Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139342e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3139342e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          oEZnpV/0/VpMRijqjwMeXQjFdJvS2V5DSoxxEf4uCoU=
Subject key identifier:   52:76:73:BE:08:07:70:2B:46:DD:99:C8:8E:0D:D3:67:8E:A6:D4:C2
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       608DB928B994E8E3FF41F7936AB377D9A4F250CF
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139342e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:18:50 +0000
ROA not before:           Tue 26 Mar 2024 04:13:50 +0000
ROA not after:            Tue 25 Mar 2025 04:18:50 +0000
asID:                     5650
IP address blocks:        47.194.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8d:b9:28:b9:94:e8:e3:ff:41:f7:93:6a:b3:77:d9:a4:f2:50:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:13:50 2024 GMT
            Not After : Mar 25 04:18:50 2025 GMT
        Subject: CN=527673BE0807702B46DD99C88E0DD3678EA6D4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:b4:79:f3:06:e2:c2:27:d2:e5:79:28:a1:
                    fe:1a:c2:5b:26:2c:c4:9d:4c:a9:c2:4e:79:2e:69:
                    3d:4f:87:fe:58:99:92:c6:6a:a6:93:4b:17:cc:82:
                    9d:dc:27:41:eb:b6:09:df:79:f3:0a:20:cb:01:0b:
                    ae:dc:f0:1d:2a:3b:87:95:8e:13:81:f8:9f:ee:ee:
                    77:2b:a2:07:f7:82:b7:43:b6:62:ff:a7:8f:f9:25:
                    f9:a1:d1:6a:3f:fa:d6:78:5a:89:88:08:e6:6e:79:
                    2d:4e:b0:40:5a:64:5c:9a:da:a1:46:6b:5f:9b:98:
                    d8:ea:c4:cb:96:b8:32:37:77:b8:7c:d3:dd:e2:22:
                    79:73:0e:c2:8b:85:a2:8c:db:60:99:d7:33:7a:d0:
                    96:fd:35:cb:e2:f3:81:58:71:59:c2:bc:a7:84:ef:
                    8b:b5:4a:2e:e1:fc:a5:20:c8:ad:59:3f:27:86:96:
                    11:2b:ac:41:59:e7:cf:66:22:92:23:c6:ba:99:05:
                    56:82:d1:28:cf:7d:b5:12:b0:c3:73:6e:cd:a9:05:
                    8b:93:ad:13:99:33:3a:52:b7:a1:28:de:80:ed:9d:
                    65:b5:70:58:f5:f7:d2:24:ca:be:95:7b:99:43:66:
                    8b:bb:9e:e3:75:80:16:b8:46:37:eb:9b:f8:c8:b6:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:76:73:BE:08:07:70:2B:46:DD:99:C8:8E:0D:D3:67:8E:A6:D4:C2
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139342e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:28:d1:90:0e:db:d6:e3:2e:45:4d:f4:c0:bb:c2:bc:e2:93:
         f9:e2:b3:95:41:7a:b2:13:f7:ba:42:86:5a:02:fd:a8:7a:b1:
         56:c4:99:43:4b:c7:f8:a4:23:bf:38:df:23:82:f8:d7:89:3e:
         57:7e:52:b7:1c:3e:2b:ff:12:af:b7:29:ec:11:94:76:8b:e4:
         a3:c1:fa:f6:b3:22:bc:be:49:14:1b:b5:af:9a:6a:32:b6:bc:
         cd:d1:4e:a5:33:72:b6:a3:e3:ca:b6:39:e7:ad:e2:52:bb:1c:
         8d:5d:e1:a5:5b:ab:33:6b:13:64:e7:36:a4:8d:7c:ef:1d:7d:
         a6:c1:17:da:e7:98:6f:92:4a:ef:a4:d5:b2:8e:c7:51:9e:3c:
         6a:21:88:ee:ee:99:e0:0f:32:fe:e1:8c:34:c8:7b:67:f7:52:
         93:56:f1:0c:ee:88:dc:6e:66:bf:22:9f:f6:4e:ba:cb:b9:4d:
         60:75:07:a5:fb:c4:f5:08:2f:c8:80:c3:3b:fd:ed:43:21:e4:
         86:85:66:de:2a:12:f7:03:6a:90:f9:3c:23:c9:d7:3d:c0:23:
         de:3c:71:a0:d0:dd:80:fa:3b:2c:b3:bc:d2:a3:a9:b6:05:df:
         0c:a0:b8:67:ce:b6:6c:b2:91:f2:a7:24:a7:d5:5a:f9:3b:ee:
         8c:8c:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org