Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS400529.roa
File:                     AS400529.roa (raw, json)
Hash identifier:          WDfw4aSkQZkE44Oo4DHjDsSpaknFcSLASUZXV+7ByLA=
Subject key identifier:   5A:CD:75:6D:B9:2C:78:A9:E6:65:89:1F:4D:25:3D:D8:39:19:61:CC
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       761B31CE56AA7E3D274F1083BFC686B0C885713B
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS400529.roa
Signing time:             Mon 31 Jul 2023 04:22:21 +0000
ROA not before:           Mon 31 Jul 2023 04:17:21 +0000
ROA not after:            Mon 29 Jul 2024 04:22:21 +0000
asID:                     400529
IP address blocks:        205.234.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 10:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1b:31:ce:56:aa:7e:3d:27:4f:10:83:bf:c6:86:b0:c8:85:71:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 31 04:17:21 2023 GMT
            Not After : Jul 29 04:22:21 2024 GMT
        Subject: CN=5ACD756DB92C78A9E665891F4D253DD8391961CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:2f:92:91:a4:fb:c1:09:b8:c7:de:c8:87:
                    a7:08:8c:a3:8d:2b:78:e9:ed:84:b3:d5:a5:cb:be:
                    40:02:c4:87:ea:5a:a3:5a:52:ef:0a:78:77:27:6c:
                    04:4e:30:32:d5:a5:8f:99:44:93:9e:37:af:11:a3:
                    a2:e0:10:49:60:31:b1:be:de:fc:d2:90:af:6e:da:
                    77:2b:a2:64:f2:7d:47:c1:ce:20:fc:af:bb:f6:be:
                    be:17:8a:2c:80:e1:60:85:46:48:b1:1c:db:19:6b:
                    d2:e4:9e:09:8f:15:cf:72:4c:bb:73:55:a3:ba:89:
                    f9:66:63:61:2a:53:b4:10:1c:cd:ac:01:82:cf:50:
                    97:85:44:81:a3:8d:29:02:d8:20:47:79:ad:3e:30:
                    d9:c3:46:a5:86:0e:a1:56:f8:b1:c2:de:71:63:97:
                    64:cd:ea:a0:dd:c6:f7:33:03:f6:29:bc:0d:c9:f8:
                    c6:1d:1d:a8:98:70:4c:45:06:41:1b:38:dc:61:e2:
                    2e:5a:59:bf:64:d1:e6:6b:80:70:6e:7f:4f:03:e0:
                    98:f8:45:24:54:c9:c6:93:f8:81:0f:ff:b9:e1:d1:
                    17:4d:16:61:57:4e:15:d8:2b:99:ff:0f:3d:85:8a:
                    5e:59:27:77:ee:c5:8c:7e:84:06:a3:67:ba:7c:2a:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CD:75:6D:B9:2C:78:A9:E6:65:89:1F:4D:25:3D:D8:39:19:61:CC
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS400529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:bc:7b:50:7f:f5:cf:6f:f2:53:30:fb:c2:26:35:c1:7e:
         40:a3:a3:e8:2d:b2:10:6e:e4:af:5e:91:b6:0c:f7:f4:94:2c:
         6a:11:1d:36:e4:a9:f5:94:65:02:e8:56:0d:4d:bb:64:3e:c2:
         67:f4:92:21:43:b1:e3:ba:84:de:5e:71:81:d8:a3:8f:8a:9a:
         9c:62:4f:b4:a0:e3:d4:b7:a2:9e:9a:71:62:f1:18:f3:34:a9:
         17:09:7c:f1:73:f3:c6:ae:b4:03:73:0a:cc:73:15:d6:cd:df:
         bc:0b:d8:44:69:e6:14:50:b5:4c:44:11:bb:63:51:b6:e4:81:
         27:39:b2:f7:cf:b3:a7:a8:8e:11:9f:eb:c9:f9:4a:7f:d1:ec:
         30:d9:b4:78:40:22:5f:f7:a0:e2:c1:00:f8:f1:be:44:bc:55:
         3f:9f:35:0f:63:99:93:3c:a2:18:41:db:e2:66:94:81:f7:4f:
         eb:13:3a:99:17:fa:4e:ba:c9:98:cb:a5:33:d0:2e:1a:ab:ad:
         27:4e:fc:bf:bd:ef:44:2f:d8:55:dd:6f:31:11:89:57:12:66:
         23:51:7f:f3:05:fb:bd:3e:1a:4c:79:45:49:e8:39:5d:68:bd:
         86:cc:21:31:ef:8a:2c:1a:0f:9e:21:af:55:36:71:94:0b:b9:
         ee:62:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:51:52 2024 by rpki-client on console-ams.rpki-client.org