Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46590.roa
File:                     AS46590.roa (raw, json)
Hash identifier:          W9rc1FZuAkaay4kWdqHDfkZVsDtsSc0sWmoW6NF040w=
Subject key identifier:   F1:64:DA:A8:18:1D:A4:FA:34:4F:5D:AA:B9:AE:B1:68:B9:53:C4:E1
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       3A6648CDF14D40654F92A528F17EE4E123CBDAE2
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46590.roa
Signing time:             Wed 17 Jan 2024 05:50:04 +0000
ROA not before:           Wed 17 Jan 2024 05:45:04 +0000
ROA not after:            Wed 15 Jan 2025 05:50:04 +0000
asID:                     46590
IP address blocks:        50.110.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:66:48:cd:f1:4d:40:65:4f:92:a5:28:f1:7e:e4:e1:23:cb:da:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:45:04 2024 GMT
            Not After : Jan 15 05:50:04 2025 GMT
        Subject: CN=F164DAA8181DA4FA344F5DAAB9AEB168B953C4E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:44:60:24:a2:b9:0b:0b:4e:e3:39:db:78:
                    4f:f6:9c:b0:e5:c9:9d:37:c4:04:20:be:87:45:46:
                    ae:a3:0e:ad:ae:91:3a:51:2d:5e:06:06:7b:03:d6:
                    54:e2:d8:f3:e1:14:9e:86:01:38:2b:1f:b8:5c:fc:
                    6c:e4:a4:19:98:cb:21:e4:10:3f:58:f8:c3:4b:27:
                    fd:3d:c7:5f:42:5b:05:e5:5e:9b:33:ee:af:31:56:
                    93:b6:1c:1c:06:a3:09:42:c5:34:a8:1d:1e:2d:3c:
                    77:3e:b2:6d:5e:d2:45:14:77:33:03:13:e7:3e:3a:
                    ce:23:d4:a7:fd:6f:f9:87:d1:cb:df:29:b4:13:4c:
                    16:de:09:a7:6c:1a:85:da:2a:1a:ce:f7:1b:c8:f4:
                    ea:eb:4d:de:f2:2d:2b:0e:b9:25:fa:b4:96:38:0b:
                    1e:14:c7:82:d9:52:2c:96:7d:1f:9d:a0:ba:d3:59:
                    9b:4e:8c:5a:7f:58:ee:99:99:84:8a:bf:44:ef:06:
                    53:72:76:dd:6c:f4:83:76:cb:89:d7:2b:3d:70:65:
                    8e:8f:70:a1:19:42:ce:15:07:b2:67:cd:f3:ab:84:
                    3a:87:46:d6:6b:70:28:15:98:6d:29:33:a4:a1:72:
                    91:f7:34:0c:48:fc:c1:e1:11:ee:11:d5:01:6d:76:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:DA:A8:18:1D:A4:FA:34:4F:5D:AA:B9:AE:B1:68:B9:53:C4:E1
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46590.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.110.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:98:05:66:45:5d:d3:42:12:00:0b:f5:d0:42:c8:8b:1b:62:
         42:d2:67:25:11:9c:e7:62:2a:bc:11:f9:91:04:86:9f:4b:b1:
         c1:c5:cb:b4:07:cd:80:f7:ab:08:8f:e8:ac:64:10:42:cb:06:
         91:ae:ba:e2:d4:5f:15:21:1d:89:47:96:d1:d0:8a:de:fe:65:
         70:9d:7e:5e:92:5d:5d:dd:f7:44:70:49:64:8c:e8:d6:ee:5b:
         a2:4d:ca:9c:40:9e:6f:1b:3e:f3:05:df:b4:01:50:60:03:ad:
         21:33:ba:fc:57:96:65:f5:c4:79:f4:e5:f0:93:5a:32:64:d0:
         0a:cb:c3:eb:22:02:34:21:b4:4d:ea:32:43:8f:a3:8d:16:5e:
         b4:7b:59:5f:97:e6:13:c3:91:2a:5a:1a:a2:2f:7d:b6:ab:15:
         e6:64:c0:1e:a5:d6:b6:b6:b9:ec:43:b3:36:85:f2:7f:eb:97:
         80:54:1f:96:41:24:19:af:2e:f1:12:85:3c:23:df:85:46:97:
         ac:16:63:fb:0e:78:23:c4:52:37:a3:44:e4:5d:76:05:1d:3a:
         c8:44:cb:b3:eb:2c:2f:f4:70:4e:fc:7d:5f:3d:db:75:1f:74:
         ef:d7:70:7a:f9:d9:9c:38:ba:07:c5:2d:fe:a6:70:a5:60:67:
         f5:be:39:65
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUOmZIzfFNQGVPkqUo8X7k4SPL2uIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQwMTE3MDU0NTA0WhcNMjUwMTE1MDU1MDA0
WjAzMTEwLwYDVQQDEyhGMTY0REFBODE4MURBNEZBMzQ0RjVEQUFCOUFFQjE2OEI5
NTNDNEUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fxEYCSiuQsL
TuM523hP9pyw5cmdN8QEIL6HRUauow6trpE6US1eBgZ7A9ZU4tjz4RSehgE4Kx+4
XPxs5KQZmMsh5BA/WPjDSyf9PcdfQlsF5V6bM+6vMVaTthwcBqMJQsU0qB0eLTx3
PrJtXtJFFHczAxPnPjrOI9Sn/W/5h9HL3ym0E0wW3gmnbBqF2ioazvcbyPTq603e
8i0rDrkl+rSWOAseFMeC2VIsln0fnaC601mbToxaf1jumZmEir9E7wZTcnbdbPSD
dsuJ1ys9cGWOj3ChGULOFQeyZ83zq4Q6h0bWa3AoFZhtKTOkoXKR9zQMSPzB4RHu
EdUBbXa0cQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPFk2qgYHaT6NE9dqrmusWi5
U8ThMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzQ2NTkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMm6GMA0GCSqGSIb3DQEBCwUAA4IB
AQAjmAVmRV3TQhIAC/XQQsiLG2JC0mclEZznYiq8EfmRBIafS7HBxcu0B82A96sI
j+isZBBCywaRrrri1F8VIR2JR5bR0Ire/mVwnX5ekl1d3fdEcElkjOjW7luiTcqc
QJ5vGz7zBd+0AVBgA60hM7r8V5Zl9cR59OXwk1oyZNAKy8PrIgI0IbRN6jJDj6ON
Fl60e1lfl+YTw5EqWhqiL322qxXmZMAepda2trnsQ7M2hfJ/65eAVB+WQSQZry7x
EoU8I9+FRpesFmP7DngjxFI3o0TkXXYFHTrIRMuz6ywv9HBO/H1fPdt1H3Tv13B6
+dmcOLoHxS3+pnClYGf1vjll
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:57:11 2024 by rpki-client on console-fra.rpki-client.org