Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
File:                     34372e3139332e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          S7OYLoAxYXkl+0by07oIOHVDeoZ8LccKfeAs4QtNrZY=
Subject key identifier:   D6:5B:C1:47:60:E5:E5:BA:88:93:A4:F0:77:A4:55:7F:8D:89:DD:DA
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       635257B7FB17572FA7E0BC2F4268FCB1C72EE955
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:12:25 +0000
ROA not before:           Tue 26 Mar 2024 04:07:25 +0000
ROA not after:            Tue 25 Mar 2025 04:12:25 +0000
asID:                     5650
IP address blocks:        47.193.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:52:57:b7:fb:17:57:2f:a7:e0:bc:2f:42:68:fc:b1:c7:2e:e9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:07:25 2024 GMT
            Not After : Mar 25 04:12:25 2025 GMT
        Subject: CN=D65BC14760E5E5BA8893A4F077A4557F8D89DDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:69:b0:91:d5:6b:33:f0:66:81:05:57:a9:
                    4b:7f:cd:44:e6:d7:37:b1:1c:0d:f5:05:9e:f0:36:
                    a3:b1:4b:fa:03:ca:96:e1:b2:52:5d:f9:aa:77:f8:
                    91:d5:22:03:c2:99:ae:ff:a9:a9:78:ee:2a:b3:c8:
                    cd:ad:cc:71:c4:8c:ff:03:d0:eb:4f:da:bb:fa:d3:
                    a4:4e:fa:34:46:9a:78:e7:2b:9a:41:f2:7c:0e:1b:
                    7d:df:7d:44:e3:19:d1:cf:3c:1f:8b:0c:63:62:a1:
                    57:f8:1e:61:ce:81:b1:0e:6a:d4:49:4a:5b:10:78:
                    19:30:e7:2b:06:dc:0a:01:89:0e:22:38:71:6a:90:
                    86:b8:63:a9:7e:89:4d:70:ba:dc:9c:82:f3:7c:6e:
                    a5:71:28:a8:01:ba:14:fb:f2:09:c3:9d:0a:ea:dc:
                    a6:39:fa:42:dd:8c:04:fa:95:bd:c6:02:66:27:2c:
                    cd:4f:be:cc:7b:e5:fd:dc:27:23:6b:8b:a8:2b:ed:
                    26:2d:47:34:2c:54:d4:22:9f:1b:c4:4d:34:df:02:
                    f5:10:1f:82:1b:a6:9d:be:49:b9:2d:f9:21:bc:70:
                    fa:28:df:f4:2d:7b:af:7f:87:df:37:3b:6f:ff:87:
                    64:df:f2:b6:a6:6b:90:e3:b9:6c:96:b4:c8:59:60:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5B:C1:47:60:E5:E5:BA:88:93:A4:F0:77:A4:55:7F:8D:89:DD:DA
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.193.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         44:68:90:ae:48:fc:9f:35:62:1a:21:23:50:2a:8c:ea:2f:2f:
         80:05:3a:20:5b:bf:2b:64:26:a3:ef:d6:70:a2:c9:99:16:89:
         e0:4e:95:f8:b4:e8:e1:c3:66:52:13:32:2e:1e:a2:e7:6c:dc:
         3c:77:35:37:34:8c:51:31:d0:82:ad:c0:2a:70:6c:79:6c:aa:
         ab:70:23:24:08:db:cc:2f:d4:20:a0:59:16:47:82:f9:51:d2:
         72:a0:75:3b:ef:95:10:63:00:c2:97:d2:f3:29:0f:69:5f:db:
         8e:16:1f:bf:d4:c9:ea:e7:67:da:37:a9:9d:5f:2f:97:da:e4:
         d5:a5:3b:cf:ed:4a:66:df:52:37:de:b5:93:6b:93:80:e0:2c:
         75:a7:cb:33:4c:4a:c5:4a:4a:fc:ab:1d:00:55:cd:2f:00:0b:
         35:32:83:16:2d:65:d0:c6:6e:4b:c8:75:11:81:c8:d0:c4:3c:
         2d:ee:4d:e7:3c:5a:fe:d7:53:df:ed:cc:9e:7e:77:06:a9:a6:
         3f:3f:c5:6f:2f:4c:d1:68:8c:f8:01:27:ae:6a:d8:69:24:28:
         b0:5e:b8:82:44:76:f0:79:49:5c:35:f5:f0:13:f2:88:8c:f0:
         ee:6d:79:53:ed:51:c5:2c:a0:4b:8c:99:0c:23:59:b5:62:85:
         41:ba:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org