Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e203139343337.roa
File:                     34352e34322e34332e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          GCoq/HQMKG2BmWAfG3Blh6s+0fa1Q0TT6MX+wGUeijk=
Subject key identifier:   3D:AA:28:D8:73:5F:41:C1:08:DB:25:B2:D2:EF:39:13:1C:E9:D5:B2
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       4B6073033103EB68F5FCE6AC619FA74BE2CDED2A
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e203139343337.roa
Signing time:             Fri 22 Dec 2023 07:01:12 +0000
ROA not before:           Fri 22 Dec 2023 06:56:12 +0000
ROA not after:            Fri 20 Dec 2024 07:01:12 +0000
asID:                     19437
IP address blocks:        45.42.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:60:73:03:31:03:eb:68:f5:fc:e6:ac:61:9f:a7:4b:e2:cd:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Dec 22 06:56:12 2023 GMT
            Not After : Dec 20 07:01:12 2024 GMT
        Subject: CN=3DAA28D8735F41C108DB25B2D2EF39131CE9D5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:35:eb:af:1d:8c:08:18:cc:07:51:46:66:
                    11:87:75:3c:d5:72:a2:96:b1:f3:0b:58:1d:92:a1:
                    03:6f:45:92:89:4c:9e:92:14:6c:3d:63:76:4e:1f:
                    97:66:63:09:87:c8:43:84:ad:26:bf:a3:63:29:d4:
                    fe:be:16:0e:5f:15:10:ac:63:47:4e:93:dc:0c:8b:
                    8f:df:dc:bf:6a:2a:50:b1:b7:2d:1b:9c:c8:68:3f:
                    63:d2:e7:ce:2c:ce:ff:2d:c5:e5:c4:ed:e1:5a:8b:
                    97:18:5c:b5:20:b0:44:00:db:16:67:48:0b:61:f4:
                    0a:87:f0:e1:78:b9:12:8f:78:e3:79:00:11:8c:1b:
                    7d:ec:ff:1e:bb:6a:1e:d4:18:d5:b4:c1:4d:33:46:
                    1f:fb:19:d1:c6:21:8e:2b:19:5f:e3:79:9b:21:d7:
                    10:84:cc:4b:f0:95:b7:35:3d:63:d9:51:20:21:95:
                    6c:ce:43:c0:0a:d1:1a:1e:f2:d2:9e:10:34:e0:bb:
                    42:6c:64:f1:91:07:14:fe:1c:fa:e3:f0:52:c8:c7:
                    2e:af:82:45:56:fb:60:7a:f5:c8:0a:cf:97:08:77:
                    3f:74:14:bc:75:d4:78:6c:5b:eb:a0:75:a4:07:5b:
                    f2:a3:87:d2:00:32:d4:43:b7:00:09:08:8c:d5:f0:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:28:D8:73:5F:41:C1:08:DB:25:B2:D2:EF:39:13:1C:E9:D5:B2
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:18:6c:fb:6d:dd:a8:ea:d1:68:eb:9e:c7:f1:75:8e:d8:
         28:84:ed:62:fe:59:a6:bc:84:95:62:ff:30:51:1f:37:90:d8:
         23:3f:22:b3:23:1c:72:38:48:ef:3a:2e:8f:fa:cd:25:6b:13:
         61:70:5f:55:5e:a2:5c:40:0c:d0:06:d9:20:50:6d:12:02:f5:
         94:13:b6:bb:e4:a3:31:45:9d:dd:47:b2:2a:f0:91:cf:63:e0:
         66:56:9c:b1:62:5e:f2:53:b3:95:85:16:2b:48:31:81:41:9d:
         c7:eb:b9:5f:6f:f2:bd:e0:f5:90:5b:96:86:ea:90:25:79:82:
         77:dc:b4:12:1d:b8:92:b1:64:db:57:4e:15:89:1d:70:b4:ae:
         29:45:1d:d2:f6:27:c1:66:c2:61:87:64:82:48:09:8e:06:c4:
         17:03:fa:64:9f:dd:38:52:7e:3b:03:75:43:1f:d8:f0:e7:56:
         64:6e:25:50:af:ec:f7:65:0d:e9:a9:70:ef:10:65:c5:ee:2b:
         7b:ef:06:77:a5:b9:3e:d6:59:0d:1f:94:8e:41:96:ed:44:19:
         4c:4b:1c:bc:26:2f:76:69:58:a1:7c:af:89:88:dc:9d:00:16:
         86:46:30:14:8b:fd:d3:5d:a6:dd:af:c9:4b:b7:90:d1:c5:2c:
         15:c2:d8:77
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUS2BzAzED62j1/OasYZ+nS+LN7SowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjMxMjIyMDY1NjEyWhcNMjQxMjIwMDcwMTEy
WjAzMTEwLwYDVQQDEygzREFBMjhEODczNUY0MUMxMDhEQjI1QjJEMkVGMzkxMzFD
RTlENUIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRM1668djAgY
zAdRRmYRh3U81XKilrHzC1gdkqEDb0WSiUyekhRsPWN2Th+XZmMJh8hDhK0mv6Nj
KdT+vhYOXxUQrGNHTpPcDIuP39y/aipQsbctG5zIaD9j0ufOLM7/LcXlxO3hWouX
GFy1ILBEANsWZ0gLYfQKh/DheLkSj3jjeQARjBt97P8eu2oe1BjVtMFNM0Yf+xnR
xiGOKxlf43mbIdcQhMxL8JW3NT1j2VEgIZVszkPACtEaHvLSnhA04LtCbGTxkQcU
/hz64/BSyMcur4JFVvtgevXICs+XCHc/dBS8ddR4bFvroHWkB1vyo4fSADLUQ7cA
CQiM1fBawQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFD2qKNhzX0HBCNslstLvORMc
6dWyMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMxMzkzNDMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKiswDQYJKoZIhvcNAQELBQADggEB
AGwZGGz7bd2o6tFo657H8XWO2CiE7WL+Waa8hJVi/zBRHzeQ2CM/IrMjHHI4SO86
Lo/6zSVrE2FwX1VeolxADNAG2SBQbRIC9ZQTtrvkozFFnd1Hsirwkc9j4GZWnLFi
XvJTs5WFFitIMYFBncfruV9v8r3g9ZBblobqkCV5gnfctBIduJKxZNtXThWJHXC0
rilFHdL2J8FmwmGHZIJICY4GxBcD+mSf3ThSfjsDdUMf2PDnVmRuJVCv7PdlDemp
cO8QZcXuK3vvBneluT7WWQ0flI5Blu1EGUxLHLwmL3ZpWKF8r4mI3J0AFoZGMBSL
/dNdpt2vyUu3kNHFLBXC2Hc=
-----END CERTIFICATE-----
Generated at Thu May 2 20:03:14 2024 by rpki-client on console-ams.rpki-client.org