Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20343030383636.roa
File:                     34352e34322e34342e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          vUlKH2DBRxCQxcwTe9k4RaXgCoHOPJMpmWyW6VUYHgU=
Subject key identifier:   B5:D6:8C:3B:79:BB:C1:C2:C2:F9:44:64:87:B7:D9:89:71:43:18:EA
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       5F697103F15DE45D55838FA81DA1DF3114522BDF
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20343030383636.roa
Signing time:             Wed 08 May 2024 15:39:17 +0000
ROA not before:           Wed 08 May 2024 15:34:17 +0000
ROA not after:            Wed 07 May 2025 15:39:17 +0000
asID:                     400866
IP address blocks:        45.42.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 06:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:69:71:03:f1:5d:e4:5d:55:83:8f:a8:1d:a1:df:31:14:52:2b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: May  8 15:34:17 2024 GMT
            Not After : May  7 15:39:17 2025 GMT
        Subject: CN=B5D68C3B79BBC1C2C2F9446487B7D989714318EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:9c:80:67:21:87:3c:5d:f2:94:19:74:ba:
                    73:51:47:15:56:ff:6c:ee:3a:cc:85:e7:75:71:88:
                    e3:f2:3d:cf:5b:d1:63:db:f8:71:cf:8f:aa:17:59:
                    14:35:7e:17:44:90:79:13:76:6f:2f:6f:c2:d2:10:
                    f3:3b:b4:67:bf:b6:dc:c2:78:cb:bb:1d:f7:c5:90:
                    36:b8:11:46:c7:ea:5d:d4:f5:10:ac:c5:e3:35:b0:
                    f0:35:8a:84:3c:13:09:fd:05:b1:76:54:c2:33:93:
                    b7:86:56:74:59:78:35:be:45:f4:1a:c2:6f:f6:d4:
                    46:a9:29:8d:ef:99:59:19:07:ca:e6:89:84:f6:30:
                    de:8c:43:00:12:8b:42:3a:99:76:b4:9d:5f:87:c0:
                    05:dd:77:d1:a9:a9:76:22:f3:35:aa:c4:67:27:8e:
                    08:b4:3b:48:31:8a:dc:5c:c8:6c:28:8e:1c:97:91:
                    7b:54:aa:fe:0b:e9:e4:d1:ab:20:be:4c:2e:af:da:
                    b4:1d:dd:bf:09:cb:04:4b:a7:14:4e:46:d9:43:3e:
                    5a:de:75:cf:6a:f6:a5:62:3d:33:04:f1:67:3e:90:
                    73:66:b8:5c:04:24:c4:99:00:25:f9:f1:c6:80:fa:
                    43:e3:cf:14:9d:bd:44:02:3b:d6:81:ee:2b:64:ff:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D6:8C:3B:79:BB:C1:C2:C2:F9:44:64:87:B7:D9:89:71:43:18:EA
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:56:6b:22:44:c1:32:3b:1e:b1:db:80:b8:f6:91:69:87:
         62:a2:bc:b2:02:16:1c:4f:33:ef:09:92:73:28:1a:9e:74:9e:
         b0:26:10:6f:76:ca:3e:6b:56:62:8b:0a:c1:d1:79:d7:7f:b1:
         d8:ec:41:1e:ec:d7:ed:be:2d:01:f4:71:7b:38:a6:51:63:9d:
         7f:c5:d8:2f:cf:5f:e6:18:42:25:5a:47:b1:75:48:ec:65:ff:
         eb:77:c0:dd:cb:6d:8e:0f:d5:a5:3d:88:8e:7f:eb:1a:ac:cf:
         59:2a:44:60:2e:5e:30:4d:2e:5c:75:2d:b0:c0:6f:51:cd:39:
         34:dd:e1:30:a8:c9:af:36:c8:9b:1c:40:32:0e:ed:cd:c5:c7:
         7f:04:61:bc:fa:4f:76:f4:4e:82:13:91:5d:97:95:f0:ee:93:
         51:6c:ba:c0:7c:8b:24:bb:b8:5e:49:ad:51:c6:7e:01:38:a3:
         84:7a:97:c5:02:90:0d:e6:00:3e:5f:75:c4:55:b7:1a:d3:8d:
         fb:d1:21:02:be:1b:c6:bc:49:13:94:f3:de:8e:85:69:8e:ab:
         e1:2a:e0:f0:83:d4:14:29:bb:38:2a:a2:82:ad:08:55:bd:a8:
         73:05:33:ca:5d:94:bf:67:a4:9d:e6:3a:07:94:2e:77:ca:eb:
         be:db:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:02 2024 by rpki-client on console-ams.rpki-client.org