Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3139322e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          bq8SWinqO1LqAW9vi3JphEa7sNZt0MM4YGbVgPOnEeM=
Subject key identifier:   76:BA:24:23:38:CA:33:D9:AE:27:52:0E:0D:D6:41:7B:43:02:75:4C
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       5A25BDFD17595C9F8D0087179B8E5C2356F4E005
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:18:42 +0000
ROA not before:           Tue 26 Mar 2024 04:13:42 +0000
ROA not after:            Tue 25 Mar 2025 04:18:42 +0000
asID:                     5650
IP address blocks:        47.192.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:25:bd:fd:17:59:5c:9f:8d:00:87:17:9b:8e:5c:23:56:f4:e0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:13:42 2024 GMT
            Not After : Mar 25 04:18:42 2025 GMT
        Subject: CN=76BA242338CA33D9AE27520E0DD6417B4302754C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:0e:8f:e0:7b:11:ef:38:04:e0:2d:54:2f:
                    28:24:73:2c:de:03:d7:f5:26:18:83:e0:e0:bc:f1:
                    80:8a:6f:7c:c2:89:2c:cb:81:ea:14:3c:ee:da:6a:
                    51:37:9b:09:ec:b3:4b:5c:96:9a:a3:42:d9:af:41:
                    11:69:10:41:12:a7:6d:03:55:34:10:28:49:99:30:
                    47:23:c7:f3:b1:02:c5:1e:64:02:0f:7d:d7:0a:0a:
                    95:a5:e4:7a:8f:c5:f7:77:3c:e3:af:10:07:37:17:
                    80:c9:17:87:a6:c2:df:d5:96:23:a2:0d:c8:26:57:
                    38:4f:ed:05:6b:bb:d0:56:e7:95:8e:80:fe:d2:b6:
                    e8:6f:83:eb:97:56:fe:a9:d2:08:50:37:3f:08:49:
                    69:e9:6d:e8:6f:95:9f:95:c3:d3:55:71:5a:0f:a7:
                    86:37:de:e9:f2:30:1d:8f:55:3a:80:31:72:6c:75:
                    39:a9:02:c8:65:e0:b5:23:dd:8d:57:8a:79:64:87:
                    14:9d:f5:76:42:83:b7:40:e6:80:e1:ad:93:42:b2:
                    57:af:0c:0d:4a:f9:0d:01:27:7e:78:2e:1e:df:0d:
                    19:f0:fd:a7:32:ce:5f:3a:13:0c:e3:c4:a2:b3:87:
                    5a:e7:b0:fd:0d:ce:a1:e3:7d:ae:25:ec:bc:03:e0:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BA:24:23:38:CA:33:D9:AE:27:52:0E:0D:D6:41:7B:43:02:75:4C
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:e6:93:87:25:cf:d1:0b:99:22:1f:81:bd:fe:a4:c0:78:
         df:e8:3c:4b:98:41:40:a5:2c:55:52:bd:b5:48:09:0e:bf:84:
         fc:7e:58:63:70:30:8e:8f:a2:77:d0:c9:86:b8:25:a3:22:9d:
         6e:1b:26:78:6b:92:2a:69:81:11:bc:06:fa:e1:36:38:0c:36:
         dc:04:51:f0:f1:57:d4:5d:02:e5:6c:3e:d4:7e:63:77:e4:a3:
         40:24:90:20:d1:a3:0f:92:96:d1:44:4e:2d:8c:16:de:06:35:
         9e:26:88:02:9a:84:e1:60:8b:4a:5e:2a:8b:9b:73:98:d1:97:
         55:c3:34:e1:06:34:bc:1f:a9:ca:59:9e:5d:32:cb:94:89:43:
         f5:f5:2c:d5:b5:2f:29:3a:82:ab:90:94:f8:d9:e7:91:f1:94:
         50:cd:c4:47:9e:2c:d2:e8:f0:92:7a:1f:30:92:2f:c6:c7:f3:
         fd:4a:30:b5:78:7a:44:f5:c3:1e:f5:ab:93:da:88:15:4b:d2:
         4a:0d:ce:e4:d3:f9:de:5b:d0:de:f9:92:da:8e:ce:b9:c6:83:
         85:a3:4d:58:4f:11:67:d0:06:3f:39:bd:e2:04:1b:94:6a:2d:
         30:15:e7:ab:fb:98:72:02:fd:d6:82:c1:34:60:24:f4:c0:3a:
         58:b2:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 12:37:52 2024 by rpki-client on console-fra.rpki-client.org