Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa
File:                     34352e34322e34312e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          mx6Ia9xNvvqMpywbnekernoze2dLk99onqnhOyt/HaY=
Subject key identifier:   6B:9E:DC:DC:D2:41:F4:EA:0A:10:B0:1C:BB:0D:34:D0:24:4F:95:C4
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       3AA43D30040B0FD85AA747F3F20C4FFCADF2841D
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa
Signing time:             Fri 22 Nov 2024 07:49:22 +0000
ROA not before:           Fri 22 Nov 2024 07:44:22 +0000
ROA not after:            Fri 21 Nov 2025 07:49:22 +0000
asID:                     53340
IP address blocks:        45.42.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a4:3d:30:04:0b:0f:d8:5a:a7:47:f3:f2:0c:4f:fc:ad:f2:84:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Nov 22 07:44:22 2024 GMT
            Not After : Nov 21 07:49:22 2025 GMT
        Subject: CN=6B9EDCDCD241F4EA0A10B01CBB0D34D0244F95C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:02:2a:ca:0d:dc:06:f4:c4:a3:f3:a3:2f:
                    d0:21:76:c9:37:71:43:36:ae:4e:91:d7:97:ce:69:
                    f2:76:d2:35:99:e9:88:6e:4f:85:9a:01:31:a0:29:
                    f9:3e:87:d9:4a:b8:44:d5:66:e9:b5:0f:cc:bb:3d:
                    0a:7f:ca:44:8a:cb:51:17:d1:f4:55:dd:12:4d:db:
                    58:f8:a5:51:4c:06:db:e2:7b:bf:67:01:26:b0:40:
                    05:fb:81:90:ac:e8:d0:e7:fc:c0:b4:02:7f:f2:fc:
                    36:d4:26:23:bf:87:cd:01:12:1e:f7:86:fb:72:7a:
                    37:dd:a3:3b:c5:1c:61:f3:2e:21:12:7a:87:81:19:
                    97:c9:da:33:8f:66:a0:0e:c4:40:66:11:24:a8:23:
                    04:77:21:14:b7:5b:26:f6:8e:28:53:55:0a:2a:5e:
                    00:41:e9:ad:6b:82:55:ed:9c:24:97:7d:58:b2:05:
                    21:9a:b3:00:bc:74:67:4d:ba:a3:f8:25:bb:e5:09:
                    d8:fd:ec:4c:a8:ad:ba:87:1b:8f:99:af:9f:02:17:
                    f1:a6:d1:f9:64:8a:ba:60:e7:7d:71:1b:e1:fe:ea:
                    ea:8f:5c:15:97:ef:d1:a5:61:56:67:81:ef:6a:df:
                    f7:c3:5c:e0:2b:b6:34:cd:4d:d6:08:da:d7:78:42:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:DC:DC:D2:41:F4:EA:0A:10:B0:1C:BB:0D:34:D0:24:4F:95:C4
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:11:e6:9e:87:2a:5b:64:56:ca:13:ef:fd:f6:17:cc:9b:
         8d:64:3a:c5:c3:0c:73:9d:c9:19:3d:85:b5:b4:7f:bc:98:2d:
         cd:47:8f:af:bf:cc:24:1c:fb:27:3d:0a:c9:ca:c8:d8:5f:33:
         ad:bb:9e:1b:d3:43:06:76:c6:d7:69:8d:97:66:92:d9:ff:b2:
         d6:89:e4:f4:5d:2c:04:51:90:9d:3c:73:b7:e6:e4:04:97:8c:
         b6:fb:7a:04:2a:79:5f:bc:fb:54:2e:4d:9e:04:96:dd:64:56:
         ce:2a:78:d4:e7:1b:79:3e:ff:d5:a7:dd:a0:26:70:d1:60:36:
         41:b9:ed:67:2c:59:1c:b4:82:c5:6e:38:de:d2:0d:e0:a5:7e:
         ec:50:79:42:4b:ae:69:0d:3c:d2:41:9b:3e:23:df:d2:ca:4c:
         58:4f:f6:54:95:c1:f1:8d:3c:6c:e7:d6:16:11:c9:33:05:05:
         79:b7:f5:dc:b0:da:67:16:47:a9:ad:ca:ca:ba:35:fd:00:7f:
         2f:69:2b:de:ee:25:df:ab:95:10:62:c8:7f:e6:e5:36:ba:7d:
         80:e6:82:c9:59:5f:31:82:40:36:11:50:c8:7c:36:60:2a:7a:
         62:3e:31:7d:ff:7c:0f:80:23:94:a7:0c:1a:53:3d:4b:e5:ae:
         1a:ca:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:50 2025 by rpki-client