Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230372e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          MT4kBPu6hLmheRHHZEJ60l7XSECYFgfX3VSiZstnq8o=
Subject key identifier:   BC:AA:A0:82:31:11:15:3A:8F:DB:A4:31:33:45:04:07:D1:25:26:1F
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       193CB8B840D8278BDF8FA5257E5675EE3D8068EC
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 25 Feb 2025 05:08:51 +0000
ROA not before:           Tue 25 Feb 2025 05:03:51 +0000
ROA not after:            Tue 24 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        47.207.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 21:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3c:b8:b8:40:d8:27:8b:df:8f:a5:25:7e:56:75:ee:3d:80:68:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 25 05:03:51 2025 GMT
            Not After : Feb 24 05:08:51 2026 GMT
        Subject: CN=BCAAA0823111153A8FDBA43133450407D125261F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:bc:8c:59:c6:0c:d8:bd:6e:71:a9:ab:cc:
                    ca:4c:10:26:4f:91:9f:ac:dd:60:bb:98:d5:42:19:
                    a7:e8:f3:19:fd:e1:ea:3f:17:54:53:e1:b1:84:40:
                    c5:9c:25:df:bc:87:8d:73:17:c2:54:6d:01:b3:93:
                    42:42:53:39:d0:df:ca:76:07:58:d7:80:30:4f:2c:
                    ed:89:85:d2:33:82:47:c1:42:a3:c6:bd:ea:f7:fc:
                    fe:ef:7e:b0:fc:f8:a7:a8:9c:f4:7b:a8:f0:2e:c7:
                    be:16:53:17:27:b0:86:7b:f4:df:42:b8:71:a4:4c:
                    c6:b5:c2:15:06:84:2a:3d:75:ee:74:46:a5:c7:65:
                    64:36:e4:9a:28:e1:53:65:25:48:b7:c2:9b:84:28:
                    52:f5:80:d1:92:27:23:33:52:cd:3e:79:b9:ac:17:
                    d7:4e:40:d7:a6:28:e7:e0:a3:e8:53:8f:77:36:b5:
                    21:81:f4:98:14:74:60:4f:e2:d0:e9:db:79:bc:48:
                    ef:f6:d3:83:79:64:c3:a7:bf:3f:30:90:47:01:50:
                    a8:9e:7a:09:03:26:43:89:11:ec:0a:0d:75:36:cf:
                    d8:78:52:79:af:aa:45:1d:6b:a1:35:2e:b4:9b:2c:
                    38:cb:63:99:a3:da:ef:8c:2a:70:f0:3e:6d:fe:3c:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AA:A0:82:31:11:15:3A:8F:DB:A4:31:33:45:04:07:D1:25:26:1F
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.207.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:b1:e9:39:cc:f0:d1:91:c6:15:49:60:08:c0:3e:87:87:
         7b:29:69:78:d7:62:2d:63:b8:d0:db:f1:5b:9e:69:47:7c:fc:
         ff:54:b9:af:7f:28:b9:41:df:96:8f:77:90:c1:8b:11:61:00:
         71:97:1e:1b:0b:b4:37:bf:41:8c:7e:cb:14:30:5d:7f:b5:be:
         51:b0:99:b7:f3:20:0e:55:a6:c1:2b:a9:65:82:b2:22:2d:f0:
         d6:74:a5:69:a9:98:2a:80:eb:86:3b:a7:0c:00:42:74:d1:1c:
         22:cc:f5:5f:d0:a4:5d:6e:2c:c8:98:2e:53:63:a0:12:77:ac:
         05:8d:88:12:ad:9d:c6:ba:a4:8b:62:43:40:8e:4d:fe:e5:94:
         88:8c:e0:df:e6:34:46:bd:e9:96:5c:c2:34:97:de:ab:af:52:
         7f:1b:48:c6:4a:e9:c9:15:1b:18:bb:08:eb:ba:21:2f:cf:4b:
         a1:bf:c8:09:3f:23:a6:1f:2a:5a:d1:80:02:21:9a:f0:17:d1:
         b6:65:6a:e2:79:9b:95:f8:f1:c3:9c:d2:18:ed:18:67:3f:69:
         4f:ea:b0:8e:90:e3:ba:24:38:2a:7e:71:f4:82:96:9b:00:66:
         d9:fd:a6:2e:9e:7a:d2:81:4d:90:d4:f4:d0:a4:33:9f:e2:9e:
         78:b6:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:52 2025 by rpki-client