Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS13454.roa
File:                     AS13454.roa (raw, json)
Hash identifier:          9svB2k/sSCQvlZV3ejyfqPFn8WseKsSSzPD4igc3Hl8=
Subject key identifier:   46:45:15:9F:1B:CC:22:45:ED:8A:14:ED:7F:B8:C7:14:CA:76:56:91
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       4B4CFA7FEB7DC1B82C5D00D2AFFCDA9A95B5349C
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS13454.roa
Signing time:             Wed 17 Jan 2024 05:46:29 +0000
ROA not before:           Wed 17 Jan 2024 05:41:29 +0000
ROA not after:            Wed 15 Jan 2025 05:46:29 +0000
asID:                     13454
IP address blocks:        74.212.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4c:fa:7f:eb:7d:c1:b8:2c:5d:00:d2:af:fc:da:9a:95:b5:34:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:41:29 2024 GMT
            Not After : Jan 15 05:46:29 2025 GMT
        Subject: CN=4645159F1BCC2245ED8A14ED7FB8C714CA765691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:b4:25:06:26:05:07:a5:a4:a6:00:c3:af:
                    8f:7f:6c:12:c6:33:67:68:35:6c:d1:25:f9:55:7c:
                    e5:d9:a6:ca:ae:a9:bc:39:3a:bc:b1:0b:28:4f:38:
                    24:ee:98:95:d1:e0:fc:f4:03:c2:34:02:86:7b:ca:
                    a0:22:c7:ec:f1:29:e3:66:cb:e6:19:d4:e2:a7:76:
                    90:83:e4:73:94:5b:12:dd:39:82:9a:8a:f5:2e:04:
                    32:dd:6b:be:4b:40:34:35:3a:97:f6:85:25:c2:0a:
                    ed:a6:5a:3a:f2:66:fa:92:4c:23:5a:54:c2:c0:44:
                    30:d2:22:eb:d7:c2:63:d0:49:1a:3e:8d:85:bf:22:
                    6e:94:bb:24:05:9f:fe:fa:ed:e5:cb:5b:57:e4:29:
                    78:8d:04:ef:be:b2:ef:6f:e3:39:03:44:f5:c4:09:
                    0f:4a:0d:67:3c:47:4b:0b:c8:bc:23:6b:0e:4e:1c:
                    df:22:ba:a4:58:6b:da:d3:ff:7d:be:91:9c:b4:bd:
                    cd:bc:c5:be:ad:0a:ce:f3:c2:5a:6c:49:ad:9e:d2:
                    86:d9:0e:56:b3:c9:57:20:da:31:40:79:a2:02:1e:
                    f2:11:4f:ac:95:71:ff:5e:2b:78:36:91:70:1f:65:
                    fd:ec:50:6a:99:b4:b9:f1:08:0d:6b:d3:99:be:11:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:45:15:9F:1B:CC:22:45:ED:8A:14:ED:7F:B8:C7:14:CA:76:56:91
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS13454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.212.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:96:60:e0:da:07:f1:01:ce:92:af:69:59:9e:b6:d1:64:c3:
         82:31:be:af:89:5d:2f:f8:94:df:3d:df:c1:d2:56:d9:6a:dc:
         47:78:77:23:33:a0:3c:47:73:de:84:d0:b0:8e:72:d2:df:ea:
         de:4c:bb:ed:8b:3f:bd:c8:77:7a:13:f6:d2:43:11:f0:53:69:
         99:bf:bb:00:e4:1d:27:ea:67:8e:8a:9b:b8:44:28:35:c6:51:
         ef:5b:dc:3f:83:fb:97:a5:88:f6:26:26:e2:92:1a:eb:06:82:
         c1:b3:b7:a4:b9:cd:eb:ee:db:f5:d9:94:ae:43:bc:3e:c1:2a:
         c9:2c:0b:f1:69:e4:33:15:3d:13:44:2c:8f:7e:08:94:48:27:
         64:c5:1f:73:73:cd:f7:a7:fa:49:30:2d:8e:db:7b:c1:5e:95:
         ce:a8:6f:26:c0:79:3c:62:26:b2:26:a4:13:7d:f3:e1:56:1d:
         2d:ac:6f:3f:92:bc:bb:ef:04:0a:41:02:3f:47:60:32:af:ae:
         f6:e5:5b:05:a8:af:aa:ce:56:ac:b9:39:b7:ad:b8:56:64:e6:
         66:97:b1:f7:dc:20:68:7c:fc:9d:7a:71:02:6c:7a:9c:d0:e9:
         73:72:f8:28:46:56:d9:52:ae:55:fa:d7:ae:cf:b9:d1:d4:82:
         e7:29:a9:60
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUS0z6f+t9wbgsXQDSr/zampW1NJwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQwMTE3MDU0MTI5WhcNMjUwMTE1MDU0NjI5
WjAzMTEwLwYDVQQDEyg0NjQ1MTU5RjFCQ0MyMjQ1RUQ4QTE0RUQ3RkI4QzcxNENB
NzY1NjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzW0JQYmBQel
pKYAw6+Pf2wSxjNnaDVs0SX5VXzl2abKrqm8OTq8sQsoTzgk7piV0eD89APCNAKG
e8qgIsfs8SnjZsvmGdTip3aQg+RzlFsS3TmCmor1LgQy3Wu+S0A0NTqX9oUlwgrt
plo68mb6kkwjWlTCwEQw0iLr18Jj0EkaPo2FvyJulLskBZ/++u3ly1tX5Cl4jQTv
vrLvb+M5A0T1xAkPSg1nPEdLC8i8I2sOThzfIrqkWGva0/99vpGctL3NvMW+rQrO
88JabEmtntKG2Q5Ws8lXINoxQHmiAh7yEU+slXH/Xit4NpFwH2X97FBqmbS58QgN
a9OZvhGZzwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFEZFFZ8bzCJF7YoU7X+4xxTK
dlaRMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzEzNDU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStQaMA0GCSqGSIb3DQEBCwUAA4IB
AQAGlmDg2gfxAc6Sr2lZnrbRZMOCMb6viV0v+JTfPd/B0lbZatxHeHcjM6A8R3Pe
hNCwjnLS3+reTLvtiz+9yHd6E/bSQxHwU2mZv7sA5B0n6meOipu4RCg1xlHvW9w/
g/uXpYj2JibikhrrBoLBs7ekuc3r7tv12ZSuQ7w+wSrJLAvxaeQzFT0TRCyPfgiU
SCdkxR9zc833p/pJMC2O23vBXpXOqG8mwHk8YiayJqQTffPhVh0trG8/kry77wQK
QQI/R2Ayr6725VsFqK+qzlasuTm3rbhWZOZml7H33CBofPydenECbHqc0Olzcvgo
RlbZUq5V+teuz7nR1ILnKalg
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org