Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa
File:                     34352e34322e34302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          Sq0vdHyRQTQ2yuZEKC39casNhQMVAvvN8Qul0Kru2l0=
Subject key identifier:   81:9C:EB:00:39:97:64:7F:58:F2:DA:00:BB:54:4A:C9:AA:2F:65:56
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       3E3D9C85415244DCFE291A2F637522C781F25307
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 01 Apr 2024 19:16:17 +0000
ROA not before:           Mon 01 Apr 2024 19:11:17 +0000
ROA not after:            Mon 31 Mar 2025 19:16:17 +0000
asID:                     212238
IP address blocks:        45.42.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3d:9c:85:41:52:44:dc:fe:29:1a:2f:63:75:22:c7:81:f2:53:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Apr  1 19:11:17 2024 GMT
            Not After : Mar 31 19:16:17 2025 GMT
        Subject: CN=819CEB003997647F58F2DA00BB544AC9AA2F6556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:4f:c1:1e:79:c2:0d:d2:23:c9:32:63:4d:
                    bc:c0:73:f4:4b:cb:25:cc:36:9f:e7:51:e3:67:d1:
                    1e:3f:11:14:fd:0c:7d:88:6a:8f:ab:40:a4:5b:03:
                    80:0e:3c:3c:b4:09:eb:1f:44:e4:29:b2:be:f2:91:
                    d6:2d:34:e4:78:2b:48:e0:88:3f:13:08:01:78:4d:
                    ae:72:77:95:92:f2:69:f5:42:10:c5:a5:09:74:b3:
                    d6:fe:2b:8e:00:f9:f2:2d:07:4b:43:f8:dd:d5:07:
                    23:1e:bd:fe:56:8d:5d:81:41:8a:08:30:4a:27:1b:
                    7d:11:1a:81:03:30:5b:11:7b:36:42:fc:79:8f:fe:
                    df:77:06:28:b4:9d:de:e7:3e:1e:15:41:81:75:3c:
                    85:fe:54:03:42:a2:81:ae:1f:80:d1:b8:f0:0d:b9:
                    ad:15:ff:c6:45:2e:39:8f:a9:b1:45:8f:36:75:bd:
                    4f:d6:36:6d:35:13:99:70:28:ea:5f:fa:21:0d:39:
                    1d:ef:62:8a:67:b5:1d:bb:37:e9:22:7e:d0:8d:2a:
                    67:ff:8c:c6:9a:4e:09:6b:ca:54:54:60:33:19:92:
                    a1:46:7e:4f:43:68:4c:51:8e:04:14:19:da:a0:f5:
                    3f:33:d3:e5:20:d5:dd:bf:30:0b:c8:70:b7:2b:05:
                    56:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9C:EB:00:39:97:64:7F:58:F2:DA:00:BB:54:4A:C9:AA:2F:65:56
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:95:6d:e0:16:e7:c5:8d:dd:22:aa:e5:0c:8e:0f:3a:b0:2c:
         28:52:17:7c:7b:05:3a:8c:66:c9:92:0b:5b:20:db:2a:28:ac:
         88:bc:48:23:86:b1:9c:7b:01:64:46:08:e3:df:eb:fa:90:26:
         6a:96:96:f1:02:9d:6c:da:94:f4:56:6e:f4:7d:03:3e:1f:03:
         c9:90:be:33:e2:bc:3f:f9:87:3a:80:fa:df:63:f3:99:ee:19:
         b8:0b:4f:6e:17:8e:9a:27:c7:7e:9b:75:9f:04:b1:a3:34:5d:
         c7:00:13:fe:5d:e7:1e:1f:6f:09:3f:59:b8:17:5f:1f:21:b2:
         5d:a1:9f:c0:73:a9:d9:db:84:31:09:50:01:0c:4a:a6:0b:43:
         dc:62:53:9c:0b:92:d7:a1:28:bc:be:82:55:99:2b:ba:16:03:
         5e:25:45:e7:dc:87:4a:d2:bd:ec:e3:1b:7d:fb:e7:aa:9d:1a:
         99:61:5d:5f:a7:47:55:db:53:c0:a6:44:c8:36:72:75:57:a5:
         80:46:03:f3:d7:17:ec:d5:85:66:1b:47:db:e2:f7:85:eb:ce:
         e2:41:80:bd:cc:60:7d:dd:46:14:8d:35:db:b4:89:20:fb:b7:
         08:a4:97:e5:b4:71:9d:f5:82:97:96:3f:5b:f1:6b:1a:a1:03:
         97:b1:c6:c8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUPj2chUFSRNz+KRovY3Uix4HyUwcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjQwNDAxMTkxMTE3WhcNMjUwMzMxMTkxNjE3
WjAzMTEwLwYDVQQDEyg4MTlDRUIwMDM5OTc2NDdGNThGMkRBMDBCQjU0NEFDOUFB
MkY2NTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF9PwR55wg3S
I8kyY028wHP0S8slzDaf51HjZ9EePxEU/Qx9iGqPq0CkWwOADjw8tAnrH0TkKbK+
8pHWLTTkeCtI4Ig/EwgBeE2ucneVkvJp9UIQxaUJdLPW/iuOAPnyLQdLQ/jd1Qcj
Hr3+Vo1dgUGKCDBKJxt9ERqBAzBbEXs2Qvx5j/7fdwYotJ3e5z4eFUGBdTyF/lQD
QqKBrh+A0bjwDbmtFf/GRS45j6mxRY82db1P1jZtNROZcCjqX/ohDTkd72KKZ7Ud
uzfpIn7QjSpn/4zGmk4Ja8pUVGAzGZKhRn5PQ2hMUY4EFBnaoPU/M9PlINXdvzAL
yHC3KwVWfwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIGc6wA5l2R/WPLaALtUSsmq
L2VWMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1ODgwMjllMDE4NWNk
Yzg3MTBiNDJmZi8wLzM0MzUyZTM0MzIyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKigwDQYJKoZIhvcNAQELBQAD
ggEBACmVbeAW58WN3SKq5QyODzqwLChSF3x7BTqMZsmSC1sg2yoorIi8SCOGsZx7
AWRGCOPf6/qQJmqWlvECnWzalPRWbvR9Az4fA8mQvjPivD/5hzqA+t9j85nuGbgL
T24Xjponx36bdZ8EsaM0XccAE/5d5x4fbwk/WbgXXx8hsl2hn8BzqdnbhDEJUAEM
SqYLQ9xiU5wLktehKLy+glWZK7oWA14lRefch0rSvezjG33756qdGplhXV+nR1Xb
U8CmRMg2cnVXpYBGA/PXF+zVhWYbR9vi94XrzuJBgL3MYH3dRhSNNdu0iSD7twik
l+W0cZ31gpeWP1vxaxqhA5exxsg=
-----END CERTIFICATE-----
Generated at Thu May 2 20:03:14 2024 by rpki-client on console-ams.rpki-client.org