Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e203139343337.roa
File:                     34352e34322e34332e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          V8gLcRqNYzfTROBh45rpoPyq0xyb3U9Sz2QhTZlalnY=
Subject key identifier:   E1:68:C1:DE:68:57:E5:B1:2B:D6:E0:88:C1:B5:24:70:FC:F8:8D:22
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       53B2B25FDD4ABF298304CF85283ECFE172EDFC70
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e203139343337.roa
Signing time:             Fri 22 Nov 2024 07:49:22 +0000
ROA not before:           Fri 22 Nov 2024 07:44:22 +0000
ROA not after:            Fri 21 Nov 2025 07:49:22 +0000
asID:                     19437
IP address blocks:        45.42.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:b2:5f:dd:4a:bf:29:83:04:cf:85:28:3e:cf:e1:72:ed:fc:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Nov 22 07:44:22 2024 GMT
            Not After : Nov 21 07:49:22 2025 GMT
        Subject: CN=E168C1DE6857E5B12BD6E088C1B52470FCF88D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:7b:3c:02:14:6c:bc:b8:2d:21:f7:cb:54:
                    71:b6:77:a2:0e:1a:aa:bc:a2:0a:b8:de:2c:28:b3:
                    c5:b7:09:39:17:05:96:f5:59:ec:36:02:55:21:47:
                    a2:ae:ce:08:ae:1a:2c:95:80:17:0d:62:ad:93:4a:
                    59:df:78:56:28:a8:4c:39:9a:f4:6a:a7:a9:04:15:
                    a3:ad:4d:de:e8:15:cf:d5:b0:07:37:97:ac:46:5a:
                    ec:7f:d0:a2:7c:47:bc:23:7c:fa:42:51:52:00:64:
                    8f:0d:35:42:5e:57:ff:d6:08:5f:03:f9:25:d1:9d:
                    7e:79:f4:3a:8b:51:2a:37:97:5c:0d:97:3b:ac:c9:
                    db:30:29:88:cf:c2:9a:74:5c:d5:05:e9:98:e8:b9:
                    3a:1a:b8:66:2c:63:f2:4a:01:89:8e:56:92:7f:8d:
                    5d:be:b2:29:8f:8e:31:d8:51:ff:84:6f:08:96:58:
                    c1:34:7e:24:4d:46:70:24:52:22:3c:58:2f:b8:3e:
                    0a:c5:bf:80:b9:0c:12:a1:e4:52:13:a7:1b:a1:80:
                    a8:bf:c0:16:7a:0f:c4:3c:22:b2:49:9d:91:45:7f:
                    84:a8:4c:be:d0:1e:96:fe:b7:54:08:af:e4:9e:bf:
                    e1:3b:01:68:15:06:61:c5:a2:36:38:ad:a1:fe:55:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:68:C1:DE:68:57:E5:B1:2B:D6:E0:88:C1:B5:24:70:FC:F8:8D:22
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:23:0f:84:62:35:56:4c:07:e9:4b:19:1d:61:62:3d:8d:45:
         a0:3f:4a:7b:af:f6:21:0c:16:9a:aa:9f:ca:89:ed:cb:1d:ea:
         3a:e2:02:43:dd:a8:7c:11:b1:f4:e1:db:80:aa:78:f7:eb:ce:
         c7:7c:39:73:eb:d0:31:43:be:3b:60:ae:e0:7d:21:4e:a0:d1:
         5d:61:e9:fc:b4:18:de:8e:43:8c:62:81:e7:07:4e:ab:2b:d7:
         ee:13:c5:07:64:94:70:65:cd:a6:cb:0f:3f:a9:70:24:3a:13:
         23:ff:bb:74:47:e8:65:22:de:56:02:93:eb:d4:47:d4:7c:db:
         68:34:2b:cf:b8:b5:e4:15:10:b7:96:9f:22:bf:9a:be:39:db:
         51:e3:63:b4:57:fc:4a:ba:11:92:70:96:33:8e:72:6c:31:ab:
         a2:eb:fe:a4:27:f9:51:ff:1c:9c:e3:eb:cb:6a:cb:b7:63:0e:
         3b:9a:3e:b2:f5:ae:35:28:50:47:3e:11:fb:40:96:d7:ee:dd:
         b8:68:66:94:c2:06:cf:7a:32:d3:30:c9:b0:e4:10:92:98:97:
         8b:88:d4:ec:52:be:9f:c0:5c:03:a4:c9:27:52:e3:c6:07:0b:
         c0:05:c4:25:b4:25:de:47:33:ed:ce:68:a0:49:4e:3a:ab:68:
         1d:91:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org