Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203135323837.roa
File:                     34352e34322e34352e302f32342d3234203d3e203135323837.roa (raw, json)
Hash identifier:          mR5RPifeTO1F2NvqzT4hAQNc+FWgg7UkF1vT0B7nMJY=
Subject key identifier:   40:0F:FF:9B:27:CE:DC:30:28:DF:2B:26:05:AB:83:55:A8:46:47:AE
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       2B1DF5EE1D9C83DC17D7E51ADA38BE489E4A0918
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203135323837.roa
Signing time:             Sun 10 Nov 2024 20:44:14 +0000
ROA not before:           Sun 10 Nov 2024 20:39:14 +0000
ROA not after:            Sun 09 Nov 2025 20:44:14 +0000
asID:                     15287
IP address blocks:        45.42.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 10:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1d:f5:ee:1d:9c:83:dc:17:d7:e5:1a:da:38:be:48:9e:4a:09:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Nov 10 20:39:14 2024 GMT
            Not After : Nov  9 20:44:14 2025 GMT
        Subject: CN=400FFF9B27CEDC3028DF2B2605AB8355A84647AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5c:de:45:6e:b9:fb:10:a7:c8:b4:b9:d8:51:
                    9b:b0:9a:1e:1f:65:c4:7a:e6:3c:89:1c:e7:12:28:
                    97:08:3a:b1:c1:29:81:ee:90:1d:37:52:63:ef:b3:
                    f8:5c:6f:86:56:f4:8c:2f:2c:a6:88:13:65:4f:12:
                    cd:40:7b:da:20:86:be:1b:ec:a8:34:bf:23:d7:3c:
                    d6:05:cf:6b:e5:7b:7c:f2:e9:d9:da:5f:4d:8d:9e:
                    81:6b:c8:04:12:5f:d6:d8:bb:3d:62:5d:49:84:8a:
                    11:58:09:6a:aa:a7:75:f5:38:7d:c3:76:73:7a:5a:
                    a9:3d:0e:c5:69:6e:70:67:c2:b6:7d:b0:51:3d:f4:
                    27:cd:97:8f:26:a3:db:0b:e7:2f:26:82:4a:cf:87:
                    ae:80:fc:24:66:52:c2:93:51:22:da:d7:c6:24:ea:
                    15:8a:bb:2d:55:4d:bc:62:1f:ff:8e:fe:cb:2a:56:
                    e0:0d:2f:37:7b:1b:23:23:9b:42:d4:c1:ee:2e:6e:
                    75:ae:e6:78:80:0e:e7:c9:44:5e:30:c1:e0:a5:16:
                    33:2e:39:7a:d1:a0:cf:82:5c:32:cb:47:11:87:b2:
                    87:98:6a:bf:c7:e8:4e:0a:dd:09:4c:88:b8:e7:68:
                    8a:03:68:09:35:f6:93:c9:e7:51:f1:0c:c3:73:d7:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0F:FF:9B:27:CE:DC:30:28:DF:2B:26:05:AB:83:55:A8:46:47:AE
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203135323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:1c:e4:64:a2:55:e1:16:e4:a0:e9:40:5a:ae:0a:40:59:6a:
         bc:ad:8d:03:45:d3:58:98:04:12:1f:b1:59:b0:18:6f:0b:d9:
         58:3d:ee:99:b9:07:c6:66:34:9a:66:a6:88:4d:58:45:b3:49:
         e2:50:e7:b9:2d:98:50:d2:4b:ef:5e:a6:67:95:e8:51:33:d1:
         8e:4e:eb:f2:b3:00:20:34:cc:23:00:9e:df:4c:ed:61:ea:a1:
         9d:b1:4d:85:6d:e0:e0:b6:9d:9e:3b:72:65:1e:74:1f:03:81:
         8a:c9:ce:4d:8a:81:fc:26:d0:f1:77:d6:eb:fd:cd:c9:e0:7b:
         31:dd:f8:0b:f5:b5:7b:2f:37:2a:7c:06:d7:b5:de:b8:9d:91:
         0a:0b:ca:7d:43:42:a9:82:65:c0:9a:6c:b0:4d:92:a0:82:42:
         80:24:97:ad:3a:a9:a9:88:52:b9:ef:17:57:2a:20:83:f5:36:
         19:8b:03:88:34:2e:79:8e:2b:3e:5a:06:84:0d:fc:eb:a5:14:
         b3:3b:5b:59:90:6e:6d:50:65:8e:4e:21:50:38:80:16:b3:8c:
         eb:93:cd:9b:f1:c2:20:0b:a6:e0:60:29:ce:8f:f4:bc:d8:f8:
         a6:59:32:07:91:f4:6d:8f:e5:b7:68:21:aa:88:bb:14:7b:71:
         d2:c6:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:21 2024 by rpki-client on console-fra.rpki-client.org