Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139352e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3139352e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          UWt63Dlbey9e/Tc7z9MK/FK5j4NB44rJ12AbxHI6LY4=
Subject key identifier:   59:B3:AA:63:FE:A6:0A:F6:99:83:FF:4C:73:4E:CD:F8:97:C1:4A:A2
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       0DD1E947B306D5954C413A79208AC304D1A057B7
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139352e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 25 Feb 2025 05:08:51 +0000
ROA not before:           Tue 25 Feb 2025 05:03:51 +0000
ROA not after:            Tue 24 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        47.195.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d1:e9:47:b3:06:d5:95:4c:41:3a:79:20:8a:c3:04:d1:a0:57:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 25 05:03:51 2025 GMT
            Not After : Feb 24 05:08:51 2026 GMT
        Subject: CN=59B3AA63FEA60AF69983FF4C734ECDF897C14AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:1b:b2:c0:4a:c6:78:9d:dd:f2:25:e1:de:
                    c2:69:1a:a2:a6:5f:9c:83:45:66:5a:53:59:a1:3f:
                    04:8b:eb:08:9f:d9:b0:32:2a:99:52:8e:23:f4:43:
                    ed:6e:50:43:40:0e:13:51:a2:9f:c2:27:a0:64:7c:
                    c8:0e:d7:74:84:0e:d0:2d:f6:13:51:d5:39:b0:d1:
                    b0:d7:aa:f2:6f:9c:67:97:18:ae:3d:74:7c:51:f8:
                    59:2b:50:22:14:df:81:fb:27:6f:6e:b3:c1:e1:44:
                    6a:96:65:1f:76:9b:7a:f1:36:a7:2b:fa:1c:a2:01:
                    6c:8e:97:49:87:d2:7a:c3:7b:d9:89:9c:4c:c6:d5:
                    76:e0:91:0a:a9:47:5e:d2:41:28:a0:f0:58:77:f7:
                    33:27:17:d7:fc:59:f1:47:3f:32:c6:fa:1a:74:87:
                    f7:ce:a1:21:4a:7f:db:ef:97:53:1c:c8:0b:83:5b:
                    2e:25:fb:64:37:43:a1:08:9e:de:ba:29:e9:40:cd:
                    9d:b1:45:1c:0d:2b:0f:51:a0:38:ba:98:44:0e:bd:
                    2b:2a:79:36:7a:e2:d3:66:bf:2a:14:00:55:81:49:
                    a2:dc:23:29:f4:23:04:4a:ae:37:8d:b8:ef:e5:4d:
                    70:c9:cf:14:c2:b2:30:02:81:23:14:27:82:23:90:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B3:AA:63:FE:A6:0A:F6:99:83:FF:4C:73:4E:CD:F8:97:C1:4A:A2
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139352e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:da:bb:c8:74:1c:56:78:12:ed:a2:d9:b8:ee:54:7b:12:
         2d:2e:d9:a0:d4:56:05:6f:76:86:2f:8c:dd:90:66:8c:27:c0:
         41:18:8a:09:d6:5d:3a:28:f8:37:b7:64:7f:83:87:36:10:dc:
         75:35:ba:36:b3:98:04:59:f5:a0:a3:5c:9c:92:97:49:24:71:
         3d:85:f5:c4:bb:c5:f0:d1:de:ab:fb:5f:03:5d:87:e5:b8:a4:
         e9:ad:32:58:88:a1:2f:f4:6c:1c:54:8c:b1:20:e8:02:c2:3f:
         cf:c4:bb:99:d7:b9:53:94:a5:72:e0:a0:ca:b9:58:bb:42:25:
         6b:71:08:a8:31:b4:08:fe:d3:76:17:3e:65:2f:d1:40:26:1e:
         e5:33:ee:c0:63:a6:f3:ff:10:e1:ab:14:ed:34:da:67:23:15:
         19:a9:6a:22:58:9e:06:bc:be:d9:d8:74:56:d4:fd:5c:39:42:
         76:98:3f:65:d0:ca:aa:b8:ca:be:d2:76:4a:14:e7:a7:7c:25:
         95:a0:3e:05:29:30:98:48:d8:ba:fb:14:10:10:f0:cc:09:98:
         01:19:47:bd:6d:58:db:ad:bc:17:50:ad:fb:49:86:00:7e:20:
         38:2b:d3:60:4b:1f:0c:14:38:81:4b:b6:87:7f:d7:4f:a5:ea:
         b0:f1:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:14 2025 by rpki-client