Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e3132382e302f31372d3137203d3e2035363530.roa
File:                     34372e3139332e3132382e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          pRYl3vQIzZS/hhQTXCgLArVxQtcWT1ohBJVGYmDL+9E=
Subject key identifier:   91:E0:27:E1:E3:91:3E:4E:BA:DE:F3:2A:61:C5:E0:58:82:A6:C3:8D
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       315F23FFA016C1C3CEF3C6CE95B7286736DDED90
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e3132382e302f31372d3137203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:12:34 +0000
ROA not before:           Tue 26 Mar 2024 04:07:34 +0000
ROA not after:            Tue 25 Mar 2025 04:12:34 +0000
asID:                     5650
IP address blocks:        47.193.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5f:23:ff:a0:16:c1:c3:ce:f3:c6:ce:95:b7:28:67:36:dd:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:07:34 2024 GMT
            Not After : Mar 25 04:12:34 2025 GMT
        Subject: CN=91E027E1E3913E4EBADEF32A61C5E05882A6C38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:b3:7b:ea:4d:b6:71:08:10:5c:d4:dd:f4:
                    ef:18:c9:a8:f8:98:6d:83:b9:40:a7:89:3d:96:f2:
                    d7:ba:22:31:b4:76:03:54:cd:87:52:3a:e3:1c:40:
                    f5:94:f3:1c:1c:32:f2:4d:02:45:0f:44:3a:f7:1b:
                    16:b0:2b:f3:58:9b:ea:2d:69:ec:c3:ec:f6:93:f6:
                    3d:20:7b:6a:2a:7d:5e:c1:a3:f5:f5:67:83:2d:1c:
                    8a:5d:ee:40:6e:99:27:ab:71:b6:16:9b:08:48:39:
                    69:65:73:71:dd:46:c0:53:b1:a9:43:54:e5:42:10:
                    6e:fb:34:fe:fb:67:50:8c:f5:4b:c0:eb:47:a2:be:
                    ed:87:5e:b0:37:29:54:b1:83:7b:8b:50:8a:2f:62:
                    80:ae:73:b4:0d:e6:33:fd:ca:8f:2b:82:35:7c:81:
                    b6:6a:36:6a:56:3c:7b:8b:dd:bd:d3:37:c2:dd:ca:
                    46:96:58:95:f6:a8:93:eb:48:82:82:dc:de:76:4a:
                    ae:b2:ba:58:56:91:16:cf:0f:11:6a:c2:70:c9:c6:
                    32:54:b0:a2:fc:37:e5:9d:3e:9e:86:88:b1:a5:1d:
                    5c:da:dc:6b:3a:13:48:8c:6a:db:5f:5f:05:bb:fd:
                    ff:af:32:ba:6c:72:97:c8:03:e7:27:c2:8b:5a:82:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E0:27:E1:E3:91:3E:4E:BA:DE:F3:2A:61:C5:E0:58:82:A6:C3:8D
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e3132382e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.193.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         97:b6:9e:42:3d:8e:b1:62:e1:18:6f:90:23:3a:18:62:71:cf:
         a8:69:6f:41:f9:24:3f:52:b4:4e:32:61:2a:8a:4c:c9:69:2c:
         c4:f2:c9:d7:8b:d3:3d:eb:bc:58:71:f8:ac:7b:d7:77:14:38:
         74:fe:ad:41:2d:75:e6:52:de:c6:e7:74:60:b6:7c:5b:e5:2b:
         08:f0:00:5c:ed:e4:17:29:fe:cb:7d:d3:70:13:19:1e:00:72:
         04:32:fb:d2:8d:75:47:d0:ab:13:9f:1d:3c:a4:4e:b7:9d:42:
         dd:31:c5:bc:4b:b0:c1:1b:e7:fa:8f:3c:6b:9c:3d:0f:74:7f:
         de:fd:a3:39:cd:ce:fc:88:f5:69:93:51:ff:b3:b8:23:d4:f2:
         13:a4:5e:30:ed:b7:2d:7a:78:f5:8b:20:2b:e6:e5:96:90:0f:
         3b:b9:84:33:bc:ea:a9:4e:b5:53:40:41:32:d2:63:3a:c6:4f:
         6f:5b:e7:33:22:d5:51:74:02:b9:7d:49:52:41:82:37:b8:72:
         4b:1d:0d:55:3a:eb:b4:58:50:99:d9:d9:03:a3:dc:eb:de:42:
         89:fa:8b:20:70:58:5c:f1:30:4b:7f:ff:8b:75:55:09:1e:ca:
         37:89:d9:c6:94:33:40:a7:dc:9e:39:74:3e:d6:e3:c6:b4:1a:
         24:be:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 12:37:52 2024 by rpki-client on console-fra.rpki-client.org