Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa
File:                     34352e34322e34322e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          5sHup+E4KPc7gm0Hs7mnAf2qsjwbeu/cUN/OAwjVN3k=
Subject key identifier:   CA:8D:BD:98:F1:6D:53:6E:2D:3E:A4:02:E6:C2:41:78:83:DD:65:8E
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       2C9E619E0CCF953C14B81FB1223D26660CA41381
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 10 Oct 2023 11:20:54 +0000
ROA not before:           Tue 10 Oct 2023 11:15:54 +0000
ROA not after:            Tue 08 Oct 2024 11:20:54 +0000
asID:                     53356
IP address blocks:        45.42.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9e:61:9e:0c:cf:95:3c:14:b8:1f:b1:22:3d:26:66:0c:a4:13:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 10 11:15:54 2023 GMT
            Not After : Oct  8 11:20:54 2024 GMT
        Subject: CN=CA8DBD98F16D536E2D3EA402E6C2417883DD658E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:c0:32:98:b4:ce:f9:2f:d9:52:07:8b:98:
                    7a:f7:3a:36:16:57:be:64:06:17:4a:f5:26:68:a0:
                    35:43:04:2e:a2:20:43:62:f2:87:75:03:3d:74:fe:
                    63:ad:97:74:a7:96:85:5a:5b:61:a1:1b:34:80:78:
                    d2:d0:7f:bd:65:d1:3e:47:68:76:68:fa:48:52:e6:
                    84:f6:11:ea:48:9e:5c:ed:86:a5:f2:ba:c8:85:a6:
                    fd:31:d4:aa:2b:60:4e:ff:37:a3:9d:aa:95:82:36:
                    71:1d:c6:a5:05:b7:54:68:4e:8f:ca:1f:90:f0:89:
                    35:65:8b:80:b1:29:a4:dd:75:cf:34:94:f8:f4:26:
                    4d:84:85:5b:4e:18:9f:51:88:78:5e:8c:17:c2:de:
                    53:30:ea:80:06:bc:d7:91:52:d1:b4:0a:ad:cb:7d:
                    2b:11:ed:5f:b7:6d:32:96:66:58:b3:60:1b:35:4b:
                    d1:5d:cb:87:4e:73:45:d1:20:43:e0:3a:ca:a6:1a:
                    75:d5:08:af:92:ef:c7:49:8a:84:84:15:50:32:63:
                    74:2f:b1:c9:0f:05:8a:1d:1f:3c:f4:3e:d2:95:77:
                    d3:06:f4:15:82:c0:2c:11:21:dc:6c:f0:2e:66:04:
                    5a:f6:f5:7e:88:44:22:29:84:9b:5f:fe:a6:6c:a6:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8D:BD:98:F1:6D:53:6E:2D:3E:A4:02:E6:C2:41:78:83:DD:65:8E
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:0a:63:08:ab:a7:18:37:06:9b:57:6c:c9:b9:f0:78:b6:
         72:23:75:97:71:4e:4a:5a:51:42:f5:d1:8c:74:44:c6:58:74:
         8e:d3:24:13:5c:97:4c:bd:39:7a:de:0d:d8:83:30:e2:c7:b8:
         76:8c:77:14:95:10:46:6b:93:a3:a9:22:82:d9:6d:ca:df:8b:
         4f:fc:45:9c:c1:fe:8f:55:5f:2e:f6:3c:d3:aa:3f:b9:fb:11:
         62:4c:4a:f5:30:69:a7:b9:2a:fd:65:cf:28:2c:bf:fa:7d:4e:
         aa:23:89:11:0c:0f:f8:94:ef:0f:86:8d:f0:f0:42:86:5a:57:
         2b:11:b2:e4:f3:cb:4d:ee:e5:38:8d:59:5d:a5:64:b7:40:d0:
         10:76:4d:2f:81:7a:95:ea:fd:c4:4f:84:ee:08:97:e4:52:48:
         06:d6:ba:6d:62:00:67:7b:e7:54:59:c9:f7:b7:7e:91:61:75:
         4e:45:72:f4:6d:02:0b:77:e7:2a:42:84:d7:a9:c9:93:82:4c:
         67:15:c7:bf:85:7e:62:87:2a:87:ea:6b:cd:67:f5:49:90:6b:
         6e:c5:d1:3d:0e:3a:ea:8d:d8:10:7c:77:69:03:2a:66:e7:a0:
         0a:e7:77:a9:b4:44:49:2d:84:2b:54:f7:2a:8e:1b:5c:4d:46:
         cf:74:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:48:25 2024 by rpki-client on console-fra.rpki-client.org