Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          jblETvpw3aPahe+K4brgp130npOhXVw/HaL9zhCiLRk=
Subject key identifier:   57:28:A7:F0:70:25:49:DD:44:76:CE:9B:24:58:C4:28:B0:38:23:CC
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       56A442BEB283C71EFF61C9368768A62A2AC68B3A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
Signing time:             Wed 16 Oct 2024 06:58:32 +0000
ROA not before:           Wed 16 Oct 2024 06:53:32 +0000
ROA not after:            Wed 15 Oct 2025 06:58:32 +0000
asID:                     152179
IP address blocks:        192.227.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a4:42:be:b2:83:c7:1e:ff:61:c9:36:87:68:a6:2a:2a:c6:8b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 16 06:53:32 2024 GMT
            Not After : Oct 15 06:58:32 2025 GMT
        Subject: CN=5728A7F0702549DD4476CE9B2458C428B03823CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:85:f3:7c:e3:7d:00:67:58:c9:e8:bb:b7:
                    29:f9:35:35:a5:1e:13:f6:18:07:a3:c0:4f:e1:86:
                    db:ca:1f:39:9a:99:2e:42:14:51:85:2f:06:70:c6:
                    cc:72:4a:9b:04:a6:8a:48:94:2d:e4:16:0f:0c:d6:
                    72:38:9a:fc:2f:c0:96:f8:5a:50:ef:5e:3a:79:c3:
                    58:26:56:e3:86:50:cb:d1:1d:23:6d:ed:8a:9f:a4:
                    d5:f5:4d:1b:c8:10:db:a1:b3:51:65:8f:9f:1e:d7:
                    86:94:15:ad:c6:8c:49:51:f2:99:75:6c:ca:27:1e:
                    8f:e7:ac:39:13:61:ca:28:40:d9:6a:25:7e:0d:24:
                    56:ca:4a:41:1e:63:28:c4:a3:57:5e:24:83:4d:5c:
                    24:a1:9f:0b:79:3e:a5:fb:6a:09:87:54:f3:1a:4e:
                    68:0e:ae:b6:cf:c9:49:74:63:76:d4:d8:4b:50:16:
                    d4:bf:21:04:54:81:13:3e:ce:b4:81:0c:41:3c:01:
                    1b:90:50:d6:a8:e0:d5:9d:71:6c:ab:de:0d:ad:68:
                    11:0f:6b:43:04:b7:03:8f:2f:c4:c2:2e:4c:ca:18:
                    6c:1a:66:e1:9d:e6:86:21:a6:3b:e3:43:9f:af:0e:
                    99:d9:eb:fc:d4:71:42:c5:d1:d0:77:66:cc:63:46:
                    1e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:A7:F0:70:25:49:DD:44:76:CE:9B:24:58:C4:28:B0:38:23:CC
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.227.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:f0:1f:88:5e:50:a5:55:4c:4e:b5:94:eb:41:1e:bb:04:
         29:c2:b1:c8:21:af:f1:84:10:5a:19:f0:f1:62:8e:3d:71:15:
         e7:b2:61:3a:b5:b6:94:7f:71:58:4d:ed:7f:ec:04:7b:2f:65:
         a0:5d:d4:48:0d:e2:11:0e:5f:c5:3b:84:c9:2e:7f:a4:d9:98:
         a4:66:dd:79:3f:a4:db:cb:94:76:fa:60:f4:ab:92:83:95:b7:
         67:95:1a:9e:3b:bb:df:ee:db:96:e5:26:91:e6:f7:8d:ae:96:
         f7:f9:12:2f:91:0e:0f:73:03:70:e9:5e:25:57:c8:83:78:a1:
         e5:cf:8f:62:d1:69:49:fe:b3:a1:2e:cf:0e:ce:c4:1b:50:77:
         85:60:8d:ce:7e:e4:8b:6a:d9:ff:87:85:35:35:19:94:ce:92:
         ce:7f:c7:4b:7f:33:11:c6:f5:34:52:41:9d:cd:d1:4c:dd:d3:
         9d:f4:c6:a2:8d:81:f1:9e:bb:07:69:1c:1f:02:84:cc:59:4b:
         ee:fe:b2:dd:9b:d3:b7:f7:0f:1b:c6:1b:1b:3e:33:67:ca:b7:
         e0:d7:fb:e8:88:81:1c:4c:87:19:9a:fd:fd:4a:a3:6e:d9:4e:
         31:93:4a:f5:0d:50:94:7e:b7:39:98:dc:0d:93:d9:0d:74:a1:
         6c:1a:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org