
                    25:f6:ab:4e:99:2d:95:5b:89:13:51:cc:ec:5d:86:
                    01:73:d1:28:51:76:f5:32:e7:b6:67:82:de:26:37:
                    e8:d6:b2:53:c0:23:dd:29:be:70:ef:73:ed:ad:f1:
                    7b:38:00:8e:fa:c5:e7:52:10:33:30:60:0d:dc:e8:
                    ba:c1:fa:17:58:f2:84:cf:6a:b7:69:d3:40:12:c6:
                    7b:36:7c:db:ef:c1:1f:1a:ef:2f:dc:c6:34:56:b5:
                    0e:ff:de:a5:d2:db:1b:52:6d:27:80:d6:76:58:14:
                    c5:da:04:2f:4a:9e:9f:37:0f:b9:6e:d1:e5:84:23:
                    3a:ba:29:29:a1:9a:f5:e2:9e:4b:c1:c5:e3:f2:f7:
                    38:a4:08:10:45:ba:c5:fe:cc:e7:6e:de:26:ed:58:
                    cd:37:22:5a:de:de:56:d4:25:cb:62:03:25:fb:ef:
                    fd:78:3c:bb:11:d1:49:09:6a:73:0b:63:eb:11:8f:
                    12:48:11:b4:b0:66:ed:b5:7c:98:dd:77:2a:c3:8a:
                    c8:59:df:6d:81:12:25:7d:36:d0:4e:41:11:b0:5c:
                    fb:36:da:04:01:dc:58:7b:30:15:1a:9b:ce:2b:86:
                    7d:23:d1:3d:c9:91:df:dc:c2:05:af:98:ba:c5:9f:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8C:C4:52:E9:1C:A6:28:5D:75:79:D1:95:99:87:59:58:F7:0F:E6
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS42210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:a1:d4:47:37:05:8a:24:78:47:55:8b:26:c9:f7:9e:5c:
         f4:87:c0:6a:1d:6a:23:99:15:db:2e:e8:28:cc:99:81:32:f8:
         1e:fe:db:b2:9c:44:ad:78:67:bd:da:08:5c:d1:0e:81:d0:e9:
         e6:87:fd:d6:f3:92:23:d4:90:6b:99:c8:56:dd:a7:df:c7:68:
         43:67:cd:ba:eb:e4:83:e8:96:95:d6:4d:fb:15:09:0c:fa:ce:
         29:35:ab:a3:64:4b:0b:cd:ce:64:21:e7:59:ae:fc:12:e4:85:
         2f:8b:7d:61:fa:cd:75:4d:7e:3a:df:6b:10:97:59:9a:bc:49:
         2b:25:26:38:0d:98:23:ab:dc:3e:16:70:38:95:d5:85:de:6f:
         ed:4a:49:2f:95:22:25:94:0d:ce:dd:1e:ab:c3:cd:ec:fa:a7:
         60:13:10:41:38:05:8a:3d:8e:d0:c3:08:36:39:2d:3a:a7:bb:
         e3:8c:92:e4:f1:f8:2f:76:8e:13:e3:aa:10:99:26:30:1c:3c:
         33:67:21:9d:4f:35:51:b3:01:00:29:f4:33:e4:a1:03:4e:05:
         1a:a9:d3:27:6c:be:f2:57:a6:97:2f:3c:95:d9:d1:36:ab:f7:
         9e:63:0e:7c:82:95:c0:89:ac:eb:58:d3:22:1c:46:24:04:35:
         09:1e:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:04 2024 by rpki-client on console-fra.rpki-client.org