Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS16627.roa
File:                     AS16627.roa (raw, json)
Hash identifier:          /B6YmokV2kUSLvsYW4DuqWFrdcK3YFo4mc5xpXmRD/s=
Subject key identifier:   B3:59:33:53:E3:F0:24:3D:17:63:5F:9D:95:BD:9D:00:8C:3C:92:90
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       6F4FC7C3694C5FC9D36595171E5390401523FA4C
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS16627.roa
Signing time:             Tue 30 Jan 2024 05:29:03 +0000
ROA not before:           Tue 30 Jan 2024 05:24:03 +0000
ROA not after:            Tue 28 Jan 2025 05:29:03 +0000
asID:                     16627
IP address blocks:        184.17.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4f:c7:c3:69:4c:5f:c9:d3:65:95:17:1e:53:90:40:15:23:fa:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:24:03 2024 GMT
            Not After : Jan 28 05:29:03 2025 GMT
        Subject: CN=B3593353E3F0243D17635F9D95BD9D008C3C9290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:c6:36:1b:12:b2:d5:9f:32:38:5c:e7:5a:
                    d7:80:b4:6c:54:d9:d0:80:13:9a:6a:a4:f8:c1:43:
                    2a:3c:5d:df:bb:5b:f4:d2:aa:ce:76:4c:0e:28:38:
                    14:a6:c2:85:bf:95:68:3f:9d:41:3a:28:15:ac:21:
                    d4:27:58:46:bb:e4:37:77:52:81:0a:70:78:d2:09:
                    98:ee:ec:83:b6:ea:8b:29:e9:5f:30:de:a4:59:b5:
                    69:55:13:47:49:61:0a:4b:7f:f2:fb:f2:99:c7:55:
                    20:3c:b1:94:6f:5a:df:e0:d7:e0:0d:b9:d6:35:5e:
                    ec:f5:c3:48:c8:58:38:76:0b:26:69:22:a1:3d:0c:
                    4c:6c:bd:71:82:ed:1d:89:f9:c0:9c:a2:6a:d6:d5:
                    44:b3:d8:e8:92:36:f1:6e:a1:12:77:49:1c:36:b6:
                    d7:d6:ae:29:98:31:b0:6b:eb:26:a0:94:d5:a7:15:
                    2d:7b:b1:d6:99:be:f7:bd:8c:92:0b:d7:3e:79:cc:
                    44:2c:4d:4a:1a:25:11:bd:76:3c:46:c1:d9:a3:9c:
                    4e:ba:1a:84:2e:5f:4f:fd:65:0b:02:be:e2:f9:ff:
                    fa:0f:d5:06:44:b7:4a:b3:3e:81:fc:1c:82:3f:8a:
                    bf:f5:1c:48:2f:38:93:0c:5b:e9:96:f1:1b:43:cb:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:59:33:53:E3:F0:24:3D:17:63:5F:9D:95:BD:9D:00:8C:3C:92:90
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS16627.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.17.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:ad:e3:08:2e:27:65:06:36:19:16:fa:61:ea:a7:8d:0b:0c:
         5e:45:2f:6c:72:78:e2:cd:c5:48:2e:bd:33:c2:2b:e0:9e:a7:
         7c:7b:b7:03:76:da:a4:f7:f2:7d:d1:e3:5e:fc:8b:6f:0d:4e:
         d2:c1:9a:7d:cf:44:15:56:c2:f1:82:e8:45:80:b7:d1:7e:75:
         45:f0:c5:89:d7:be:4c:39:c9:46:54:f8:0f:91:ca:48:2f:61:
         83:79:a9:f8:1f:12:96:6f:de:c8:6f:9b:64:97:e6:18:16:2d:
         6f:fb:60:ef:44:c4:4a:0b:cf:bb:b2:f9:f9:46:6a:23:cf:36:
         70:a3:2f:38:34:69:62:bd:42:f1:8d:3a:9b:a6:13:ff:69:a6:
         0a:39:57:ba:be:a9:62:42:ef:94:08:1f:b2:58:87:82:0d:d0:
         c2:b7:38:50:44:59:70:37:05:80:c7:ae:a5:f1:35:11:2a:20:
         6d:e6:3a:b3:18:b4:b6:c4:1d:46:9e:aa:d4:2e:97:16:4e:9b:
         50:1c:27:09:f6:6c:e6:89:ee:f2:4c:4f:1b:f9:22:75:aa:d3:
         dd:a7:67:20:b7:19:9a:ca:e0:4f:60:2e:f1:fc:18:1e:8b:85:
         1c:db:3b:3c:8e:9f:ad:1c:3d:de:65:5c:85:1c:d2:aa:54:bd:
         b2:71:e9:79
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUb0/Hw2lMX8nTZZUXHlOQQBUj+kwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQwMTMwMDUyNDAzWhcNMjUwMTI4MDUyOTAz
WjAzMTEwLwYDVQQDEyhCMzU5MzM1M0UzRjAyNDNEMTc2MzVGOUQ5NUJEOUQwMDhD
M0M5MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZXGNhsSstWf
Mjhc51rXgLRsVNnQgBOaaqT4wUMqPF3fu1v00qrOdkwOKDgUpsKFv5VoP51BOigV
rCHUJ1hGu+Q3d1KBCnB40gmY7uyDtuqLKelfMN6kWbVpVRNHSWEKS3/y+/KZx1Ug
PLGUb1rf4NfgDbnWNV7s9cNIyFg4dgsmaSKhPQxMbL1xgu0difnAnKJq1tVEs9jo
kjbxbqESd0kcNrbX1q4pmDGwa+smoJTVpxUte7HWmb73vYySC9c+ecxELE1KGiUR
vXY8RsHZo5xOuhqELl9P/WULAr7i+f/6D9UGRLdKsz6B/ByCP4q/9RxILziTDFvp
lvEbQ8tcUwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLNZM1Pj8CQ9F2NfnZW9nQCM
PJKQMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzE2NjI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBGcMA0GCSqGSIb3DQEBCwUAA4IB
AQCxreMILidlBjYZFvph6qeNCwxeRS9scnjizcVILr0zwivgnqd8e7cDdtqk9/J9
0eNe/ItvDU7SwZp9z0QVVsLxguhFgLfRfnVF8MWJ175MOclGVPgPkcpIL2GDean4
HxKWb97Ib5tkl+YYFi1v+2DvRMRKC8+7svn5RmojzzZwoy84NGlivULxjTqbphP/
aaYKOVe6vqliQu+UCB+yWIeCDdDCtzhQRFlwNwWAx66l8TURKiBt5jqzGLS2xB1G
nqrULpcWTptQHCcJ9mzmie7yTE8b+SJ1qtPdp2cgtxmayuBPYC7x/Bgei4Uc2zs8
jp+tHD3eZVyFHNKqVL2ycel5
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org