Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139362e302e302f31342d3134203d3e2035363530.roa
File:                     34372e3139362e302e302f31342d3134203d3e2035363530.roa (raw, json)
Hash identifier:          eW0nnE0Hiv0XXgjMf5x9Ycpsg64PS6NOH2kd/ViiG5g=
Subject key identifier:   79:92:29:B8:7E:60:3D:CA:6D:CF:A2:1C:BC:4C:0D:32:6F:CC:C8:1C
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       1F758DDA7E5BEDDC73B19B948A2AFB301A8A5371
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139362e302e302f31342d3134203d3e2035363530.roa
Signing time:             Wed 27 Mar 2024 05:04:00 +0000
ROA not before:           Wed 27 Mar 2024 04:59:00 +0000
ROA not after:            Wed 26 Mar 2025 05:04:00 +0000
asID:                     5650
IP address blocks:        47.196.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:75:8d:da:7e:5b:ed:dc:73:b1:9b:94:8a:2a:fb:30:1a:8a:53:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 27 04:59:00 2024 GMT
            Not After : Mar 26 05:04:00 2025 GMT
        Subject: CN=799229B87E603DCA6DCFA21CBC4C0D326FCCC81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:26:dd:b8:f4:69:e6:a0:a8:c0:0b:c6:6a:
                    1b:4d:d5:b9:1b:55:f5:3c:50:e7:5a:f0:ed:1a:e5:
                    8e:bc:13:b0:ee:2d:46:bd:71:36:ce:e5:c6:23:0b:
                    5d:a9:b0:41:e6:82:04:7f:21:8c:3b:4a:90:b8:8f:
                    93:53:47:e2:e3:0a:f2:e5:50:8b:4e:2f:bd:25:6c:
                    72:db:dd:2a:b5:f8:bd:45:a3:ec:a9:43:96:64:52:
                    e9:47:23:82:fd:3a:2a:87:72:68:4a:5f:0e:6d:60:
                    5f:28:59:aa:98:eb:cf:49:12:4c:7c:8c:d4:11:66:
                    c1:4f:e0:a0:02:02:dd:c7:f0:53:dc:b2:bd:2c:d7:
                    e8:ac:c2:2a:2d:11:11:5d:35:c8:3c:3f:d3:c2:33:
                    77:a4:63:81:a5:57:11:86:a0:ac:44:2f:db:4d:76:
                    ff:27:b8:78:dd:c3:4d:2f:b4:06:df:9d:f3:63:63:
                    25:5a:d9:bd:a5:48:45:29:df:fc:14:99:ac:ac:64:
                    99:48:3e:fa:d4:86:2f:30:6b:16:20:07:05:25:94:
                    78:64:e6:60:84:d3:aa:d3:d4:a4:eb:a4:e3:e1:34:
                    83:61:fd:03:e3:aa:0f:3b:92:eb:3a:3f:d3:82:28:
                    a9:c0:67:e6:ce:68:cc:a0:44:9f:1f:f6:40:23:bb:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:92:29:B8:7E:60:3D:CA:6D:CF:A2:1C:BC:4C:0D:32:6F:CC:C8:1C
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139362e302e302f31342d3134203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.196.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         9d:ab:b6:f7:53:96:f5:a9:ee:39:fe:b8:9f:a1:d6:aa:84:16:
         c1:c2:71:f0:6f:a4:7a:8e:21:98:51:e2:08:d7:77:31:75:f0:
         43:16:8b:3d:f7:ba:37:9c:c3:dd:c7:9f:97:d3:4b:e3:fc:06:
         8f:50:a6:07:b1:48:82:be:76:9c:9a:c8:1e:4e:8e:9e:76:59:
         89:1e:d8:78:c3:05:45:bf:42:02:da:c4:83:0e:9c:30:09:74:
         4c:f1:cd:f1:3a:99:a6:33:b7:97:e6:30:a5:79:38:a2:49:11:
         07:d2:8b:7f:18:ae:1f:62:31:aa:07:36:fe:bf:00:90:42:81:
         6e:fb:79:41:4f:6e:44:70:ea:8e:48:18:72:d8:fd:93:02:73:
         01:60:f1:72:7e:e9:03:12:7e:eb:81:2f:3c:1e:ca:9c:89:93:
         66:a6:04:4f:a5:68:d4:a9:db:b1:5b:94:71:f1:20:90:b9:5c:
         3e:ba:61:9b:81:c5:0d:08:64:3e:4a:33:7d:46:b6:6f:44:f0:
         91:04:1e:77:66:94:70:f2:18:a7:67:b0:c4:a9:f0:8b:72:b5:
         79:34:68:6d:a0:85:93:d4:f1:03:45:a3:45:55:db:36:ef:07:
         b6:cf:34:a4:5e:45:74:86:3a:ff:aa:ce:8b:5b:fe:f3:43:6f:
         92:5b:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org