Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS134176.roa
File:                     AS134176.roa (raw, json)
Hash identifier:          bN6iZ7WzJvEPzDx98RvJCEcMOzsN8xW4t8B13OQmp+g=
Subject key identifier:   24:83:C9:DB:CA:A0:80:5C:38:8A:FB:93:C8:84:0B:7D:02:39:F6:A7
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       79C552A2AB8BD9BA69AEF2B04214A47CCA548B23
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS134176.roa
Signing time:             Mon 14 Oct 2024 08:42:22 +0000
ROA not before:           Mon 14 Oct 2024 08:37:22 +0000
ROA not after:            Mon 13 Oct 2025 08:42:22 +0000
asID:                     134176
IP address blocks:        157.254.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c5:52:a2:ab:8b:d9:ba:69:ae:f2:b0:42:14:a4:7c:ca:54:8b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 14 08:37:22 2024 GMT
            Not After : Oct 13 08:42:22 2025 GMT
        Subject: CN=2483C9DBCAA0805C388AFB93C8840B7D0239F6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:06:d6:5f:ac:e0:ef:a3:b6:8e:78:a9:53:51:
                    15:ff:8e:22:8e:09:c5:4d:31:fc:66:af:31:be:89:
                    d2:07:bb:0c:a5:76:b1:5a:b1:f5:6e:1e:c4:fa:9d:
                    23:82:70:2c:17:23:d3:14:8d:16:84:27:b8:6c:81:
                    0d:f9:44:15:70:e7:ed:5e:a1:4c:58:6c:26:84:48:
                    a2:85:f8:11:02:3b:63:cc:b8:42:51:88:ff:6e:55:
                    0b:cf:95:54:0e:b6:cc:65:ab:4f:05:6c:1a:4e:90:
                    02:15:0f:f3:d3:a4:04:ea:3e:ab:94:b3:4a:c1:24:
                    88:3e:c6:ff:a4:09:d3:31:e6:43:13:4d:91:f0:c5:
                    43:51:01:6e:b4:8c:1d:ff:49:e0:be:75:60:d0:4e:
                    f3:e0:4b:f4:15:8d:2d:27:d2:d3:bf:4b:a2:5a:c6:
                    36:e0:42:31:ad:58:3e:6a:ce:63:e9:cc:14:53:e2:
                    3b:c5:11:57:79:1d:0a:2e:cc:bb:a5:b7:64:ba:e7:
                    e3:81:5a:ad:2f:66:17:6c:7d:92:0b:f3:b2:52:3d:
                    37:b6:30:cf:92:59:cf:72:c2:55:81:65:1c:57:6d:
                    92:36:7c:6e:99:4b:83:28:96:3d:b1:86:5d:f9:9d:
                    ad:00:20:25:57:d9:58:35:9c:bc:b3:ec:aa:66:c2:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:83:C9:DB:CA:A0:80:5C:38:8A:FB:93:C8:84:0B:7D:02:39:F6:A7
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS134176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:11:ae:ab:8c:c3:7f:1a:b4:eb:da:26:7d:8c:79:63:78:3e:
         96:20:32:00:40:12:97:fb:08:57:a2:6f:95:fc:2e:50:f3:fd:
         4f:df:9d:cf:ab:c4:b3:92:81:2b:97:e6:9c:38:99:15:b6:44:
         b9:2b:ef:89:53:79:0a:97:f9:e9:5b:b2:da:49:8e:05:7e:41:
         4c:81:0f:29:25:32:5b:b9:c9:ec:38:be:53:78:40:ad:2b:b6:
         d7:e0:26:6a:3d:a3:57:2c:cd:a7:fc:b3:e9:31:fa:f3:2c:1b:
         e6:7d:80:b2:a6:0d:c7:65:f7:3f:7f:44:f9:2f:25:d2:68:a4:
         d3:76:68:be:fb:83:67:1b:49:aa:3d:d1:0f:d9:ec:c0:7c:3e:
         b3:ba:a2:05:f3:62:00:89:73:62:e3:1b:33:c1:81:1f:5f:46:
         20:84:0e:34:50:b1:5c:dd:d9:d1:8f:ac:07:7b:e9:10:7d:9f:
         df:aa:e9:16:4f:a5:cb:28:81:25:59:13:f8:fb:c4:ec:5e:68:
         75:1b:b9:ac:6c:aa:0b:d6:bf:3c:e4:25:28:ec:59:c6:f3:ad:
         71:d9:49:e1:bf:84:17:07:be:f7:be:fc:9d:b3:a2:37:9f:a1:
         75:9d:a2:ff:96:5c:6a:f4:0c:86:51:7c:9d:e8:13:a6:b9:36:
         bd:6a:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org