Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138156.roa
File:                     AS138156.roa (raw, json)
Hash identifier:          7KPLKDSVfXxsQB/A7UWuAB0XXs9exxWRppU0pBuizts=
Subject key identifier:   88:C9:F3:A2:77:A5:52:A6:3E:C8:DC:5D:46:4C:B0:EA:3F:31:E3:1E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       65F3A9C4B76D128C5FE25BF755F6694E71778D64
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138156.roa
Signing time:             Fri 02 Aug 2024 10:21:22 +0000
ROA not before:           Fri 02 Aug 2024 10:16:22 +0000
ROA not after:            Fri 01 Aug 2025 10:21:22 +0000
asID:                     138156
IP address blocks:        157.254.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f3:a9:c4:b7:6d:12:8c:5f:e2:5b:f7:55:f6:69:4e:71:77:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  2 10:16:22 2024 GMT
            Not After : Aug  1 10:21:22 2025 GMT
        Subject: CN=88C9F3A277A552A63EC8DC5D464CB0EA3F31E31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:f6:bd:07:07:d2:9d:34:40:94:b5:08:5a:
                    b3:ca:a3:9e:ad:b2:fa:c6:9e:11:85:a3:95:41:95:
                    0a:87:9f:ab:d6:85:ca:83:c9:cf:ce:26:1c:7a:0a:
                    cd:a3:3b:d9:fe:c5:35:8e:82:5c:f6:e7:02:53:4e:
                    6f:ac:6e:90:20:48:c9:b6:6d:56:1c:3d:db:71:2e:
                    7d:3f:4d:95:db:03:20:6c:94:a5:4e:72:2e:b5:79:
                    74:fc:2c:11:87:c6:87:5b:32:95:70:cf:48:95:74:
                    22:cc:dc:51:68:71:b7:2b:01:db:89:1a:e4:6e:c5:
                    8f:f6:37:bb:a3:3c:52:5e:4b:98:03:9e:df:aa:1a:
                    57:dd:88:35:ba:a3:87:67:74:d8:c7:96:1d:27:c3:
                    6d:b1:7d:de:42:1f:a4:3f:b2:6a:f6:a1:08:5e:e9:
                    cc:fb:af:c0:b0:a9:a1:25:c3:39:e9:db:87:23:17:
                    f7:e9:0e:31:53:cf:65:21:12:e7:63:82:0a:08:28:
                    cf:42:f0:71:af:3e:33:dd:13:0c:77:24:61:35:89:
                    fb:b3:dd:d0:c3:69:91:69:b7:17:68:09:f5:13:b7:
                    1c:9a:10:46:94:2e:4c:22:97:54:bd:45:85:f6:52:
                    d3:1b:f9:0a:3b:cc:7e:4d:c4:28:c0:e8:ba:b7:45:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C9:F3:A2:77:A5:52:A6:3E:C8:DC:5D:46:4C:B0:EA:3F:31:E3:1E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:8a:71:56:ed:d4:ea:85:3b:95:dc:e0:59:f0:12:36:55:
         15:13:d3:fc:b2:ff:91:0f:53:96:2a:57:3b:6b:ac:c5:d0:06:
         fd:b3:16:37:65:6e:f4:ba:0f:12:07:7b:6e:29:16:4c:a9:ce:
         f6:c1:0f:82:58:c1:9b:1a:1a:e7:3c:d1:53:3c:2b:9a:ed:f6:
         5e:33:1d:a0:00:1d:45:b5:b5:68:72:61:3f:47:31:50:77:83:
         3d:6c:56:fc:fd:a9:bc:5a:9d:5f:4c:eb:08:88:9d:14:54:22:
         43:09:55:66:79:79:e2:85:cc:d4:7d:79:40:18:de:80:e7:34:
         cd:cd:a8:58:65:ad:c6:66:4a:b2:a0:12:ec:03:17:7f:06:e1:
         83:d7:ba:5b:62:99:1c:51:53:77:7a:10:55:52:69:d6:ca:ed:
         e8:91:22:40:88:31:67:9f:f3:26:cf:10:75:02:74:66:10:bf:
         c8:2f:8a:47:80:78:c5:54:46:b1:27:b4:69:06:8d:da:b9:a1:
         5c:0a:2a:15:3b:2b:ed:31:d1:2d:49:ea:33:99:d2:f8:63:b1:
         f0:b1:c4:50:c9:8d:7f:80:6b:16:5f:ae:f6:36:b1:f1:ea:f1:
         a2:a6:50:74:07:76:1f:55:8c:86:5d:f4:b9:42:12:d1:a8:42:
         60:c8:30:10
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUZfOpxLdtEoxf4lv3VfZpTnF3jWQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwODAyMTAxNjIyWhcNMjUwODAxMTAyMTIy
WjAzMTEwLwYDVQQDEyg4OEM5RjNBMjc3QTU1MkE2M0VDOERDNUQ0NjRDQjBFQTNG
MzFFMzFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtL2vQcH0p00
QJS1CFqzyqOerbL6xp4RhaOVQZUKh5+r1oXKg8nPziYcegrNozvZ/sU1joJc9ucC
U05vrG6QIEjJtm1WHD3bcS59P02V2wMgbJSlTnIutXl0/CwRh8aHWzKVcM9IlXQi
zNxRaHG3KwHbiRrkbsWP9je7ozxSXkuYA57fqhpX3Yg1uqOHZ3TYx5YdJ8NtsX3e
Qh+kP7Jq9qEIXunM+6/AsKmhJcM56duHIxf36Q4xU89lIRLnY4IKCCjPQvBxrz4z
3RMMdyRhNYn7s93Qw2mRabcXaAn1E7ccmhBGlC5MIpdUvUWF9lLTG/kKO8x+TcQo
wOi6t0VhawIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIjJ86J3pVKmPsjcXUZMsOo/
MeMeMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzEzODE1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+2zANBgkqhkiG9w0BAQsFAAOC
AQEALzKKcVbt1OqFO5Xc4FnwEjZVFRPT/LL/kQ9TlipXO2usxdAG/bMWN2Vu9LoP
Egd7bikWTKnO9sEPgljBmxoa5zzRUzwrmu32XjMdoAAdRbW1aHJhP0cxUHeDPWxW
/P2pvFqdX0zrCIidFFQiQwlVZnl54oXM1H15QBjegOc0zc2oWGWtxmZKsqAS7AMX
fwbhg9e6W2KZHFFTd3oQVVJp1srt6JEiQIgxZ5/zJs8QdQJ0ZhC/yC+KR4B4xVRG
sSe0aQaN2rmhXAoqFTsr7THRLUnqM5nS+GOx8LHEUMmNf4BrFl+u9jax8erxoqZQ
dAd2H1WMhl30uUIS0ahCYMgwEA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org