Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230372e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          RDZUy5h5SBrnErFrX19PP9CgM3srhzh3cWitXc1MLzc=
Subject key identifier:   A7:C4:50:96:05:CE:12:D1:0B:AE:82:98:26:E5:BE:E4:E8:B5:F0:40
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       2AC94F5A94EE086BFC2422E37B6D36788EBA445E
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:19:33 +0000
ROA not before:           Tue 26 Mar 2024 04:14:33 +0000
ROA not after:            Tue 25 Mar 2025 04:19:33 +0000
asID:                     5650
IP address blocks:        47.207.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c9:4f:5a:94:ee:08:6b:fc:24:22:e3:7b:6d:36:78:8e:ba:44:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:14:33 2024 GMT
            Not After : Mar 25 04:19:33 2025 GMT
        Subject: CN=A7C4509605CE12D10BAE829826E5BEE4E8B5F040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:55:0f:7c:26:97:dc:6c:7f:5b:7c:14:ab:9a:
                    94:31:ee:2a:67:18:ed:3d:80:55:f0:63:f5:98:6f:
                    f4:59:fa:37:55:be:f9:38:12:9a:5b:98:ae:33:af:
                    fe:5b:2e:95:ad:0c:48:3e:6d:21:3a:4a:47:fc:70:
                    39:f3:f0:96:93:77:95:65:eb:bd:99:30:02:c6:90:
                    82:01:8b:a9:fb:77:ac:ff:65:6d:ae:c3:5d:66:d2:
                    ab:7f:24:33:8e:86:4b:84:8a:fd:b2:9e:31:12:52:
                    65:84:fc:e0:ef:97:62:47:88:87:eb:ab:70:a4:6c:
                    fd:0c:a4:11:d2:09:c0:73:4c:d9:91:95:f0:39:c8:
                    55:b2:33:1e:df:c0:18:2c:c7:5f:6f:aa:95:a2:1f:
                    e4:b1:33:0e:d4:06:9c:5f:48:64:45:45:c9:2d:3e:
                    4b:98:29:43:55:4c:6b:67:c7:5e:eb:13:54:99:23:
                    20:77:65:3c:6c:45:d1:77:a1:43:db:2d:38:fc:32:
                    c0:b4:73:3a:db:4c:4f:f3:c5:05:2b:9c:0c:64:90:
                    d1:92:92:61:cb:6a:a6:e8:34:7d:9d:c4:36:8e:2d:
                    ce:35:d6:54:6c:14:8a:41:04:75:f5:b1:3c:05:b0:
                    69:ac:28:da:9e:ec:f6:d6:1b:17:c4:c4:db:6a:eb:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C4:50:96:05:CE:12:D1:0B:AE:82:98:26:E5:BE:E4:E8:B5:F0:40
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.207.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:7d:85:5e:0d:49:b1:1d:20:42:c6:b9:72:df:a9:d8:1e:
         89:03:58:5f:39:be:5e:f7:f1:df:20:5e:61:cc:f9:e6:16:16:
         13:4a:aa:b0:f1:f4:a1:b7:1b:b3:cb:d1:0e:f8:f1:ae:09:fd:
         86:ee:11:66:ab:2d:f3:4a:84:74:44:ec:c0:84:28:69:ce:ab:
         8e:63:11:6c:34:41:a3:69:92:bc:4b:e3:e4:97:43:35:2b:30:
         e8:f4:0e:05:8c:ce:96:ad:c4:38:07:e0:f6:54:1b:0c:9b:30:
         6b:01:6e:b8:63:29:37:be:16:f4:c0:aa:fb:96:a6:7c:e9:97:
         20:74:64:25:76:d2:d6:75:2a:0e:b7:8e:12:5c:d4:b9:e8:37:
         2b:5d:ea:38:19:a7:01:40:de:47:03:6f:ba:c0:5a:02:8b:d3:
         fa:4e:e0:8b:e9:34:cf:11:bc:05:63:ed:43:43:e9:36:7f:72:
         ed:7a:06:76:70:67:4b:46:93:d9:a8:36:a0:03:90:2e:03:57:
         4f:51:68:47:5c:a6:58:91:3f:78:e7:ce:18:88:aa:4a:0e:f8:
         1b:05:01:fb:73:49:bc:d4:b4:ee:f9:44:a8:8d:6b:1f:f6:ae:
         40:30:58:97:1a:5d:56:ef:bd:c6:db:65:17:b7:bd:86:cb:c5:
         0f:51:7b:36
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUKslPWpTuCGv8JCLje202eI66RF4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQwMzI2MDQxNDMzWhcNMjUwMzI1MDQxOTMz
WjAzMTEwLwYDVQQDEyhBN0M0NTA5NjA1Q0UxMkQxMEJBRTgyOTgyNkU1QkVFNEU4
QjVGMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VUPfCaX3Gx/
W3wUq5qUMe4qZxjtPYBV8GP1mG/0Wfo3Vb75OBKaW5iuM6/+Wy6VrQxIPm0hOkpH
/HA58/CWk3eVZeu9mTACxpCCAYup+3es/2VtrsNdZtKrfyQzjoZLhIr9sp4xElJl
hPzg75diR4iH66twpGz9DKQR0gnAc0zZkZXwOchVsjMe38AYLMdfb6qVoh/ksTMO
1AacX0hkRUXJLT5LmClDVUxrZ8de6xNUmSMgd2U8bEXRd6FD2y04/DLAtHM620xP
88UFK5wMZJDRkpJhy2qm6DR9ncQ2ji3ONdZUbBSKQQR19bE8BbBprCjanuz21hsX
xMTbauugCwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKfEUJYFzhLRC66CmCblvuTo
tfBAMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzIzMDM3MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL88wDQYJKoZIhvcNAQELBQADggEBAAC3
fYVeDUmxHSBCxrly36nYHokDWF85vl738d8gXmHM+eYWFhNKqrDx9KG3G7PL0Q74
8a4J/YbuEWarLfNKhHRE7MCEKGnOq45jEWw0QaNpkrxL4+SXQzUrMOj0DgWMzpat
xDgH4PZUGwybMGsBbrhjKTe+FvTAqvuWpnzplyB0ZCV20tZ1Kg63jhJc1LnoNytd
6jgZpwFA3kcDb7rAWgKL0/pO4IvpNM8RvAVj7UND6TZ/cu16BnZwZ0tGk9moNqAD
kC4DV09RaEdcpliRP3jnzhiIqkoO+BsFAftzSbzUtO75RKiNax/2rkAwWJcaXVbv
vcbbZRe3vYbLxQ9RezY=
-----END CERTIFICATE-----
Generated at Sun May 19 12:37:52 2024 by rpki-client on console-fra.rpki-client.org