Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230352e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          odIG16jS37ELO+s9LLrkqs6EQy0yI0HnivLrtaRDn3s=
Subject key identifier:   4B:BB:57:FB:B3:03:6E:5B:FF:89:14:F0:24:AA:C4:70:B9:3F:FA:67
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       06078FB7424D4BB743A9DB4105B409881E72C017
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:19:15 +0000
ROA not before:           Tue 26 Mar 2024 04:14:15 +0000
ROA not after:            Tue 25 Mar 2025 04:19:15 +0000
asID:                     5650
IP address blocks:        47.205.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:07:8f:b7:42:4d:4b:b7:43:a9:db:41:05:b4:09:88:1e:72:c0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:14:15 2024 GMT
            Not After : Mar 25 04:19:15 2025 GMT
        Subject: CN=4BBB57FBB3036E5BFF8914F024AAC470B93FFA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:b3:65:5f:8c:03:e4:8b:48:a1:0c:8e:df:
                    f3:c7:e7:88:b1:7a:01:72:f5:6e:c6:6f:80:19:a4:
                    c5:5b:eb:ef:62:0a:39:6f:e0:64:f3:d4:d5:38:fe:
                    a7:d0:c1:12:0d:0b:67:f3:f1:56:2c:20:b3:78:17:
                    87:1b:b6:da:f7:e0:0c:c1:a4:e2:c5:df:c4:8b:b4:
                    2f:59:a5:f9:90:d9:eb:37:fb:6b:1e:80:a4:da:db:
                    4d:54:43:a9:ad:d9:7a:2f:84:e0:6b:6c:37:20:14:
                    f8:09:ea:c2:ab:6d:b7:88:81:c8:6f:88:95:e2:ad:
                    d0:e9:e3:84:9a:21:7c:64:75:b9:78:e7:52:6e:c3:
                    36:df:8b:24:45:cb:8c:a5:a4:5d:d0:ea:ed:c2:58:
                    4e:56:9c:08:8f:15:88:a2:07:f0:57:7c:52:3d:04:
                    db:d0:61:81:15:ed:d4:82:16:0f:22:58:7d:1e:50:
                    86:ef:98:c5:87:68:d6:fd:f7:8a:ed:2e:d9:3b:fe:
                    4a:8b:b3:df:1b:96:32:87:d9:3a:fd:a2:1e:14:0d:
                    62:4b:e2:2e:0b:65:33:40:59:7e:aa:87:df:19:7a:
                    36:e7:fc:37:3e:b1:9d:c1:3f:77:16:4a:30:28:7a:
                    9e:f7:f4:a9:06:d4:79:50:43:15:a5:50:73:f3:5d:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:57:FB:B3:03:6E:5B:FF:89:14:F0:24:AA:C4:70:B9:3F:FA:67
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:ee:82:f0:b0:b3:d8:4f:f3:ab:10:44:6a:22:a6:68:2c:21:
         80:c8:8d:fd:5a:bf:31:5e:80:fe:ef:05:1c:46:83:26:8a:4d:
         61:cb:47:8a:88:9f:5c:a9:8d:4e:a3:df:37:56:c3:12:d5:25:
         23:0a:9b:06:0f:68:8b:00:b5:3b:f1:33:4a:b7:a1:7b:43:7e:
         d7:7d:50:4a:c5:64:81:7e:ec:38:96:25:ed:4c:57:9a:1e:fa:
         cb:85:e4:04:0b:5e:1f:18:09:4a:87:7e:4a:79:a4:e8:33:a9:
         c3:d5:2e:19:5c:a8:c6:6d:d3:75:1a:14:a4:0b:bd:71:f2:cd:
         71:b3:cb:c7:1c:24:f2:45:6c:ae:d1:0e:f9:85:b5:69:97:14:
         49:0d:8e:4c:bd:d8:d7:e0:59:55:e6:fe:1f:b6:d9:a6:b3:b7:
         4c:78:ae:89:4c:e1:fb:92:81:c5:cc:41:ac:c1:f2:3b:a2:09:
         1e:6b:3c:1c:17:d1:53:65:2a:e7:ad:84:df:07:d0:0b:4f:1f:
         8c:5a:e8:54:5a:62:4e:b8:57:17:a7:42:68:ba:d3:c0:58:ed:
         f9:01:3c:55:f5:aa:30:52:84:5e:e5:3b:7b:4c:aa:86:ba:dc:
         35:d8:42:1e:6c:63:21:2b:d3:9f:67:11:48:ec:bd:ea:21:c7:
         6b:7e:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org