Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa
File:                     AS152672.roa (raw, json)
Hash identifier:          kKAgT1zVSF3zWwY6PdUfg6wkEwEDQrYwLi7Jsw4/YLE=
Subject key identifier:   6C:C3:04:1E:25:A1:34:D2:48:81:3C:1A:5B:AB:88:A2:16:B2:5F:9B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0CC4F65924F94814703688F54E4A332B2834E00F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa
Signing time:             Sun 12 May 2024 03:29:01 +0000
ROA not before:           Sun 12 May 2024 03:24:01 +0000
ROA not after:            Sun 11 May 2025 03:29:01 +0000
asID:                     152672
IP address blocks:        157.254.227.0/24 maxlen: 24
                          157.254.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 04:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c4:f6:59:24:f9:48:14:70:36:88:f5:4e:4a:33:2b:28:34:e0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 12 03:24:01 2024 GMT
            Not After : May 11 03:29:01 2025 GMT
        Subject: CN=6CC3041E25A134D248813C1A5BAB88A216B25F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:d1:e7:c4:98:cc:4e:8d:73:26:6f:a0:15:
                    43:a4:20:35:ab:11:4d:d9:d6:a5:41:c3:f7:1b:a9:
                    92:ef:70:c8:6d:f8:32:28:84:fc:1c:80:e6:97:89:
                    1c:e0:90:5e:94:82:b1:e2:23:e3:6d:3f:ca:25:1f:
                    ff:68:4e:4d:79:99:c2:71:86:f6:66:96:e9:fd:a6:
                    bc:90:70:cb:9d:43:d3:8d:53:ae:47:17:0d:a8:7e:
                    51:a2:1e:8c:de:e5:e9:94:30:d4:98:c3:ee:f0:89:
                    e1:00:24:e5:88:ca:4a:99:83:2b:8d:10:04:d1:94:
                    27:42:6f:44:69:90:58:0d:40:39:76:9a:b8:e8:78:
                    dc:3c:7e:23:e7:b7:4e:a0:0f:41:78:18:02:f6:c9:
                    5c:7d:9d:3d:fc:01:4e:5e:76:ff:eb:54:dd:4c:b8:
                    25:59:2d:c2:8a:b0:3d:85:c4:60:2f:ed:e7:7b:d3:
                    7a:75:87:eb:a3:e5:4a:ab:19:a3:05:e2:10:8e:30:
                    f4:4d:38:33:24:aa:57:34:96:5a:d4:3d:13:28:e7:
                    0f:8d:0f:bc:54:a2:d0:1e:25:54:eb:de:5e:10:7e:
                    08:dd:93:c2:0a:67:a5:79:70:8e:d9:75:9e:8d:c0:
                    a5:7f:6d:35:24:89:c6:86:96:b4:8a:d7:c3:df:5c:
                    5c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C3:04:1E:25:A1:34:D2:48:81:3C:1A:5B:AB:88:A2:16:B2:5F:9B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:df:42:cc:75:05:5c:6f:67:47:05:d7:42:22:fa:7e:42:cf:
         7c:88:5e:fc:19:ca:92:3e:4c:a6:37:b2:12:9b:49:4c:0c:d2:
         93:18:02:90:f7:c8:5c:3e:63:ef:e0:3b:e2:e3:e3:81:b4:ad:
         65:0a:80:27:35:76:06:7e:12:6e:60:d7:21:11:26:69:5f:aa:
         cf:59:82:24:42:30:da:2d:26:25:2e:1f:08:17:5b:54:34:2c:
         c4:6e:d9:7e:d6:54:5d:30:9f:15:27:d6:45:a3:df:5c:ac:9e:
         ba:9d:24:9f:33:ed:01:b6:bb:b1:ef:13:d7:7a:03:4e:36:ca:
         a5:9b:1f:98:d1:9d:5d:ff:c2:75:b5:e5:9d:c1:db:32:a7:56:
         d2:fd:0a:70:b4:f2:77:e7:31:1b:cd:8c:f2:eb:0d:b4:d3:fe:
         22:60:c4:4c:23:0c:a8:16:9c:e9:11:11:a7:07:06:65:12:64:
         75:16:9d:b6:cb:9a:44:f3:df:11:09:5c:1e:9d:ed:47:c6:7b:
         0e:58:dd:ca:ff:42:61:1f:1e:e0:9d:49:65:93:a6:81:21:34:
         2e:b2:43:5f:3e:bb:16:32:9f:73:1c:db:4c:6d:20:d5:d5:c6:
         3c:11:98:b1:b5:57:e1:18:a6:f7:f2:c3:01:7c:32:38:8c:9e:
         e4:86:7c:cc
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUDMT2WST5SBRwNoj1TkozKyg04A8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNTEyMDMyNDAxWhcNMjUwNTExMDMyOTAx
WjAzMTEwLwYDVQQDEyg2Q0MzMDQxRTI1QTEzNEQyNDg4MTNDMUE1QkFCODhBMjE2
QjI1RjlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmObR58SYzE6N
cyZvoBVDpCA1qxFN2dalQcP3G6mS73DIbfgyKIT8HIDml4kc4JBelIKx4iPjbT/K
JR//aE5NeZnCcYb2Zpbp/aa8kHDLnUPTjVOuRxcNqH5Roh6M3uXplDDUmMPu8Inh
ACTliMpKmYMrjRAE0ZQnQm9EaZBYDUA5dpq46HjcPH4j57dOoA9BeBgC9slcfZ09
/AFOXnb/61TdTLglWS3CirA9hcRgL+3ne9N6dYfro+VKqxmjBeIQjjD0TTgzJKpX
NJZa1D0TKOcPjQ+8VKLQHiVU695eEH4I3ZPCCmeleXCO2XWejcClf201JInGhpa0
itfD31xcdQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFGzDBB4loTTSSIE8GluriKIW
sl+bMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE1MjY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJ3+4wMEAJ3+5zANBgkqhkiG9w0B
AQsFAAOCAQEAcN9CzHUFXG9nRwXXQiL6fkLPfIhe/BnKkj5MpjeyEptJTAzSkxgC
kPfIXD5j7+A74uPjgbStZQqAJzV2Bn4SbmDXIREmaV+qz1mCJEIw2i0mJS4fCBdb
VDQsxG7ZftZUXTCfFSfWRaPfXKyeup0knzPtAba7se8T13oDTjbKpZsfmNGdXf/C
dbXlncHbMqdW0v0KcLTyd+cxG82M8usNtNP+ImDETCMMqBac6RERpwcGZRJkdRad
tsuaRPPfEQlcHp3tR8Z7Dljdyv9CYR8e4J1JZZOmgSE0LrJDXz67FjKfcxzbTG0g
1dXGPBGYsbVX4Rim9/LDAXwyOIye5IZ8zA==
-----END CERTIFICATE-----
Generated at Thu Jun 27 06:53:02 2024 by rpki-client on console-ams.rpki-client.org