Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          u86xQJ/HxlfZpSIgcAfoHMB1QoNctbVFHatsNs59JD4=
Subject key identifier:   87:0D:12:0B:87:BC:C4:80:45:AF:7B:3C:82:29:54:C6:09:F3:98:03
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       71A88A3453E10CF7D94F8010C6B2DBC9B2160B44
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa
Signing time:             Mon 02 Sep 2024 20:13:05 +0000
ROA not before:           Mon 02 Sep 2024 20:08:05 +0000
ROA not after:            Mon 01 Sep 2025 20:13:05 +0000
asID:                     16509
IP address blocks:        157.53.253.0/24 maxlen: 24
                          157.53.254.0/24 maxlen: 24
                          157.53.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a8:8a:34:53:e1:0c:f7:d9:4f:80:10:c6:b2:db:c9:b2:16:0b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Sep  2 20:08:05 2024 GMT
            Not After : Sep  1 20:13:05 2025 GMT
        Subject: CN=870D120B87BCC48045AF7B3C822954C609F39803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:57:7e:a4:25:17:00:f8:73:51:9e:db:f6:
                    08:cd:05:af:eb:b2:b2:30:ef:c7:c0:19:98:97:56:
                    d0:2e:2b:82:48:13:de:9f:06:fc:79:c6:4e:a0:45:
                    f5:44:b4:d2:0f:41:83:81:36:19:51:d4:50:15:9e:
                    a7:95:ba:51:24:4f:03:fc:f7:31:6f:f7:50:a0:66:
                    a7:52:65:20:d7:33:52:be:36:44:bf:79:24:d8:a7:
                    1a:9b:70:29:dd:1c:60:ff:7a:da:f0:9d:21:2a:e1:
                    98:a2:54:6e:3e:a6:71:1a:4f:39:ab:75:54:84:6b:
                    14:26:67:e3:31:13:81:e5:a7:62:7a:91:5e:6d:44:
                    dd:21:f2:b1:31:29:e3:8d:8c:1e:a5:36:c9:c9:f3:
                    fe:d2:f7:24:c3:b5:6b:78:5f:b5:c0:43:66:bd:6d:
                    8b:ae:10:82:05:a9:83:0c:1b:dd:9a:34:f8:4d:84:
                    b9:78:ef:b8:a4:40:5c:ae:11:e3:5b:71:88:b4:26:
                    23:ab:52:69:02:02:47:51:7f:93:18:a2:2d:bb:4d:
                    fd:fb:4b:0e:60:85:22:66:19:33:96:23:58:f9:8b:
                    a3:53:be:77:9d:df:60:9a:46:9f:78:b4:13:3a:46:
                    47:16:0f:61:a0:2a:7f:4e:14:a7:39:a1:44:02:bf:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0D:12:0B:87:BC:C4:80:45:AF:7B:3C:82:29:54:C6:09:F3:98:03
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.253.0-157.53.255.255

    Signature Algorithm: sha256WithRSAEncryption
         87:af:44:b9:60:43:bf:58:0c:20:b3:5c:0e:a3:4f:9c:69:a7:
         cc:66:ef:1e:5a:b5:38:25:5e:d0:60:f9:2b:12:82:c3:63:0e:
         bf:29:75:3b:76:6e:f3:ce:4b:97:24:07:a8:f8:1a:c5:fb:8e:
         94:84:64:8b:92:8f:46:ed:b6:72:46:c2:42:8e:51:da:01:a1:
         cb:bd:05:c5:bb:46:36:3e:25:4d:77:47:14:f2:42:58:8e:91:
         a9:a7:d4:f0:e2:58:50:46:19:c5:56:8f:cb:1b:bb:04:d8:cc:
         d9:4f:d9:42:39:1f:41:ac:cb:64:78:dc:7e:22:45:18:b3:d2:
         c4:5d:36:22:f6:5e:fc:5e:7f:6d:f9:89:c2:57:70:c2:bc:fa:
         fb:d9:e1:d3:31:23:80:87:c0:d9:de:c8:41:0f:54:e7:f0:f6:
         fc:fc:07:f7:21:18:6a:9f:45:42:6f:91:69:4c:8e:7a:02:8c:
         6b:52:ae:68:a4:34:5c:b0:ad:cf:a5:5e:fa:e4:81:04:b7:50:
         78:88:2f:b9:de:64:75:48:b3:cb:6a:7a:7b:93:1c:9a:27:f8:
         bd:b3:59:60:3c:c5:15:84:02:37:51:63:98:20:52:8c:73:c2:
         83:61:cb:b8:91:40:fd:52:fb:93:fc:fb:f3:7f:c3:38:a0:fc:
         25:db:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 12:22:18 2024 by rpki-client on console-fra.rpki-client.org