Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3139312e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          Wh33Q6JRCqYivk0IvkxRVVysdCg94ILCbCPz5rvqaM0=
Subject key identifier:   0F:C6:E7:B3:72:4C:E9:35:FB:10:38:10:F2:6E:F5:37:E7:A1:C9:DF
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       3E22F15C7D14D5D5F901C8A2D25E54B0F9564A36
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:18:33 +0000
ROA not before:           Tue 26 Mar 2024 04:13:33 +0000
ROA not after:            Tue 25 Mar 2025 04:18:33 +0000
asID:                     5650
IP address blocks:        47.191.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 21:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:22:f1:5c:7d:14:d5:d5:f9:01:c8:a2:d2:5e:54:b0:f9:56:4a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:13:33 2024 GMT
            Not After : Mar 25 04:18:33 2025 GMT
        Subject: CN=0FC6E7B3724CE935FB103810F26EF537E7A1C9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:be:54:40:97:8a:ed:a7:ed:06:f4:a1:d9:
                    a2:e7:a5:ba:e0:e7:91:f8:c5:d0:9c:24:c5:a4:27:
                    80:de:7c:02:1a:9b:39:67:a9:2b:c2:3e:59:e0:93:
                    3d:21:6f:5a:7b:b9:ea:86:76:9e:95:bb:95:de:c4:
                    d5:9c:4b:93:e9:8c:43:ae:1d:b1:bd:e1:0d:e4:a2:
                    25:9b:d7:d7:86:1b:a0:50:23:84:ce:26:de:f2:4a:
                    d0:2b:73:3e:a6:2e:6a:58:65:61:b3:af:92:95:45:
                    88:63:b3:e5:c4:3b:db:e3:8e:d8:39:08:d4:96:b2:
                    36:27:7a:f5:2f:63:f2:85:16:00:08:91:81:b5:08:
                    92:09:e8:8b:bc:a6:fd:a9:58:c3:dc:ed:b9:0d:4b:
                    b8:7a:a5:f3:d1:a1:3c:8b:b4:2c:ce:c9:30:0b:60:
                    ad:eb:6c:b8:77:fd:b9:2a:df:55:f2:63:db:ef:af:
                    6c:81:28:fb:29:79:1c:99:1e:87:5f:4f:15:38:17:
                    9d:57:e5:a5:1a:1b:b1:2f:7a:c7:f3:bf:ac:35:16:
                    be:a3:9d:07:41:77:08:97:9a:c6:22:cb:a2:0e:dc:
                    1e:c0:f8:b6:b5:9a:d1:ef:bf:25:f2:c7:00:1b:27:
                    b9:db:ca:d4:d9:0f:73:c5:6d:23:fc:a1:ec:8b:51:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C6:E7:B3:72:4C:E9:35:FB:10:38:10:F2:6E:F5:37:E7:A1:C9:DF
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:9b:2a:74:0b:5f:87:1c:4c:ba:b5:f5:f0:8d:d7:37:06:e4:
         26:6c:7b:a1:3f:e9:c0:70:ce:f6:75:5f:42:2d:d5:1a:f8:37:
         1b:cf:15:82:d5:a8:cd:44:42:bb:54:c9:6f:d6:e7:1b:e6:5a:
         8a:67:2c:91:ce:fb:7d:07:c3:db:89:70:57:50:a0:a4:c1:0a:
         5b:02:75:e9:b8:64:f6:9b:bc:1f:f8:94:4c:d6:7d:d0:1e:f7:
         0e:ef:d1:90:b7:36:4c:fc:16:99:fe:96:c7:2a:1d:a8:2b:a2:
         59:ca:b7:b0:11:3c:06:fb:42:42:ff:c7:9e:e3:c4:a7:40:03:
         e6:da:ac:14:fb:15:73:75:6c:7e:fa:42:19:66:14:66:cc:9e:
         1e:2e:ff:3d:09:b6:8c:a5:9d:30:12:7b:a1:53:0d:25:89:cf:
         41:13:82:44:7e:09:4b:cd:78:6f:2d:ad:81:c4:7c:65:01:35:
         c7:3c:2a:57:a2:88:39:3a:cc:e2:62:e2:b8:11:a8:06:17:d1:
         23:89:d3:74:df:d2:c8:0f:2b:90:5c:1b:41:10:d6:8a:63:10:
         38:4c:3e:04:c9:26:8a:2b:7f:ff:86:e1:9a:e2:a4:e4:d2:da:
         c1:e0:c9:ef:3b:95:80:6c:cc:6a:ff:8d:53:54:c3:3a:3c:96:
         d1:4f:a3:9e
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUPiLxXH0U1dX5Acii0l5UsPlWSjYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQwMzI2MDQxMzMzWhcNMjUwMzI1MDQxODMz
WjAzMTEwLwYDVQQDEygwRkM2RTdCMzcyNENFOTM1RkIxMDM4MTBGMjZFRjUzN0U3
QTFDOURGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf++VECXiu2n
7Qb0odmi56W64OeR+MXQnCTFpCeA3nwCGps5Z6krwj5Z4JM9IW9ae7nqhnaelbuV
3sTVnEuT6YxDrh2xveEN5KIlm9fXhhugUCOEzibe8krQK3M+pi5qWGVhs6+SlUWI
Y7PlxDvb447YOQjUlrI2J3r1L2PyhRYACJGBtQiSCeiLvKb9qVjD3O25DUu4eqXz
0aE8i7QszskwC2Ct62y4d/25Kt9V8mPb769sgSj7KXkcmR6HX08VOBedV+WlGhux
L3rH87+sNRa+o50HQXcIl5rGIsuiDtwewPi2tZrR778l8scAGye528rU2Q9zxW0j
/KHsi1GgFQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFA/G57NyTOk1+xA4EPJu9Tfn
ocnfMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzEzOTMxMmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL78wDQYJKoZIhvcNAQELBQADggEBAECb
KnQLX4ccTLq19fCN1zcG5CZse6E/6cBwzvZ1X0It1Rr4NxvPFYLVqM1EQrtUyW/W
5xvmWopnLJHO+30Hw9uJcFdQoKTBClsCdem4ZPabvB/4lEzWfdAe9w7v0ZC3Nkz8
Fpn+lscqHagrolnKt7ARPAb7QkL/x57jxKdAA+barBT7FXN1bH76QhlmFGbMnh4u
/z0JtoylnTASe6FTDSWJz0ETgkR+CUvNeG8trYHEfGUBNcc8KleiiDk6zOJi4rgR
qAYX0SOJ03Tf0sgPK5BcG0EQ1opjEDhMPgTJJoorf/+G4ZripOTS2sHgye87lYBs
zGr/jVNUwzo8ltFPo54=
-----END CERTIFICATE-----
Generated at Tue May 28 22:50:00 2024 by rpki-client on console-ams.rpki-client.org