Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa
File:                     34352e34322e34322e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          E/pFbmcKyUDu+rrRHlFQyaQY+Ewu3IP3wBF3okmDRIo=
Subject key identifier:   15:60:84:C1:3F:A0:4F:01:F3:A8:D0:DD:14:E7:49:40:E7:B5:8A:8A
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       79694C91379CEF0FEFE05F9F590FEF4FF12CA9A8
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 10 Sep 2024 11:48:59 +0000
ROA not before:           Tue 10 Sep 2024 11:43:59 +0000
ROA not after:            Tue 09 Sep 2025 11:48:59 +0000
asID:                     53356
IP address blocks:        45.42.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:69:4c:91:37:9c:ef:0f:ef:e0:5f:9f:59:0f:ef:4f:f1:2c:a9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Sep 10 11:43:59 2024 GMT
            Not After : Sep  9 11:48:59 2025 GMT
        Subject: CN=156084C13FA04F01F3A8D0DD14E74940E7B58A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:f7:06:ab:62:d2:db:7a:fa:ba:37:81:68:
                    39:d8:ad:a0:87:2c:ef:24:dd:74:04:f3:76:c7:37:
                    29:a5:64:93:d4:3a:f2:31:00:50:00:1c:3c:c7:91:
                    99:f7:0f:1f:28:23:1c:38:d0:d9:33:cc:44:9d:86:
                    ca:36:bd:3c:7f:6f:25:34:60:e8:e1:dd:0b:2d:f9:
                    a1:3d:1a:33:53:73:a9:ca:52:eb:63:a7:16:85:9f:
                    0e:10:52:e3:89:f9:53:a5:bb:a9:eb:fb:e7:c4:02:
                    51:c8:95:b2:bd:2a:95:0a:e7:b6:ad:27:b5:1b:c1:
                    a0:ac:bf:c8:1d:0c:87:0b:3c:c4:06:02:87:cf:22:
                    cd:ef:e3:9d:47:d6:d1:f9:16:ba:6f:0b:81:e1:5e:
                    9a:67:db:05:31:23:fd:ef:48:b2:80:50:f0:a8:1a:
                    33:9b:58:5c:da:ec:c6:51:c3:02:90:e7:cd:c0:44:
                    ea:95:e8:da:fa:18:4d:cc:a8:0a:25:e6:7f:11:4a:
                    56:18:1f:0f:bb:23:a5:b1:2d:fb:35:0e:e2:d3:ae:
                    7a:d7:17:66:3b:22:90:60:b3:3e:40:a7:2b:29:44:
                    37:f1:f4:2c:0f:3c:e6:e7:42:62:51:6c:8b:74:83:
                    b7:a9:97:92:20:e6:58:57:82:88:4b:f2:7d:a7:79:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:60:84:C1:3F:A0:4F:01:F3:A8:D0:DD:14:E7:49:40:E7:B5:8A:8A
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:30:54:65:b8:56:7f:cd:8b:34:32:02:81:be:32:1d:93:70:
         48:a9:50:be:b8:ea:c7:2c:eb:5e:c4:b9:b0:d4:8d:1a:49:ab:
         4b:67:c1:a5:0a:7a:07:17:77:1f:bd:05:9e:d3:17:e6:74:3b:
         c1:8d:c2:96:b2:8b:49:d7:98:40:ba:50:5f:f9:4a:8f:38:37:
         9e:93:07:7b:be:14:78:4b:77:45:48:46:30:b7:ae:cd:5f:b7:
         74:24:dd:d1:ed:dc:51:4f:93:db:f5:53:ca:90:30:25:5c:89:
         56:09:f4:12:bf:b1:28:cc:31:ad:01:47:5f:ce:19:01:26:49:
         36:d4:3d:2a:38:bd:c2:c3:68:50:e1:89:9b:e9:ed:57:b1:cc:
         40:6b:26:63:79:98:4c:e9:31:9e:6e:6e:a4:b8:63:d2:42:dc:
         38:97:ab:2a:11:69:c4:31:6e:4c:78:87:f0:2b:93:71:17:06:
         b4:cb:d2:96:dd:c1:4a:67:09:32:1b:d6:21:3f:7f:42:5b:f7:
         9a:ca:07:31:4e:b5:41:ad:de:e7:69:82:2c:42:a2:f1:4f:90:
         b3:96:3f:ee:2b:68:92:e8:66:32:8d:31:6e:05:d1:f4:dd:3b:
         c9:a3:f6:26:a5:cc:0b:00:a9:2b:81:e7:bc:73:47:a8:94:af:
         af:5d:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org