Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
File:                     AS395292.roa (raw, json)
Hash identifier:          /V5cHa7QGU5Mh83GW6DY6qIdQqzh1qARNxLZYacD3Fc=
Subject key identifier:   DE:E6:91:C1:81:C6:BE:C5:D5:C5:3B:4F:44:82:80:BC:73:44:B4:67
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3E86903F31C8DD7C974FBEDF92E08451CA42A4C5
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
Signing time:             Wed 20 Mar 2024 04:17:20 +0000
ROA not before:           Wed 20 Mar 2024 04:12:20 +0000
ROA not after:            Wed 19 Mar 2025 04:17:20 +0000
asID:                     395292
IP address blocks:        47.176.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 03:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:86:90:3f:31:c8:dd:7c:97:4f:be:df:92:e0:84:51:ca:42:a4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Mar 20 04:12:20 2024 GMT
            Not After : Mar 19 04:17:20 2025 GMT
        Subject: CN=DEE691C181C6BEC5D5C53B4F448280BC7344B467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:9f:83:c1:10:61:26:da:6a:91:aa:50:71:
                    25:0a:1f:51:99:b2:20:99:09:fa:08:0b:55:12:68:
                    a0:d3:14:fd:90:d6:bf:5f:46:6d:59:f3:91:9f:e6:
                    44:9c:89:02:41:81:63:9f:72:dc:92:68:b7:83:ab:
                    d2:52:00:c2:2a:25:85:11:6e:ba:d3:df:4d:9a:21:
                    19:6c:7b:43:92:34:04:9f:cd:8d:44:a9:fc:24:e7:
                    15:87:bc:a9:9d:9e:47:27:60:30:e6:b0:ad:83:9b:
                    ea:e1:a9:c1:88:c7:ea:20:c0:c6:39:51:b8:a2:3f:
                    c4:01:98:a2:5d:1c:97:50:4f:fd:78:da:3c:47:b4:
                    54:b5:45:32:01:a4:4a:75:62:9b:6e:20:cf:54:1b:
                    81:5a:a7:0f:8e:cf:27:32:73:2d:5e:76:8a:cb:67:
                    dc:6f:5d:83:14:e9:91:71:0d:ef:2f:4e:d8:65:02:
                    54:80:08:19:25:44:83:de:ab:85:aa:71:25:13:2e:
                    e7:8f:70:8d:de:75:3e:05:1e:10:f1:08:f2:d4:16:
                    3b:b8:7a:02:0b:03:ef:92:87:7f:8a:62:bf:4c:b2:
                    88:4c:62:c3:53:95:72:e3:34:8d:c0:fb:9b:55:0b:
                    ab:53:42:32:24:fa:cd:63:db:a6:20:94:d6:a1:d4:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E6:91:C1:81:C6:BE:C5:D5:C5:3B:4F:44:82:80:BC:73:44:B4:67
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.176.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:6c:49:c0:1f:52:ee:2f:77:75:79:5b:9d:33:f9:ff:18:
         11:92:9f:02:65:ae:4c:9c:b6:03:68:18:22:8d:42:27:0a:0a:
         6f:05:4d:fc:41:01:c9:5a:a3:63:2c:74:06:28:fd:83:8b:00:
         a5:8c:1e:74:a3:42:2e:f0:f2:f2:88:1b:d6:40:8b:85:08:a0:
         f0:0b:09:cc:aa:1e:bd:35:5d:74:90:9e:06:d6:c4:25:c7:3d:
         fe:38:91:61:80:72:7e:8e:2a:8b:4c:27:3d:bb:9b:b2:72:86:
         a1:95:35:0e:9c:9b:d6:65:82:56:7b:2a:50:4a:46:e3:8a:8f:
         3b:a7:0f:13:e1:f2:99:c6:17:47:1b:fd:98:15:72:9d:47:a7:
         1d:30:b2:02:7d:75:14:8e:37:7c:2a:f2:20:00:45:18:08:e6:
         28:1f:0c:21:89:50:81:c9:79:73:8c:d1:a3:b1:4d:4d:61:79:
         68:d3:57:c6:99:5a:9f:f5:60:02:92:3b:a5:84:c7:5a:ef:a7:
         9b:9f:61:ba:90:d9:6e:30:7e:26:f9:43:7a:cf:c0:9f:07:11:
         21:75:66:67:6d:ff:f2:c9:5f:c2:89:73:0d:d3:44:09:6e:04:
         59:37:73:97:27:1d:ba:f8:11:06:1f:00:ee:25:b6:f8:cf:08:
         88:8a:ce:14
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUPoaQPzHI3XyXT77fkuCEUcpCpMUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjQwMzIwMDQxMjIwWhcNMjUwMzE5MDQxNzIw
WjAzMTEwLwYDVQQDEyhERUU2OTFDMTgxQzZCRUM1RDVDNTNCNEY0NDgyODBCQzcz
NDRCNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugCfg8EQYSba
apGqUHElCh9RmbIgmQn6CAtVEmig0xT9kNa/X0ZtWfORn+ZEnIkCQYFjn3Lckmi3
g6vSUgDCKiWFEW66099NmiEZbHtDkjQEn82NRKn8JOcVh7ypnZ5HJ2Aw5rCtg5vq
4anBiMfqIMDGOVG4oj/EAZiiXRyXUE/9eNo8R7RUtUUyAaRKdWKbbiDPVBuBWqcP
js8nMnMtXnaKy2fcb12DFOmRcQ3vL07YZQJUgAgZJUSD3quFqnElEy7nj3CN3nU+
BR4Q8Qjy1BY7uHoCCwPvkod/imK/TLKITGLDU5Vy4zSNwPubVQurU0IyJPrNY9um
IJTWodRMWQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFN7mkcGBxr7F1cU7T0SCgLxz
RLRnMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvMy9BUzM5NTI5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC+w8jANBgkqhkiG9w0BAQsFAAOC
AQEAI+psScAfUu4vd3V5W50z+f8YEZKfAmWuTJy2A2gYIo1CJwoKbwVN/EEByVqj
Yyx0Bij9g4sApYwedKNCLvDy8ogb1kCLhQig8AsJzKoevTVddJCeBtbEJcc9/jiR
YYByfo4qi0wnPbubsnKGoZU1Dpyb1mWCVnsqUEpG44qPO6cPE+HymcYXRxv9mBVy
nUenHTCyAn11FI43fCryIABFGAjmKB8MIYlQgcl5c4zRo7FNTWF5aNNXxplan/Vg
ApI7pYTHWu+nm59hupDZbjB+JvlDes/AnwcRIXVmZ23/8slfwolzDdNECW4EWTdz
lycduvgRBh8A7iW2+M8IiIrOFA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:28 2024 by rpki-client on console-ams.rpki-client.org