Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203331373838.roa
File:                     34352e34322e34342e302f32342d3234203d3e203331373838.roa (raw, json)
Hash identifier:          me9l6457mWsAS5dd3ypYd2vWzFDJKUvrIfEEAO0VpsI=
Subject key identifier:   B2:A8:5F:F3:AA:23:E2:95:5B:29:8C:EF:81:1B:C8:09:3C:6F:07:29
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       67BDA1440B934891729BDDCFD10CAEB38D28A0BC
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203331373838.roa
Signing time:             Fri 06 Sep 2024 18:00:01 +0000
ROA not before:           Fri 06 Sep 2024 17:55:01 +0000
ROA not after:            Fri 05 Sep 2025 18:00:01 +0000
asID:                     31788
IP address blocks:        45.42.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:a1:44:0b:93:48:91:72:9b:dd:cf:d1:0c:ae:b3:8d:28:a0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Sep  6 17:55:01 2024 GMT
            Not After : Sep  5 18:00:01 2025 GMT
        Subject: CN=B2A85FF3AA23E2955B298CEF811BC8093C6F0729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:c3:53:3e:84:d4:0a:6c:5d:16:c2:d7:53:
                    b8:d6:0f:90:90:80:e0:97:ea:81:de:f6:e8:18:3e:
                    c7:33:11:88:fc:83:78:25:53:91:99:fb:d7:46:da:
                    6c:66:3d:ef:0c:71:05:bb:3c:fd:5b:16:a0:64:ac:
                    9b:c7:8c:67:4d:45:d1:c6:c8:be:6e:37:ee:d0:46:
                    7f:cf:e0:6a:28:1b:1f:12:ed:ea:ff:de:d6:35:b5:
                    5f:ae:e4:96:9f:6c:78:ed:26:7a:9d:c5:02:f5:ff:
                    b8:13:79:33:72:bf:32:40:36:96:98:fd:1f:a7:ca:
                    21:58:ac:84:c5:f4:11:b6:49:a9:f0:d2:11:44:fe:
                    bc:10:c3:0b:84:65:e5:87:ee:a8:1d:a0:7d:ab:da:
                    63:5d:60:f7:ad:86:96:54:37:90:93:db:87:27:f5:
                    fb:2c:66:97:fa:1b:09:d9:9f:ed:83:65:59:e7:84:
                    b9:19:59:67:c6:0f:33:3b:d2:13:cc:d6:62:4c:9e:
                    dc:9c:c0:a4:cc:ac:f2:92:f1:e8:a1:e9:56:bc:bf:
                    93:65:b6:54:7c:cd:67:69:03:00:cb:44:d0:47:77:
                    b9:a2:1c:1a:ea:cd:33:2e:52:7b:5d:a1:38:61:e5:
                    8f:f1:a5:6b:6c:7c:b9:67:89:e7:67:15:e9:5e:73:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A8:5F:F3:AA:23:E2:95:5B:29:8C:EF:81:1B:C8:09:3C:6F:07:29
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203331373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e4:fa:88:6a:c3:81:24:38:a8:40:b6:65:53:af:af:1b:15:
         db:1a:87:32:d2:14:c9:e7:72:71:e3:38:2c:3f:b3:f0:b5:96:
         4f:0a:ae:24:bc:62:d7:b0:eb:e6:bd:12:7b:4b:02:e6:7a:81:
         88:0b:b2:5e:80:a4:be:7a:87:6c:f1:4b:27:6e:e4:e7:f5:e8:
         b8:0d:2d:98:1f:c5:54:28:53:0d:62:32:ee:dd:31:ac:7a:ae:
         07:1a:f8:68:21:d5:89:b9:e0:dd:ef:9e:f0:8e:32:53:5a:55:
         b9:2d:4b:f7:5b:94:2f:c6:ab:0c:b8:46:1c:ed:7a:08:63:16:
         8c:5b:7d:1e:2b:06:90:0a:0c:68:9a:fa:c2:a1:68:40:99:bc:
         d3:36:fc:34:ac:e1:01:75:7c:07:96:91:1f:aa:fc:a2:14:4c:
         2a:ab:ee:59:62:a5:9e:3b:60:f5:75:d6:07:c6:4a:a1:54:55:
         c5:7b:2f:ed:5e:8c:ad:43:e3:84:d3:55:a7:c5:c2:be:d0:b2:
         f9:25:f1:6f:29:87:73:8d:21:00:85:0c:f3:15:92:70:bf:0e:
         14:80:0a:d4:9b:1a:2b:41:61:df:f5:25:46:75:e5:a6:12:2c:
         2b:90:cb:9a:37:38:78:80:59:13:55:be:71:78:9a:bb:6a:51:
         53:ce:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org