Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139660.roa
File:                     AS139660.roa (raw, json)
Hash identifier:          hZ46N3uSeCdKrasGKvDrlaChOV4IWaBlfwZLEntfXTI=
Subject key identifier:   6B:25:3E:7C:1F:3C:B2:74:D1:5C:6B:7E:DF:71:E8:FD:33:45:49:98
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5DD6F21AC15EEB993BDC783677880DF6CBCF8364
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139660.roa
Signing time:             Fri 22 Dec 2023 00:00:08 +0000
ROA not before:           Thu 21 Dec 2023 23:55:08 +0000
ROA not after:            Fri 20 Dec 2024 00:00:08 +0000
asID:                     139660
IP address blocks:        157.254.155.0/24 maxlen: 24
                          157.254.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d6:f2:1a:c1:5e:eb:99:3b:dc:78:36:77:88:0d:f6:cb:cf:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 21 23:55:08 2023 GMT
            Not After : Dec 20 00:00:08 2024 GMT
        Subject: CN=6B253E7C1F3CB274D15C6B7EDF71E8FD33454998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:aa:db:f7:c6:13:a1:ca:0a:a7:08:0e:2d:c0:
                    69:28:e9:82:61:00:30:45:8f:22:25:12:c3:db:37:
                    36:af:cb:9a:f3:94:26:56:83:86:95:2c:5f:36:49:
                    24:98:c0:28:d9:15:96:3f:82:0f:4c:98:60:87:7b:
                    db:eb:0c:0d:2d:8a:c3:c4:79:e4:a4:66:1c:e6:c5:
                    25:18:0f:f8:79:19:62:ed:04:c0:8b:77:71:f0:8a:
                    58:67:07:23:a3:a5:41:5b:32:8d:54:df:b7:27:b6:
                    3b:b1:7a:4a:42:a3:dd:60:a0:ad:78:75:69:99:c8:
                    47:ca:80:45:78:7b:ad:5d:a5:23:01:2b:be:e5:9d:
                    42:80:d2:5c:45:4b:ab:1d:da:93:1c:21:31:3c:de:
                    2f:df:64:ba:cb:39:c2:ad:6c:bc:4b:a5:11:f9:40:
                    a2:7d:ff:19:ae:fc:37:45:e4:44:1b:13:78:35:bf:
                    64:8d:31:92:5e:b1:f4:b4:df:0a:70:bf:2d:53:16:
                    32:63:cf:eb:1c:b7:3b:eb:88:b0:cf:1b:81:f4:ed:
                    c2:7f:e7:e1:ae:3d:a4:48:99:27:90:6d:ee:30:00:
                    eb:0c:1e:62:55:43:9f:72:b0:c5:15:75:71:89:85:
                    58:0a:7c:c1:e1:a2:1b:e6:03:7d:67:ef:a4:00:7e:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:3E:7C:1F:3C:B2:74:D1:5C:6B:7E:DF:71:E8:FD:33:45:49:98
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.155.0/24
                  157.254.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:6e:68:de:c0:4b:a4:0e:5f:64:00:05:61:2d:5f:40:1e:
         be:e9:af:09:f2:04:34:9a:a5:99:d0:30:62:55:58:49:c0:d9:
         0b:d7:ed:c6:ad:61:27:69:9f:4a:f5:d9:e1:7e:71:af:bc:6b:
         31:46:be:a4:a7:16:ea:10:b2:a0:db:40:8f:5d:a7:2c:2a:b5:
         e9:4b:72:94:77:c1:56:b6:94:84:5d:a5:17:cc:9f:f1:07:b5:
         84:56:f1:4c:b1:34:d3:dc:93:5e:69:99:d7:03:36:5a:8c:e8:
         e3:92:59:a1:79:d8:b8:00:9f:60:cc:bf:f1:5d:95:56:e0:a0:
         36:9c:e0:01:54:23:85:9f:c0:92:74:89:02:6f:5d:f3:59:bc:
         fb:b9:fe:c5:cd:46:fd:0d:43:26:05:e0:ce:81:21:99:bc:a2:
         1d:2e:c4:01:3c:cd:64:f6:4d:70:61:20:ae:61:71:01:d1:aa:
         b8:c6:e1:60:af:d3:40:c2:62:fc:91:8e:a6:d1:92:ec:d4:d6:
         87:33:49:b9:b6:65:20:c9:ec:9f:65:c8:ce:98:75:2c:f9:4c:
         3e:f8:5d:76:6e:90:71:47:7c:7f:6e:3e:55:1a:b0:79:25:a7:
         38:3a:40:4c:92:42:6d:6f:db:92:33:bd:6e:00:c0:02:75:b3:
         4a:da:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:28 2024 by rpki-client on console-ams.rpki-client.org