Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139352e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3139352e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          qY4OAgF9y8qsqzBK2lvd9HOYvvxg9w6ND4bZiBVuuCY=
Subject key identifier:   C5:9D:57:47:75:99:86:43:5C:5C:FE:E2:C3:53:6E:BE:97:C2:ED:0E
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       36059CF004323E1DCC3538247E275D3D2E59D75F
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139352e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:18:58 +0000
ROA not before:           Tue 26 Mar 2024 04:13:58 +0000
ROA not after:            Tue 25 Mar 2025 04:18:58 +0000
asID:                     5650
IP address blocks:        47.195.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:05:9c:f0:04:32:3e:1d:cc:35:38:24:7e:27:5d:3d:2e:59:d7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:13:58 2024 GMT
            Not After : Mar 25 04:18:58 2025 GMT
        Subject: CN=C59D5747759986435C5CFEE2C3536EBE97C2ED0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:b4:88:1d:a1:0b:be:60:17:5b:70:16:1d:
                    3b:b3:b7:b7:9a:43:a9:18:ae:d8:ec:fb:4d:40:94:
                    0d:ad:5f:da:38:fb:5c:dc:13:53:27:7d:02:a4:9d:
                    c7:8f:3e:26:35:0e:b9:26:32:ab:f5:e9:bd:26:10:
                    95:21:15:f3:4f:2e:2e:70:68:9e:9e:da:f4:1f:6f:
                    e3:40:f5:31:08:d5:f6:49:fc:00:43:63:f1:a1:2d:
                    66:5e:1f:2a:38:76:a2:89:ae:3b:e8:fd:aa:b9:83:
                    36:4f:10:28:50:1f:02:61:0a:b2:8d:71:ea:70:c8:
                    75:5b:db:24:ac:53:50:55:ca:85:12:f7:8e:4a:b5:
                    66:13:34:35:e4:55:37:c1:1c:fa:14:9c:52:54:73:
                    17:43:f7:37:57:29:72:e0:6f:f1:64:54:42:8f:bb:
                    2d:8d:77:49:1f:4f:10:5b:2e:2c:45:4a:f3:b8:2b:
                    75:78:6b:73:73:66:30:b2:31:53:5f:15:ce:a1:1b:
                    77:1d:5f:e5:10:ec:e2:ca:f6:77:a3:02:91:a2:4a:
                    e4:fc:00:25:6e:f4:ec:0e:6b:f0:a0:d1:f5:ae:20:
                    d6:dd:ce:f0:ba:fb:de:3e:3d:de:5a:62:67:97:4a:
                    e6:11:38:77:15:36:04:c9:5a:9f:e5:0b:a3:3b:04:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:57:47:75:99:86:43:5C:5C:FE:E2:C3:53:6E:BE:97:C2:ED:0E
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139352e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:29:a5:f3:3e:96:58:13:96:50:54:7d:de:17:ac:b9:62:11:
         e2:be:fe:72:7e:ed:52:82:9a:7c:ee:3f:1d:5e:c1:cf:e0:18:
         b3:d5:cc:bd:8b:b8:6d:95:7a:34:54:6e:cc:c3:9b:69:ea:89:
         ba:46:ca:85:2c:29:70:72:06:e2:8d:d6:64:52:c3:a9:b5:cf:
         a3:61:80:dc:46:62:b5:24:f4:2f:7b:56:e9:95:dd:e6:f5:e5:
         60:cc:6d:93:78:c8:7c:b0:99:03:40:e5:1b:e7:ec:15:44:7b:
         33:d1:9d:6d:97:79:26:9f:29:06:46:a0:18:2b:b8:d0:07:48:
         a7:62:aa:08:25:4a:a6:93:11:61:6b:a8:03:86:92:41:88:17:
         9a:c7:e3:43:fb:cb:eb:b8:9b:51:74:9a:0a:39:c3:05:98:66:
         80:63:f3:20:db:36:a8:06:56:f2:a3:4b:30:dd:f8:46:19:33:
         02:86:6c:7e:19:fb:66:de:18:f0:c8:11:70:0f:6d:f1:4e:b7:
         23:87:9b:52:3b:ab:2c:7e:fa:c9:08:0a:5a:18:a5:39:11:1e:
         fc:dc:d9:10:2d:ba:2b:6a:89:e8:ac:15:1b:41:89:c0:66:9f:
         39:fd:d9:f1:51:46:1b:d2:d9:a9:25:d0:82:8b:32:da:aa:ca:
         21:6f:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:21 2024 by rpki-client on console-fra.rpki-client.org