Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230302e302e302f31342d3134203d3e2035363530.roa
File:                     34372e3230302e302e302f31342d3134203d3e2035363530.roa (raw, json)
Hash identifier:          zIHnqFrR5t3MXzMn+LoO2QNZQtR3gdNDtwBMZq7qw8w=
Subject key identifier:   3E:1E:F0:36:A0:63:0A:77:C8:26:DF:47:E8:3F:B6:4B:5F:DA:72:33
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       479E13A086582588A3248D6620E18E1D08AF1F79
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230302e302e302f31342d3134203d3e2035363530.roa
Signing time:             Wed 27 Mar 2024 05:04:08 +0000
ROA not before:           Wed 27 Mar 2024 04:59:08 +0000
ROA not after:            Wed 26 Mar 2025 05:04:08 +0000
asID:                     5650
IP address blocks:        47.200.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9e:13:a0:86:58:25:88:a3:24:8d:66:20:e1:8e:1d:08:af:1f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 27 04:59:08 2024 GMT
            Not After : Mar 26 05:04:08 2025 GMT
        Subject: CN=3E1EF036A0630A77C826DF47E83FB64B5FDA7233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:53:4b:36:d5:e7:79:f9:5d:51:da:25:8a:
                    50:7b:b0:2d:89:19:cf:f6:c0:d4:bf:15:f1:fc:8e:
                    e7:68:c7:b3:2e:92:af:7b:ce:61:97:67:6a:4b:96:
                    a9:1e:ef:0c:f1:7a:d2:60:ac:6e:6a:68:ea:3e:78:
                    43:73:f9:9b:4a:e7:10:ef:17:f0:d3:1f:57:d4:e1:
                    11:9e:2b:72:90:11:c2:a6:6b:1f:65:fc:3b:53:7f:
                    32:ea:b9:5e:74:4d:3f:df:8c:0e:ac:14:71:86:24:
                    00:01:ba:9d:34:ba:1a:7d:b2:4b:8d:4d:92:79:15:
                    48:8b:0b:66:11:bf:43:aa:3c:d9:ba:85:52:d3:79:
                    a1:67:6a:66:56:8f:58:9b:e3:54:90:04:26:59:48:
                    d7:11:57:23:d0:dc:3c:79:d1:86:e9:90:79:2c:1d:
                    17:e6:86:34:53:be:76:22:3a:48:ea:fa:90:11:7f:
                    18:b3:2b:6b:dc:a2:d7:4f:c7:b6:df:99:f9:41:4b:
                    0a:82:80:97:bb:00:1c:aa:4f:02:9a:f3:6f:e3:a9:
                    f6:f2:f2:b6:3f:93:9c:ae:f2:09:ff:28:90:3c:10:
                    74:46:61:7e:6e:f2:dc:17:86:c5:3e:63:35:2c:2a:
                    44:86:e3:d9:58:8e:d3:9c:fc:69:2c:5e:84:3f:a5:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:F0:36:A0:63:0A:77:C8:26:DF:47:E8:3F:B6:4B:5F:DA:72:33
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230302e302e302f31342d3134203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.200.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         d1:ad:43:80:8d:a5:89:f0:be:24:9c:3a:9c:3d:26:5f:c5:b5:
         e9:86:2d:d8:24:37:20:62:3f:0f:d9:b1:f3:70:91:da:3d:b4:
         d4:e8:93:fd:85:f1:c1:5b:35:39:a7:de:ee:51:af:17:45:c7:
         f6:8d:a9:21:ea:69:73:f6:ea:99:34:68:37:3b:4b:9d:7b:e1:
         c7:07:59:bd:c5:3c:12:62:30:15:60:fc:44:c9:9c:94:42:99:
         4d:16:58:fc:a8:81:87:a7:83:7c:7b:9e:94:b8:f5:6b:fb:cc:
         7a:48:f8:82:26:9f:42:88:a5:95:de:3e:79:e0:5b:f9:d3:82:
         57:f2:c6:61:0d:1a:0f:62:f1:ab:55:4c:6c:6b:5d:c7:fb:e5:
         50:99:cb:4a:07:0b:8d:03:b5:2f:4e:65:61:02:6d:9b:38:f7:
         2c:47:c9:9e:cf:3b:82:09:c6:08:66:68:4f:ed:f2:02:85:77:
         2a:ce:21:fe:e9:6d:b4:33:39:5f:6f:09:26:9a:a7:1d:6c:17:
         19:96:8c:db:d4:90:8e:58:03:9c:7a:4d:27:dd:4b:8e:8e:db:
         dd:21:79:4c:6e:05:32:1b:47:5f:fe:1a:80:bc:20:a4:10:e2:
         82:8a:c8:c6:ea:db:37:33:4e:12:f3:15:4d:15:6b:53:88:d6:
         3c:ab:73:1a
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUR54ToIZYJYijJI1mIOGOHQivH3kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQwMzI3MDQ1OTA4WhcNMjUwMzI2MDUwNDA4
WjAzMTEwLwYDVQQDEygzRTFFRjAzNkEwNjMwQTc3QzgyNkRGNDdFODNGQjY0QjVG
REE3MjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UlTSzbV53n5
XVHaJYpQe7AtiRnP9sDUvxXx/I7naMezLpKve85hl2dqS5apHu8M8XrSYKxuamjq
PnhDc/mbSucQ7xfw0x9X1OERnitykBHCpmsfZfw7U38y6rledE0/34wOrBRxhiQA
AbqdNLoafbJLjU2SeRVIiwtmEb9DqjzZuoVS03mhZ2pmVo9Ym+NUkAQmWUjXEVcj
0Nw8edGG6ZB5LB0X5oY0U752IjpI6vqQEX8Ysytr3KLXT8e235n5QUsKgoCXuwAc
qk8CmvNv46n28vK2P5OcrvIJ/yiQPBB0RmF+bvLcF4bFPmM1LCpEhuPZWI7TnPxp
LF6EP6U0kwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD4e8DagYwp3yCbfR+g/tktf
2nIzMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzIzMDMwMmUzMDJlMzAyZjMxMzQyZDMxMzQyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMCL8gwDQYJKoZIhvcNAQELBQADggEBANGt
Q4CNpYnwviScOpw9Jl/FtemGLdgkNyBiPw/ZsfNwkdo9tNTok/2F8cFbNTmn3u5R
rxdFx/aNqSHqaXP26pk0aDc7S5174ccHWb3FPBJiMBVg/ETJnJRCmU0WWPyogYen
g3x7npS49Wv7zHpI+IImn0KIpZXePnngW/nTglfyxmENGg9i8atVTGxrXcf75VCZ
y0oHC40DtS9OZWECbZs49yxHyZ7PO4IJxghmaE/t8gKFdyrOIf7pbbQzOV9vCSaa
px1sFxmWjNvUkI5YA5x6TSfdS46O290heUxuBTIbR1/+GoC8IKQQ4oKKyMbq2zcz
ThLzFU0Va1OI1jyrcxo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org