Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203231373433.roa
File:                     34352e34322e34372e302f32342d3234203d3e203231373433.roa (raw, json)
Hash identifier:          9QwLDjgJe0OSWj3QrFcz0cv8eq1MkqoJ0YBUbivtTFA=
Subject key identifier:   0A:A2:29:2A:37:80:06:A7:34:D3:C9:75:0B:52:3F:32:33:6C:0F:09
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       50A70569DD7774B76D3A9715D32226B77E892867
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203231373433.roa
Signing time:             Wed 20 Nov 2024 11:49:21 +0000
ROA not before:           Wed 20 Nov 2024 11:44:21 +0000
ROA not after:            Wed 19 Nov 2025 11:49:21 +0000
asID:                     21743
IP address blocks:        45.42.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 10:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a7:05:69:dd:77:74:b7:6d:3a:97:15:d3:22:26:b7:7e:89:28:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Nov 20 11:44:21 2024 GMT
            Not After : Nov 19 11:49:21 2025 GMT
        Subject: CN=0AA2292A378006A734D3C9750B523F32336C0F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:f9:a3:23:4e:04:10:6f:c7:c4:3a:fe:61:
                    e2:d1:8d:d3:44:9f:ef:6f:e0:33:a3:35:3e:82:e7:
                    f2:09:52:fc:36:ad:70:75:a3:bd:92:c8:26:18:0f:
                    31:2e:df:8d:25:81:5c:42:28:ef:97:7e:89:bf:11:
                    9d:a4:42:b8:e4:ee:15:5c:38:64:75:c8:96:6a:49:
                    2e:4d:a0:7e:16:89:7f:20:cb:73:b6:64:65:44:96:
                    e6:cd:74:c6:b3:73:40:aa:dd:b7:fb:6d:1d:6a:70:
                    79:12:38:be:19:b1:c2:86:54:7d:9a:86:dc:7a:fa:
                    38:17:9d:9e:17:39:4d:8f:c6:d9:3b:5a:ec:e8:2f:
                    a5:85:fd:d8:a5:9c:96:83:a0:c0:dc:d5:3a:a5:e1:
                    05:04:2f:1c:f8:a9:78:73:1a:07:30:d9:1f:0c:b6:
                    49:40:fd:a6:3f:83:c0:ee:43:2d:29:2a:f2:21:2a:
                    f9:28:7a:3b:44:db:0c:2c:bd:de:0b:32:4f:84:3b:
                    b3:38:3a:0a:50:71:4d:d2:dc:c2:ac:eb:f7:70:35:
                    82:cf:39:d7:1b:e9:78:c7:04:57:a2:e8:5a:20:c5:
                    48:b5:87:c5:bd:6b:12:49:fd:e9:7a:ca:bf:71:21:
                    56:69:9e:2e:b0:36:ff:6e:76:e7:ff:90:f4:10:ea:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A2:29:2A:37:80:06:A7:34:D3:C9:75:0B:52:3F:32:33:6C:0F:09
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203231373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:2a:57:6d:b7:59:59:b8:dc:8d:2c:25:d2:0f:f7:17:42:d7:
         9b:0c:c1:02:61:d2:25:50:bf:d1:62:b2:da:7d:3f:45:f3:0c:
         69:d6:d0:3a:50:fb:9e:c1:43:7a:91:46:34:b5:cd:47:0b:1f:
         1a:01:6e:d4:9c:ab:bd:7b:24:c3:11:61:30:50:82:47:93:2a:
         43:fa:4c:51:cf:e2:c7:5f:e1:c3:fd:ec:c6:5f:85:f0:bb:b8:
         b1:40:90:58:29:63:68:0c:11:d2:2c:f8:63:71:ed:7c:39:6e:
         35:02:19:f4:7b:96:18:04:74:00:bd:98:a3:82:19:c4:35:d1:
         7f:2a:ee:1d:90:a8:41:20:27:00:92:cf:7d:e0:fd:9b:f7:36:
         58:f4:f2:1c:c3:ec:38:2b:0c:a9:16:58:0e:eb:d7:45:3a:93:
         d6:4c:0c:fc:4e:8e:85:a6:38:10:e9:57:a9:bc:34:cc:b2:c7:
         e9:bb:6b:64:70:9d:0a:07:e1:7e:eb:68:dc:b8:58:35:02:ac:
         0d:b8:66:5a:14:11:81:ed:c7:16:27:fb:4f:c0:a9:40:f2:cd:
         b1:85:96:e0:89:1a:e6:82:a4:d0:bc:85:52:d2:48:cf:d7:8e:
         9f:83:21:08:cf:4d:7d:95:83:d6:6a:0b:bf:09:d8:64:6c:d4:
         46:98:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:21 2024 by rpki-client on console-fra.rpki-client.org