Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230362e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          64dXBJOYrZzW1tv7etHYrUaJXNHdNuI13fyLyoHaX7k=
Subject key identifier:   9F:9B:5A:C7:19:A9:8A:57:AC:37:94:A7:F7:37:7A:1A:70:9B:ED:F2
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       420489E470F3AF7A1BE32B448A64DE57EBD0D1E7
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:19:23 +0000
ROA not before:           Tue 26 Mar 2024 04:14:23 +0000
ROA not after:            Tue 25 Mar 2025 04:19:23 +0000
asID:                     5650
IP address blocks:        47.206.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:04:89:e4:70:f3:af:7a:1b:e3:2b:44:8a:64:de:57:eb:d0:d1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:14:23 2024 GMT
            Not After : Mar 25 04:19:23 2025 GMT
        Subject: CN=9F9B5AC719A98A57AC3794A7F7377A1A709BEDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:6b:1c:0f:03:70:cb:3c:9a:6c:5e:cb:d4:
                    78:1a:cb:c2:71:73:1f:bf:ef:95:ac:1b:10:bf:80:
                    8a:e4:ee:7c:5e:26:a1:f4:fa:ac:18:3b:14:fa:4c:
                    65:fe:2d:b4:a3:d0:b9:a0:3a:6f:93:36:e8:0c:d7:
                    b1:20:cc:c2:bc:49:00:b7:16:9e:1a:ce:a0:53:7f:
                    5c:10:24:51:cd:79:ef:8f:06:c1:df:55:e8:c7:af:
                    df:bc:a1:17:59:06:9b:02:b9:fc:15:fe:f4:6b:6d:
                    24:0b:26:b8:93:a8:9b:81:86:b9:d6:8f:c9:e9:a2:
                    34:1c:6a:71:5c:12:9d:98:1e:46:7a:2d:a4:ff:56:
                    c6:43:c4:fe:d6:fe:8c:c9:74:cb:e3:eb:76:b1:b9:
                    ff:50:3a:32:75:99:5c:81:ff:38:9d:e3:90:30:98:
                    64:3f:ad:31:09:79:39:ae:89:96:24:3f:47:f2:21:
                    8d:85:08:54:2c:d2:c7:14:ba:7b:99:f0:2b:44:4d:
                    17:58:f3:bb:1d:41:e0:1c:41:02:1b:11:e8:4f:d5:
                    29:b3:1a:ce:3f:d3:d9:83:1e:a8:d3:cc:14:34:fa:
                    4d:0d:c2:6b:40:3b:ba:b2:64:2a:61:71:fc:d2:ee:
                    33:0b:03:d2:63:3a:90:39:a9:20:84:12:20:08:f7:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:5A:C7:19:A9:8A:57:AC:37:94:A7:F7:37:7A:1A:70:9B:ED:F2
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7f:13:2e:00:bd:7f:c9:bb:c2:a0:8e:1f:83:71:5b:c4:9e:61:
         91:92:c5:98:b4:2d:fb:18:8e:4c:08:8c:39:49:94:ce:36:5e:
         3c:33:e8:1b:b8:ba:67:4f:85:bb:f4:49:50:3f:6b:15:e8:59:
         78:f2:d6:22:a8:31:fd:53:24:2b:46:92:55:53:20:74:c1:16:
         03:98:d1:40:65:12:ce:28:b7:02:05:02:98:a5:91:8a:ea:99:
         92:27:7f:e4:d1:35:f9:ac:45:56:e0:3c:b9:f3:c7:ec:5e:63:
         5c:8e:8a:45:3a:48:ac:c3:af:35:8a:39:36:d2:03:ba:68:ea:
         96:56:6f:0b:fc:4a:e9:e2:8a:ba:eb:51:19:5a:a9:d9:09:4d:
         b6:85:45:e2:a2:51:d0:33:ef:24:cf:7b:3f:38:31:8b:b2:a1:
         1c:0f:e4:77:79:d5:8c:fd:8d:2c:84:76:c0:e0:56:0e:bb:38:
         64:12:2b:94:c0:0d:e5:01:25:56:9f:44:0d:03:a9:f2:bc:1b:
         b4:81:29:c4:a8:a6:54:fc:56:47:12:09:15:64:41:4b:da:78:
         ef:6c:07:30:d7:c9:3d:0a:bc:7c:0d:dd:8f:60:c5:c1:bc:8c:
         7f:86:c6:ae:46:a6:d9:6f:54:1c:61:e7:2b:20:b4:87:97:2b:
         a9:7b:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org