Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS42210.roa
File:                     AS42210.roa (raw, json)
Hash identifier:          CS7sxI3vvJ5AjQ8uMsMDdYqoOnShEs9gVSu5Zha37sg=
Subject key identifier:   5F:C9:A1:AE:77:58:C8:D3:B4:8A:21:37:0E:F1:15:22:98:9A:88:AD
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       2758947B091F6135D2D5B443BB007BA1FC1B035C
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS42210.roa
Signing time:             Mon 02 Oct 2023 21:55:37 +0000
ROA not before:           Mon 02 Oct 2023 21:50:37 +0000
ROA not after:            Mon 30 Sep 2024 21:55:37 +0000
asID:                     42210
IP address blocks:        45.54.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:58:94:7b:09:1f:61:35:d2:d5:b4:43:bb:00:7b:a1:fc:1b:03:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct  2 21:50:37 2023 GMT
            Not After : Sep 30 21:55:37 2024 GMT
        Subject: CN=5FC9A1AE7758C8D3B48A21370EF11522989A88AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:63:f5:54:7d:58:87:0e:ec:14:59:f7:a1:
                    85:dd:55:0e:37:cb:40:34:7b:22:cf:3f:29:c5:5f:
                    6c:2a:ed:ce:88:1b:58:12:74:77:ef:3a:da:38:36:
                    9f:cc:4b:37:38:4a:83:9c:8a:62:5a:45:fd:a8:7a:
                    e6:b4:f5:69:08:7b:1e:62:1c:ce:e3:0a:e8:da:54:
                    20:cf:9a:8e:32:8e:85:ec:b8:75:12:a9:65:f1:d0:
                    0d:bb:04:18:6f:a1:96:f7:1e:34:17:27:6a:20:64:
                    92:a9:4b:c8:6f:4a:01:70:5d:58:b5:c8:60:79:64:
                    ef:f7:34:52:01:07:65:45:33:65:50:22:31:ba:fe:
                    36:7c:f9:cc:a1:21:50:d5:0a:11:3b:86:ff:77:a7:
                    f9:07:a2:19:12:49:57:5f:f8:7e:1c:e7:ad:13:cd:
                    84:b9:db:e9:6c:39:52:76:be:40:19:a7:31:63:20:
                    3c:e2:a4:96:8b:26:65:53:d4:8d:e4:3b:ec:e3:d7:
                    2b:e2:6a:f4:82:95:e5:dd:1f:ae:b2:db:f1:f7:95:
                    74:5d:ab:da:43:6f:7e:68:ac:46:fc:f2:aa:11:04:
                    aa:6d:05:7a:fb:e0:54:00:29:3c:e9:4e:4a:05:52:
                    8f:ae:20:a3:bd:de:52:08:ce:69:12:6c:2e:4a:0d:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C9:A1:AE:77:58:C8:D3:B4:8A:21:37:0E:F1:15:22:98:9A:88:AD
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS42210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:25:69:cc:7e:62:7e:44:42:e4:5e:8e:04:4f:68:1e:dc:06:
         f4:6a:01:d5:5b:5b:ee:72:52:09:ad:5a:b1:f4:91:9c:fd:ba:
         41:eb:40:88:04:29:53:e8:38:26:77:59:da:e1:0e:d4:07:15:
         da:56:71:00:8c:c2:e1:77:51:82:92:d0:25:b7:04:fa:da:9d:
         9b:cb:25:94:60:ea:62:75:54:27:e3:e3:67:f3:e1:24:0a:9c:
         3a:f2:90:49:4a:52:d5:ce:4d:f6:b9:5e:ce:51:c3:60:ed:c1:
         d9:08:7b:70:e5:f7:6f:3c:4a:d8:bb:9b:8b:19:3f:7e:4f:84:
         60:01:2f:3e:38:1e:08:32:20:d7:14:1b:a1:53:fc:e5:b3:a2:
         a3:2d:7f:ee:58:0c:14:f0:38:89:76:52:bc:7f:60:a2:17:a5:
         a4:96:ec:78:c4:b9:d4:f0:7b:a6:19:c2:be:59:c7:d2:f1:18:
         3d:9f:91:12:6f:52:be:e9:d6:90:37:cc:d8:ba:d7:95:09:be:
         f5:05:ed:82:6c:87:3e:eb:05:81:50:47:4d:20:45:32:be:56:
         a5:47:95:19:31:3b:ea:43:05:dc:3d:4c:8c:c3:5b:85:90:58:
         f1:21:85:ab:0a:4b:ef:c0:6b:7d:6d:1c:65:8d:47:46:28:4f:
         31:30:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:27:14 2024 by rpki-client on console-ams.rpki-client.org