Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS46242.roa
File:                     AS46242.roa (raw, json)
Hash identifier:          UpI9IvYrA4Q9wiwn3JjM3OkOHE/tjw0enV0WIsReOqE=
Subject key identifier:   4E:81:67:78:01:9C:B0:04:2B:3E:47:B0:95:B1:06:8D:95:7B:E9:5D
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       079E60B9C8C58E4FDF895C54073DE087C86CB089
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS46242.roa
Signing time:             Fri 15 Nov 2024 18:38:33 +0000
ROA not before:           Fri 15 Nov 2024 18:33:33 +0000
ROA not after:            Fri 14 Nov 2025 18:38:33 +0000
asID:                     46242
IP address blocks:        205.234.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9e:60:b9:c8:c5:8e:4f:df:89:5c:54:07:3d:e0:87:c8:6c:b0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:33 2024 GMT
            Not After : Nov 14 18:38:33 2025 GMT
        Subject: CN=4E816778019CB0042B3E47B095B1068D957BE95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:29:79:70:ff:32:05:e1:df:8d:84:65:3e:
                    4e:f5:d0:5e:df:0c:a1:59:11:b1:36:2c:ea:08:4b:
                    d6:a6:46:4f:8a:a6:36:fb:1f:1d:74:93:5b:98:22:
                    85:06:5c:5b:42:0f:68:a0:95:7a:43:5c:90:63:dd:
                    ea:2c:cc:2f:45:57:8d:5c:22:56:7b:81:49:f1:f8:
                    18:15:15:ac:08:33:62:1b:95:7d:b9:28:5f:a6:38:
                    4c:5d:99:e3:e9:60:f1:a2:76:2c:15:9e:56:bc:92:
                    f9:47:eb:4c:ec:41:3e:f1:5d:74:bc:6a:fe:a9:7c:
                    6d:c9:88:41:0c:5c:e4:6a:1d:77:76:7b:6a:73:3b:
                    c6:43:88:c3:ab:41:2f:59:4a:32:3a:91:3b:54:08:
                    c7:5f:a0:92:eb:4a:40:20:78:ea:14:4a:c3:25:6f:
                    de:8e:b8:84:cd:f0:35:d8:b0:41:0c:0b:8b:53:16:
                    c0:16:f2:b7:bc:c4:83:f9:92:95:ca:0c:d4:63:de:
                    9d:04:0a:15:8d:b0:1c:98:1f:d9:2d:31:95:3e:60:
                    be:81:6a:70:90:b2:f0:e8:4a:10:3d:34:5d:91:7c:
                    11:0c:c3:7d:cf:94:84:95:ca:e1:73:91:5d:32:1a:
                    97:35:b0:b8:d0:08:e2:97:d4:ab:96:57:14:e1:dc:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:81:67:78:01:9C:B0:04:2B:3E:47:B0:95:B1:06:8D:95:7B:E9:5D
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS46242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:83:ca:e6:7a:65:a0:06:b0:c7:a7:62:92:56:59:10:df:06:
         70:0d:45:91:2d:c7:c5:09:23:c5:c7:c8:2e:f4:9b:c0:23:27:
         dc:ba:91:bf:61:84:a7:f5:3d:07:3c:5e:51:37:69:ad:c6:54:
         7e:2a:54:c1:32:e6:80:98:96:21:3b:8a:9d:ed:52:ae:b2:5c:
         34:2c:38:c0:aa:9c:da:d4:c0:37:6e:95:78:b0:01:7c:2a:0a:
         97:e2:d5:50:51:0f:b5:56:7c:74:93:3e:9a:02:c8:bb:6a:b8:
         2d:79:d2:ca:23:cb:bb:6c:5c:15:e2:ed:e7:e6:1c:2a:8f:6b:
         c6:96:7f:9e:13:96:55:1e:12:a5:df:e0:a8:49:fa:83:14:a7:
         ee:35:df:99:b0:8e:92:85:9a:2f:48:63:cd:c5:2e:bb:c8:eb:
         12:dd:2c:fd:12:fe:c7:a9:35:94:dc:4e:e1:9c:97:e1:69:13:
         c1:e1:18:36:88:59:8e:e6:de:50:f6:a8:24:82:ff:cb:6e:4b:
         64:93:42:7d:09:fe:11:c8:d9:d8:89:05:be:6d:91:4b:8d:20:
         cd:63:de:99:b6:8d:a8:7a:83:6a:b6:c8:f4:6f:bc:01:62:67:
         59:1c:b8:e5:66:0d:82:89:ef:38:8a:a1:f9:3f:bf:bb:aa:49:
         fb:5e:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:13 2024 by rpki-client on console-fra.rpki-client.org