Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS1239.roa
File:                     AS1239.roa (raw, json)
Hash identifier:          Md5R27Lyw/vs19goGBMf5aLvsBQOx6mjiWoERet5RYM=
Subject key identifier:   BB:73:52:8C:65:BD:87:54:E9:A4:3B:34:F5:58:A3:A6:1A:5D:7F:87
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0255AD3E6623B4E284855779E0A9DC909A3E5D9F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS1239.roa
Signing time:             Tue 16 Jan 2024 11:15:04 +0000
ROA not before:           Tue 16 Jan 2024 11:10:04 +0000
ROA not after:            Tue 14 Jan 2025 11:15:04 +0000
asID:                     1239
IP address blocks:        157.254.248.0/22 maxlen: 24
                          157.254.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:55:ad:3e:66:23:b4:e2:84:85:57:79:e0:a9:dc:90:9a:3e:5d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 16 11:10:04 2024 GMT
            Not After : Jan 14 11:15:04 2025 GMT
        Subject: CN=BB73528C65BD8754E9A43B34F558A3A61A5D7F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:a1:c7:81:40:85:e4:36:ec:a4:89:e9:16:
                    f7:86:23:1f:d0:98:aa:99:a5:87:69:c2:d4:ed:1a:
                    66:88:7a:4c:e1:f4:66:bd:22:bb:62:1d:60:ae:0e:
                    24:19:3c:0b:82:36:61:44:56:6b:c4:2e:83:57:4f:
                    e0:77:05:1f:f3:c9:4a:f3:4c:5f:15:b5:53:85:f1:
                    b2:b0:0e:ec:c7:16:98:3a:a1:c8:77:71:cd:dc:78:
                    d3:b6:9e:b7:56:97:27:34:48:99:0f:3e:55:7e:86:
                    5f:e3:95:9f:a1:0e:8c:35:39:a8:a1:7d:ce:b3:c7:
                    1b:47:64:e2:c6:36:d4:80:c2:0b:4f:ca:65:4b:b9:
                    cf:a5:de:51:25:0c:20:17:95:05:66:74:1a:12:0a:
                    3e:90:28:65:e5:c0:3d:27:9c:38:ab:4b:f8:6a:7c:
                    25:84:2e:14:bf:9b:d0:75:a2:b4:ea:9e:dd:7b:1a:
                    7d:02:db:56:ea:9d:58:54:8a:60:5f:cc:2d:23:93:
                    39:c3:6f:cb:66:ea:ec:bb:01:3b:06:0b:40:42:a1:
                    c3:53:eb:cf:b7:b4:c2:05:1c:cc:8e:a8:59:ea:07:
                    85:1c:c5:93:2d:e0:98:8c:94:75:a4:c3:90:43:76:
                    ba:27:27:87:45:4c:cb:50:66:07:67:fe:0c:f8:bf:
                    3d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:73:52:8C:65:BD:87:54:E9:A4:3B:34:F5:58:A3:A6:1A:5D:7F:87
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS1239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.248.0-157.254.253.255

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:b0:e5:07:26:7c:9a:ea:aa:ef:d6:45:23:04:7a:fd:f5:
         c9:4a:b4:9a:85:f3:84:b1:4d:6c:bb:f4:53:3c:21:f2:6e:9f:
         58:04:6f:42:bc:92:a1:c6:a5:ab:16:92:4e:19:9a:98:83:c8:
         e3:fc:c6:82:6c:5b:5a:a0:b7:f2:dd:33:2b:f4:fa:78:ab:98:
         07:b2:39:63:91:2c:5c:1d:35:b5:3c:1a:db:19:8b:de:dd:a7:
         73:13:1e:bf:de:b7:b1:70:47:9c:5f:e0:e1:83:46:83:ea:09:
         be:09:1b:ad:dd:69:e5:e7:be:49:9d:5f:ba:fb:44:f8:05:0d:
         39:4a:a2:09:89:88:96:b5:61:9c:f9:c8:55:bf:10:a7:35:fa:
         34:1c:74:b4:b5:b6:e0:85:e3:a4:5d:82:ae:9c:66:16:c9:11:
         25:ce:cc:45:95:5c:a7:9c:8f:6d:2e:84:e5:ae:50:72:37:e7:
         e5:22:36:6c:9a:59:30:81:53:2a:91:88:b6:9a:71:66:54:25:
         76:0c:ad:d8:d2:60:39:ea:e5:20:d0:5b:91:32:e9:a2:42:a0:
         c5:8a:34:dd:f6:dd:ee:3f:69:f2:df:c2:f8:3b:64:47:04:59:
         4b:1f:49:b2:b0:3c:5d:77:4a:15:0e:b5:6c:55:1e:fb:55:ef:
         45:b2:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org