Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230362e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          ru77ugJeUIAQfUoB3vZLF/dQkghA4RK2n6PIJMeRTV4=
Subject key identifier:   91:27:B7:D2:BD:7F:E6:BA:63:67:FC:13:79:FC:38:6B:E4:F5:E1:D0
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       69598920FD58AF984EA932AC9616D6607CEBCD50
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 25 Feb 2025 05:08:51 +0000
ROA not before:           Tue 25 Feb 2025 05:03:51 +0000
ROA not after:            Tue 24 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        47.206.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:59:89:20:fd:58:af:98:4e:a9:32:ac:96:16:d6:60:7c:eb:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 25 05:03:51 2025 GMT
            Not After : Feb 24 05:08:51 2026 GMT
        Subject: CN=9127B7D2BD7FE6BA6367FC1379FC386BE4F5E1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:71:0b:d5:a9:51:86:60:f8:25:b8:31:a5:
                    f6:e0:9d:d9:86:ca:b2:62:c0:35:6f:f7:38:74:e9:
                    00:2b:e2:a4:6d:15:ee:3b:bc:b1:c9:a5:dd:3e:c1:
                    d7:3d:79:8d:2f:17:45:80:6e:ff:d7:4e:c2:ff:7c:
                    63:3f:46:53:ce:fb:66:49:af:d2:ce:12:37:61:ae:
                    6e:ce:64:d4:07:80:43:e3:01:9a:97:05:fb:41:bb:
                    84:b5:ac:2d:16:0e:a0:ad:a7:94:13:7c:90:11:20:
                    a5:72:e3:7e:22:d0:eb:0f:68:d3:61:0a:a2:37:c3:
                    45:8f:a6:02:af:2e:b0:47:6a:a4:2f:a9:b7:62:03:
                    07:19:ef:6a:c1:c8:40:25:09:d0:52:6d:6e:4f:b8:
                    db:15:fd:d7:5b:ba:44:a0:41:8b:70:46:74:f6:59:
                    cd:70:e8:ca:f9:c7:12:fb:ce:19:36:13:7e:37:1f:
                    0e:cc:54:cc:e1:c4:76:8e:e9:7a:ac:3a:54:f8:3b:
                    7f:00:f9:2c:2f:e5:05:7d:09:fe:6b:27:40:41:20:
                    8f:5c:4f:1b:24:0d:c9:67:ec:95:0c:71:f1:2b:93:
                    93:a2:2b:e3:43:0b:c9:42:41:0a:7e:04:2d:76:9e:
                    a1:aa:3a:58:96:c2:e6:ce:30:b2:30:99:b0:8b:d0:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:27:B7:D2:BD:7F:E6:BA:63:67:FC:13:79:FC:38:6B:E4:F5:E1:D0
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:05:c4:cf:f4:47:50:d3:72:00:88:82:09:b1:05:a9:1e:2b:
         aa:7f:a5:fa:18:ad:98:62:9c:0c:35:52:90:2d:b4:27:6e:73:
         12:94:83:ba:fc:50:b6:0b:89:f4:4d:69:b5:72:e7:ab:37:d4:
         f5:0d:8a:8c:dc:24:f7:07:c1:45:a8:6c:ba:af:99:33:a6:c4:
         26:22:4b:95:1a:c5:88:c8:fe:be:50:7a:36:0c:5b:61:0d:58:
         9c:f8:16:7e:69:9d:91:8a:28:4d:8b:90:27:78:b8:e8:a5:60:
         04:79:4c:04:aa:77:af:c5:2c:8c:cd:c1:95:6e:0d:1b:7c:a1:
         7c:a9:b9:8a:08:10:ad:47:bb:ce:01:a3:ff:ac:c4:28:1c:8e:
         e8:0a:4d:c1:72:72:6e:37:77:14:6d:cb:54:f7:01:1a:5e:1c:
         64:e5:f1:62:e7:ce:bc:39:45:26:87:ee:51:d0:6b:f3:78:05:
         bb:c5:94:0c:cf:a7:55:1a:d7:9a:70:31:ad:4f:de:43:67:d4:
         11:91:32:8e:7a:1f:1d:9b:11:94:a3:a2:d7:3a:8b:c9:5f:f1:
         61:3f:0b:53:95:a0:e1:df:0e:bb:42:3e:d3:93:2c:0e:cb:b8:
         1b:7f:be:08:9d:19:a0:e2:70:54:bb:ce:b5:13:c8:b3:52:9d:
         3e:aa:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:10 2025 by rpki-client