Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20393834.roa
File:                     34352e34322e34362e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier:          3Ta9hXvdEXy9ALsQkqnJMqD4NcOHgTwvGn3/GaqCKrA=
Subject key identifier:   62:4C:D5:E5:2B:B0:D0:24:D5:FB:3D:33:9B:44:02:EE:7C:B5:B4:93
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       484930E6EADB6F716F0C07BD6686B900ED11E9DC
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20393834.roa
Signing time:             Sat 27 Apr 2024 10:19:46 +0000
ROA not before:           Sat 27 Apr 2024 10:14:46 +0000
ROA not after:            Sat 26 Apr 2025 10:19:46 +0000
asID:                     984
IP address blocks:        45.42.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:49:30:e6:ea:db:6f:71:6f:0c:07:bd:66:86:b9:00:ed:11:e9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Apr 27 10:14:46 2024 GMT
            Not After : Apr 26 10:19:46 2025 GMT
        Subject: CN=624CD5E52BB0D024D5FB3D339B4402EE7CB5B493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:5c:b4:81:0f:01:db:ae:4c:02:0e:68:19:
                    da:7b:4c:e2:86:a4:05:ee:fa:2d:3d:be:b6:67:40:
                    22:57:d9:f9:a9:5c:b7:d6:d5:22:89:2b:f0:a7:5d:
                    b2:f3:9d:fd:08:ad:9a:93:6b:9a:09:dd:04:88:ce:
                    bb:83:df:55:dc:8d:e9:c4:82:5a:7f:39:f2:e1:c9:
                    38:4f:70:50:c8:99:4e:da:69:c7:b0:4a:79:95:0f:
                    6b:a2:61:eb:e6:34:1f:1a:8b:ac:06:31:49:d0:23:
                    41:1a:50:26:88:cf:73:45:e9:dd:52:33:e8:9b:91:
                    59:25:9f:b6:43:18:47:b8:cb:ba:04:6b:f4:3a:0f:
                    8a:93:4f:f6:da:42:7d:e6:e2:9d:cf:87:6a:02:35:
                    fd:91:26:b5:dc:5b:30:26:00:6d:08:33:1b:78:7c:
                    0b:d0:99:d2:ac:a0:17:75:98:2b:90:f1:25:37:46:
                    e5:dd:6f:d6:6e:16:97:07:a9:3b:fa:65:f8:68:41:
                    95:cc:a7:c5:53:2f:81:15:2a:f8:1e:8f:1d:35:e9:
                    46:fd:c5:ed:f2:92:f7:78:90:1e:f2:ce:f3:85:fa:
                    ca:3b:e4:65:da:76:6f:6b:7a:ab:5f:83:d8:37:46:
                    4c:fe:06:65:0c:62:3d:85:7b:01:99:e0:e5:ff:ba:
                    2a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:D5:E5:2B:B0:D0:24:D5:FB:3D:33:9B:44:02:EE:7C:B5:B4:93
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e0:e9:c2:11:ea:10:54:8c:84:b9:c8:7b:61:a4:38:ce:f6:
         63:5f:21:68:da:db:30:90:2a:20:0c:09:36:f5:5e:69:5c:ae:
         53:2a:cc:53:f7:bc:20:b6:44:cb:b9:32:71:77:a1:16:28:b0:
         bc:0b:6b:14:ed:60:5e:53:10:e9:23:26:d4:3d:db:81:81:bb:
         62:fd:d1:25:d5:d0:54:9e:aa:91:4d:98:af:57:9f:90:f1:3d:
         3a:d3:2f:5f:d2:92:97:f8:ee:78:60:0a:6a:5c:a0:ba:0d:18:
         af:64:45:86:5d:7d:f1:0a:6b:a7:e2:53:56:8d:02:fd:09:d3:
         c6:a5:e1:9e:be:a4:de:81:24:cb:4a:05:90:52:11:74:1a:2f:
         d6:38:43:8d:9c:e0:57:7c:e7:31:b5:cf:98:ba:43:9d:0a:8b:
         15:66:98:ac:ac:97:dd:a4:d5:a7:3f:4d:1a:c1:67:c2:97:36:
         3d:b1:48:b0:d5:19:93:01:ed:3d:02:28:8e:1e:87:de:19:0e:
         c0:f4:4e:5c:7e:fa:85:bf:53:8e:e6:89:0c:f3:6f:cd:36:db:
         6b:ca:c4:90:f8:6f:f0:a9:eb:71:4c:1b:29:7a:56:e1:55:0d:
         b0:37:55:ff:a5:e7:fa:c3:69:e8:36:15:8e:c8:be:d5:d2:50:
         15:63:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:33 2024 by rpki-client on console-fra.rpki-client.org