Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3139322e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          M2Lw14EXSpvxlkV++xYcR1TluS9+KKVfYCaJyfc6Bhc=
Subject key identifier:   99:A8:25:98:B6:CE:02:3F:16:20:7B:2D:A5:5B:F4:DC:F9:34:4C:62
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       0F58FAA911D5E5FB389A1EF7D008AA0380CD354E
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 25 Feb 2025 05:08:51 +0000
ROA not before:           Tue 25 Feb 2025 05:03:51 +0000
ROA not after:            Tue 24 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        47.192.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:58:fa:a9:11:d5:e5:fb:38:9a:1e:f7:d0:08:aa:03:80:cd:35:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 25 05:03:51 2025 GMT
            Not After : Feb 24 05:08:51 2026 GMT
        Subject: CN=99A82598B6CE023F16207B2DA55BF4DCF9344C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:a6:bd:75:a8:a1:7b:72:ec:03:51:a8:40:
                    78:b8:58:aa:ae:6b:fe:57:94:f3:41:46:f4:4d:55:
                    e8:a7:3c:14:70:e3:b9:4b:17:d3:3a:8a:84:9c:28:
                    35:1c:8f:2b:22:b1:45:9b:0c:1b:f2:f6:11:60:2b:
                    2a:fd:d5:f3:a4:dc:fd:b4:23:81:2e:d9:d4:77:b7:
                    72:9a:b1:cc:51:d2:5e:d9:7c:9b:0d:2f:04:31:be:
                    74:92:37:c8:95:20:ac:d0:92:7c:ca:c9:79:70:6a:
                    12:67:4c:98:cf:0f:77:ab:57:d4:00:ed:2f:b6:b6:
                    7c:d2:39:d6:95:34:5c:6a:27:1b:88:c6:11:01:a0:
                    6c:5c:fb:cb:ba:47:8f:9c:2d:c9:6c:3e:95:88:4c:
                    f9:0b:ea:0d:7b:52:98:25:1e:93:98:22:a4:ce:7e:
                    de:4b:9c:6f:d3:12:85:66:e4:49:35:a8:e2:5a:4d:
                    d7:b4:d0:07:f6:25:cf:39:34:5a:56:ac:42:39:96:
                    4f:1a:a5:70:05:34:a3:bd:f4:0f:95:ff:b1:fb:57:
                    1f:4c:05:29:16:a7:56:8f:0f:f7:4b:34:6a:6a:f9:
                    63:1c:0e:0c:ae:35:b5:50:eb:03:6a:a6:d1:ca:f8:
                    27:76:1b:66:ab:ed:5e:fa:30:ab:93:1e:74:19:37:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:25:98:B6:CE:02:3F:16:20:7B:2D:A5:5B:F4:DC:F9:34:4C:62
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:49:01:7d:13:64:c0:cd:f3:72:c6:5f:ec:58:27:23:50:
         b2:4c:ff:bd:a3:49:a3:b9:a6:e3:98:03:a8:fe:b9:1c:85:4a:
         4b:91:46:e6:54:cb:92:e4:a7:e8:a9:95:b4:e4:ef:8c:4e:35:
         fa:36:35:01:08:38:2f:b5:05:f9:96:0c:36:ac:f6:81:20:73:
         71:e1:4c:33:47:27:06:f7:32:63:32:de:e2:b7:75:e1:44:e2:
         67:27:e6:56:56:8f:d2:e8:e8:0f:c9:3e:0b:22:5a:29:4f:c7:
         28:4e:f2:28:aa:db:47:2b:27:7e:28:80:a9:0d:7b:70:f2:23:
         3f:46:d6:92:21:4e:12:cd:d0:88:e6:e0:76:f9:8a:b0:83:6f:
         1c:cc:be:dd:f6:e9:63:55:f4:8d:d5:51:1f:0b:30:04:fd:47:
         d2:29:71:18:0c:50:39:0d:ae:da:66:3e:72:c8:6c:83:37:72:
         6b:ba:ab:7e:3d:ff:2e:26:55:04:b4:45:68:df:0b:04:9e:1a:
         e2:95:ac:82:6a:54:ad:e1:96:16:53:46:dc:d6:3d:c6:a5:7e:
         e2:2f:c7:a7:06:0d:8c:26:66:c4:1d:12:de:1c:da:d6:d3:85:
         4a:87:d0:3d:6b:73:ad:b0:83:f5:35:1b:91:29:8c:0f:35:d3:
         63:45:10:81
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUD1j6qRHV5fs4mh730AiqA4DNNU4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjUwMjI1MDUwMzUxWhcNMjYwMjI0MDUwODUx
WjAzMTEwLwYDVQQDEyg5OUE4MjU5OEI2Q0UwMjNGMTYyMDdCMkRBNTVCRjREQ0Y5
MzQ0QzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeymvXWooXty
7ANRqEB4uFiqrmv+V5TzQUb0TVXopzwUcOO5SxfTOoqEnCg1HI8rIrFFmwwb8vYR
YCsq/dXzpNz9tCOBLtnUd7dymrHMUdJe2XybDS8EMb50kjfIlSCs0JJ8ysl5cGoS
Z0yYzw93q1fUAO0vtrZ80jnWlTRcaicbiMYRAaBsXPvLukePnC3JbD6ViEz5C+oN
e1KYJR6TmCKkzn7eS5xv0xKFZuRJNajiWk3XtNAH9iXPOTRaVqxCOZZPGqVwBTSj
vfQPlf+x+1cfTAUpFqdWjw/3SzRqavljHA4MrjW1UOsDaqbRyvgndhtmq+1e+jCr
kx50GTcmfwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJmoJZi2zgI/FiB7LaVb9Nz5
NExiMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzEzOTMyMmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL8AwDQYJKoZIhvcNAQELBQADggEBAF1b
SQF9E2TAzfNyxl/sWCcjULJM/72jSaO5puOYA6j+uRyFSkuRRuZUy5Lkp+iplbTk
74xONfo2NQEIOC+1BfmWDDas9oEgc3HhTDNHJwb3MmMy3uK3deFE4mcn5lZWj9Lo
6A/JPgsiWilPxyhO8iiq20crJ34ogKkNe3DyIz9G1pIhThLN0Ijm4Hb5irCDbxzM
vt326WNV9I3VUR8LMAT9R9IpcRgMUDkNrtpmPnLIbIM3cmu6q349/y4mVQS0RWjf
CwSeGuKVrIJqVK3hlhZTRtzWPcalfuIvx6cGDYwmZsQdEt4c2tbThUqH0D1rc62w
g/U1G5EpjA8102NFEIE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:43 2025 by rpki-client