Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS13470.roa
File:                     AS13470.roa (raw, json)
Hash identifier:          KYcfP8lHaqOym4wAkK07czOb2RMqDIkyoGoGzc+7TE4=
Subject key identifier:   36:EB:C9:F2:01:F5:F8:B7:E9:FB:C0:FA:23:D4:D8:DC:49:D4:CE:7A
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       667C0DA15C81A957E60A7A51D09AD1F5AF4DF9B8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS13470.roa
Signing time:             Tue 30 Jan 2024 05:26:14 +0000
ROA not before:           Tue 30 Jan 2024 05:21:14 +0000
ROA not after:            Tue 28 Jan 2025 05:26:14 +0000
asID:                     13470
IP address blocks:        74.43.150.0/24 maxlen: 24
                          74.43.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7c:0d:a1:5c:81:a9:57:e6:0a:7a:51:d0:9a:d1:f5:af:4d:f9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:21:14 2024 GMT
            Not After : Jan 28 05:26:14 2025 GMT
        Subject: CN=36EBC9F201F5F8B7E9FBC0FA23D4D8DC49D4CE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:4d:8a:c0:5c:e6:0e:8a:6f:1a:fb:56:df:
                    f1:98:c5:73:33:33:61:83:2f:e2:e2:46:5a:d7:d5:
                    90:3c:41:1a:45:c8:9e:8d:a1:ea:8e:e7:8b:cc:92:
                    5e:e0:f5:b4:41:9c:be:28:58:ea:c6:bc:f2:fd:a9:
                    2e:f9:49:b1:d0:c1:8d:f2:7c:01:e9:c3:0f:66:3b:
                    3a:1d:1e:36:06:5a:fa:70:00:74:2c:53:39:b3:a8:
                    dd:89:06:09:c9:1d:5b:ed:fb:f2:26:66:39:68:1d:
                    f9:11:41:b1:2e:43:a5:a9:7f:97:cd:ff:04:87:55:
                    1b:e3:83:e4:01:63:87:58:dd:83:2c:f6:5e:05:f2:
                    fa:33:f5:56:e7:9d:02:b1:1e:1b:2d:82:35:74:dd:
                    38:5e:8e:91:c8:84:c3:eb:ad:d1:83:69:81:5f:a6:
                    4f:77:41:33:94:e7:28:1e:5a:78:91:7f:0a:7d:46:
                    dd:c4:a1:3e:6e:37:72:d8:fa:d9:13:2f:63:26:61:
                    4a:30:a8:fe:4f:1c:b7:54:c0:1e:36:00:86:25:38:
                    53:09:76:5c:16:12:cd:b6:e4:b8:db:c4:f0:8f:61:
                    42:5b:53:15:3a:bf:03:ca:f6:af:27:df:fc:8d:cf:
                    d1:64:bc:fe:2c:68:59:64:53:dd:7d:38:86:d9:4e:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:C9:F2:01:F5:F8:B7:E9:FB:C0:FA:23:D4:D8:DC:49:D4:CE:7A
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS13470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:58:3b:7e:72:15:21:89:17:5f:f1:e1:da:8c:59:2a:a6:
         11:f1:f8:8f:c7:f7:f0:8d:b2:db:ce:c0:89:ed:d1:79:f3:92:
         5b:2a:c5:a8:92:c7:15:c7:07:b7:00:92:71:1a:61:0a:75:13:
         bf:d1:a0:76:56:dd:9e:d2:21:19:19:b7:95:78:7b:1c:d7:7c:
         dd:85:09:64:60:a5:eb:c1:3e:35:36:ad:76:30:aa:c7:bc:a7:
         c6:5d:45:52:bc:de:d4:ba:d1:31:36:72:2f:6e:ba:cc:59:81:
         15:24:3d:9b:79:bf:05:de:88:be:60:03:c7:45:a3:b7:8f:2c:
         16:33:d3:a6:d6:9f:a3:3d:d8:ff:f5:2d:ae:1f:73:ad:ec:65:
         fc:49:3e:83:27:5a:ba:4a:85:28:2f:20:73:25:7b:11:c8:50:
         64:42:95:2d:97:f7:2b:79:b3:fe:51:4c:ac:43:3f:b4:a8:11:
         6a:67:fa:84:8d:91:d0:c8:2d:e3:5b:ae:81:73:97:ba:71:f5:
         fa:3a:ae:69:4c:c9:78:52:c7:dd:63:54:f6:42:3f:b2:a8:8f:
         9d:f6:ec:7f:a5:4c:d0:dc:ab:e4:d1:a1:70:b6:de:43:cd:b2:
         f2:a2:82:4f:a8:65:26:63:05:7b:16:33:99:2d:67:a2:d2:9c:
         7f:b9:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:25 2024 by rpki-client on console-ams.rpki-client.org