Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46947.roa
File:                     AS46947.roa (raw, json)
Hash identifier:          sz7fjMI74HylASiIwn97cpxvpa8QzbgKiuFu8YzCYjM=
Subject key identifier:   E6:DD:C4:0B:BE:74:A8:78:44:59:D6:C4:B5:8C:DD:3A:17:08:FA:B2
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       0C19B68F698BBF847F61D551CC2CF5BA5C86AA92
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46947.roa
Signing time:             Wed 17 Jan 2024 05:47:49 +0000
ROA not before:           Wed 17 Jan 2024 05:42:49 +0000
ROA not after:            Wed 15 Jan 2025 05:47:49 +0000
asID:                     46947
IP address blocks:        74.43.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:19:b6:8f:69:8b:bf:84:7f:61:d5:51:cc:2c:f5:ba:5c:86:aa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:42:49 2024 GMT
            Not After : Jan 15 05:47:49 2025 GMT
        Subject: CN=E6DDC40BBE74A8784459D6C4B58CDD3A1708FAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ec:e5:da:a1:43:0f:77:9d:7c:7a:9c:fc:03:
                    06:36:61:76:79:fd:43:6b:da:f0:fa:70:38:99:ea:
                    f1:09:40:26:7f:a1:f4:a1:52:29:79:74:6e:73:39:
                    2d:b6:80:94:91:32:78:6e:0b:94:54:c5:e8:7b:d2:
                    af:b7:2d:b7:bf:f3:f6:00:b9:85:e7:f4:23:1a:c9:
                    d5:eb:9b:0f:ce:2c:9b:0e:11:0a:19:1a:1b:82:f5:
                    bb:1e:63:b2:60:11:cf:58:de:15:77:1d:c9:bd:dc:
                    ad:ed:e3:c8:9e:6c:29:ae:5f:4b:b2:7a:be:cd:4e:
                    08:46:95:35:34:3f:54:96:fa:9f:6f:f7:26:fb:39:
                    fd:36:90:14:91:f8:e2:71:0b:e2:ee:76:7c:78:ae:
                    5a:70:bf:a7:e9:ce:fb:17:f4:c7:ed:3e:ea:a0:de:
                    c0:80:10:02:0d:a5:d0:ae:7c:f5:98:d7:b3:89:e1:
                    66:c1:b7:0d:dc:c6:4e:34:85:56:ca:61:d3:d9:e0:
                    2d:1c:68:b3:8b:e7:34:63:8d:b2:3a:69:0f:01:56:
                    db:9e:3c:89:a1:c4:1b:6a:be:c1:05:03:65:b8:4b:
                    c7:32:2d:13:bb:07:60:ea:8b:97:e6:95:90:61:e4:
                    24:c4:fb:a0:68:b9:74:a0:70:26:62:cf:41:82:40:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DD:C4:0B:BE:74:A8:78:44:59:D6:C4:B5:8C:DD:3A:17:08:FA:B2
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46947.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:49:81:e7:b5:42:e9:2d:39:0e:6f:18:b9:8b:4b:9c:30:10:
         9c:ae:cd:e6:e5:56:cf:b0:2d:cd:9a:79:35:bf:4e:b1:d3:c4:
         58:5d:13:dc:56:21:2d:be:4c:e0:0e:8e:ea:ac:bf:78:a1:e4:
         48:78:81:09:57:65:1d:f5:94:4f:81:0b:65:35:de:98:6a:59:
         0f:d3:a9:0b:b9:15:d1:66:f6:3f:97:33:48:0b:a9:cf:45:ff:
         68:49:53:b9:c8:f8:95:16:5f:92:a4:6f:7a:12:30:03:29:65:
         fa:47:c2:5b:fd:54:2c:f4:7d:ee:0f:1d:7b:d0:45:ba:84:71:
         42:49:87:eb:02:ae:b8:ad:7e:8b:56:3c:0b:e1:31:9d:7c:d7:
         87:e8:06:5b:fb:97:b6:d3:46:70:92:26:f6:50:49:e7:dd:8a:
         0c:e6:5b:5b:d2:1b:bf:11:87:86:6a:17:b1:9c:c5:49:86:81:
         da:3d:a4:31:95:66:d3:9a:14:b6:6f:a9:37:6d:00:73:d4:a2:
         54:bd:9c:bf:64:0e:fa:eb:dc:ed:b1:41:d5:ce:e1:bd:2b:44:
         fa:c6:98:d3:ec:73:bf:d3:f6:8d:74:d0:7b:91:54:15:37:87:
         f6:64:d4:fe:da:b5:5a:57:ec:ad:24:d5:3e:64:9b:43:00:c6:
         08:06:06:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org