Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa
File:                     34352e34322e34312e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          fdEZIY1mBLnCYy0KyogSNybDmzdaMn7mwA+TNwhUS7Q=
Subject key identifier:   D6:D9:D4:02:79:F2:49:77:31:D6:C7:3A:6A:0F:B0:B0:43:30:E1:67
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       19DE044153BD320033B1E4E370C0F5C2E56282A8
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa
Signing time:             Fri 22 Dec 2023 07:01:12 +0000
ROA not before:           Fri 22 Dec 2023 06:56:12 +0000
ROA not after:            Fri 20 Dec 2024 07:01:12 +0000
asID:                     53340
IP address blocks:        45.42.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 13:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:de:04:41:53:bd:32:00:33:b1:e4:e3:70:c0:f5:c2:e5:62:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Dec 22 06:56:12 2023 GMT
            Not After : Dec 20 07:01:12 2024 GMT
        Subject: CN=D6D9D40279F2497731D6C73A6A0FB0B04330E167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:9d:cd:91:a8:04:83:99:a7:ac:79:8d:ff:
                    61:03:33:6c:d2:db:a0:5a:9e:3e:bb:98:5d:b1:f1:
                    c1:de:a5:ff:40:2d:f4:37:e7:7e:a3:51:ae:13:b9:
                    ef:bd:3f:37:7f:0e:66:a3:11:e9:9e:8c:09:09:28:
                    08:5a:4e:f2:c7:ed:a3:38:69:6d:d2:d4:0f:92:9f:
                    a4:00:8f:db:36:fd:cf:b7:2d:ab:0c:53:52:c2:fc:
                    3f:a3:b3:cb:af:3d:a0:78:33:a0:6a:87:5b:9e:e2:
                    f1:aa:16:b6:71:bb:6d:14:41:b6:4f:54:e3:68:8f:
                    f8:73:45:e8:88:a7:04:b3:ae:2b:42:0b:77:7e:60:
                    cd:1a:fa:2b:d9:35:88:fe:ee:86:05:08:dd:47:b9:
                    9c:56:14:50:c1:35:4f:b6:b8:28:16:1b:66:b7:82:
                    5c:8e:c2:c8:3e:25:88:95:bb:72:ca:7f:fb:36:5e:
                    0f:7d:54:6a:dc:80:35:66:87:a9:12:31:92:18:20:
                    37:85:3c:f0:14:8b:fe:5a:ea:2b:e3:02:f4:8a:2e:
                    d4:08:a7:8f:5c:24:c7:f9:91:21:f7:c9:5e:34:42:
                    44:12:7e:cf:47:cc:5b:94:e6:f6:93:a5:8d:67:78:
                    00:e8:10:84:67:33:23:0f:f1:89:84:c7:00:f8:28:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:D4:02:79:F2:49:77:31:D6:C7:3A:6A:0F:B0:B0:43:30:E1:67
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:bc:68:33:e5:8d:c2:c2:51:77:90:f5:96:4a:ea:1d:92:
         e7:77:d2:8b:c0:2a:70:a5:fa:0b:d7:41:ed:5f:10:2c:c9:cd:
         03:ba:fa:bc:83:de:51:da:3b:05:0a:88:8f:f4:0b:79:8b:67:
         60:79:6a:69:ce:8b:2d:eb:69:ee:3e:ea:8d:50:d6:b1:da:1f:
         cd:27:a3:f0:af:82:83:70:41:0f:d6:55:83:84:35:01:af:5d:
         70:74:50:4a:c9:62:98:eb:65:3e:84:ba:04:ec:7d:31:e0:3d:
         53:78:9c:ee:9b:c6:19:44:8c:33:30:68:b2:13:bb:c9:1e:33:
         c9:03:47:48:b5:ef:70:cd:06:ea:39:fa:cf:dd:38:68:7e:ce:
         71:81:e4:e2:b9:27:a5:74:ee:59:71:9f:69:bb:af:c3:fa:de:
         24:92:c9:4f:76:ec:12:94:b5:b9:bc:38:14:50:74:8c:55:e8:
         5a:f9:32:b0:c1:19:7a:1b:aa:ed:db:50:b2:9b:01:74:87:04:
         b6:b7:8e:8e:91:e9:39:d1:d4:29:ce:c0:2a:e2:0f:5c:56:35:
         b5:5f:86:17:97:4e:fc:dd:2d:c4:52:c2:51:b9:31:36:f1:a9:
         03:47:d2:67:38:2f:69:94:34:b6:a0:bd:d3:64:ac:e2:57:7f:
         90:e1:75:b7
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUGd4EQVO9MgAzseTjcMD1wuVigqgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjMxMjIyMDY1NjEyWhcNMjQxMjIwMDcwMTEy
WjAzMTEwLwYDVQQDEyhENkQ5RDQwMjc5RjI0OTc3MzFENkM3M0E2QTBGQjBCMDQz
MzBFMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAommdzZGoBIOZ
p6x5jf9hAzNs0tugWp4+u5hdsfHB3qX/QC30N+d+o1GuE7nvvT83fw5moxHpnowJ
CSgIWk7yx+2jOGlt0tQPkp+kAI/bNv3Pty2rDFNSwvw/o7PLrz2geDOgaodbnuLx
qha2cbttFEG2T1TjaI/4c0XoiKcEs64rQgt3fmDNGvor2TWI/u6GBQjdR7mcVhRQ
wTVPtrgoFhtmt4JcjsLIPiWIlbtyyn/7Nl4PfVRq3IA1ZoepEjGSGCA3hTzwFIv+
Wuor4wL0ii7UCKePXCTH+ZEh98leNEJEEn7PR8xblOb2k6WNZ3gA6BCEZzMjD/GJ
hMcA+Ci3ZQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNbZ1AJ58kl3MdbHOmoPsLBD
MOFnMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM1MzMzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKikwDQYJKoZIhvcNAQELBQADggEB
ACzyvGgz5Y3CwlF3kPWWSuodkud30ovAKnCl+gvXQe1fECzJzQO6+ryD3lHaOwUK
iI/0C3mLZ2B5amnOiy3rae4+6o1Q1rHaH80no/CvgoNwQQ/WVYOENQGvXXB0UErJ
YpjrZT6EugTsfTHgPVN4nO6bxhlEjDMwaLITu8keM8kDR0i173DNBuo5+s/dOGh+
znGB5OK5J6V07llxn2m7r8P63iSSyU927BKUtbm8OBRQdIxV6Fr5MrDBGXobqu3b
ULKbAXSHBLa3jo6R6TnR1CnOwCriD1xWNbVfhheXTvzdLcRSwlG5MTbxqQNH0mc4
L2mUNLagvdNkrOJXf5Dhdbc=
-----END CERTIFICATE-----
Generated at Sat Sep 7 14:42:41 2024 by rpki-client on console-ams.rpki-client.org