Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa
File:                     AS142111.roa (raw, json)
Hash identifier:          ytjtr2e8bhB8stw1My9h9RXTPgA/PlMwC8iIr48Uw6U=
Subject key identifier:   B9:33:1E:DF:8D:4C:24:2F:C2:32:F2:E3:6B:A5:F8:1D:33:1B:DE:9D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       C8FEB83E20BB8E7FF2E25A97A535EEBEE797FA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa
Signing time:             Mon 22 Jan 2024 14:08:37 +0000
ROA not before:           Mon 22 Jan 2024 14:03:37 +0000
ROA not after:            Mon 20 Jan 2025 14:08:37 +0000
asID:                     142111
IP address blocks:        157.254.227.0/24 maxlen: 24
                          157.254.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c8:fe:b8:3e:20:bb:8e:7f:f2:e2:5a:97:a5:35:ee:be:e7:97:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 22 14:03:37 2024 GMT
            Not After : Jan 20 14:08:37 2025 GMT
        Subject: CN=B9331EDF8D4C242FC232F2E36BA5F81D331BDE9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:11:e7:a2:79:34:a4:b9:30:5a:16:0c:e5:
                    6b:33:83:60:ea:05:e5:25:55:6b:6a:ac:8b:c6:8e:
                    f6:d4:53:37:f0:95:58:e3:37:f9:90:ad:b9:9f:00:
                    7e:3d:aa:70:99:d3:88:6c:8d:f0:0b:13:03:20:45:
                    4c:8d:83:bd:56:60:b6:c4:fc:81:9b:55:23:cf:48:
                    51:0d:13:91:ed:bd:38:95:fa:58:5c:6b:8e:5c:83:
                    0d:9f:52:5b:cf:d1:ef:2d:b8:2a:9f:17:fd:ee:42:
                    03:42:52:0c:34:e3:e4:67:88:1e:6c:85:be:b2:41:
                    b5:d5:11:58:cf:ba:a4:e1:3b:56:db:a6:ac:49:da:
                    9f:be:25:fc:04:d7:4e:fb:e7:3c:0b:93:7f:92:2f:
                    4e:7d:1f:1e:02:39:35:1e:f5:0f:cc:28:8d:c8:d3:
                    34:b7:73:6a:1c:f5:81:94:a7:72:eb:58:82:8f:7f:
                    5c:cc:1e:1a:30:6a:99:ae:3b:24:ba:1c:e0:0e:28:
                    45:b5:7b:a4:8d:81:e6:f7:12:32:04:e2:6f:12:22:
                    27:5a:bb:fc:56:77:97:a9:a7:4f:90:3f:ad:1c:69:
                    a5:db:4c:5d:c4:a1:df:bf:d5:94:ce:04:6f:6c:95:
                    da:0b:f1:14:88:72:08:64:e1:29:8c:d6:22:49:a9:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:33:1E:DF:8D:4C:24:2F:C2:32:F2:E3:6B:A5:F8:1D:33:1B:DE:9D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:33:e3:da:2b:e8:88:3b:e0:1e:ef:fa:3a:1a:b0:eb:5b:
         a7:2a:9e:44:fa:48:0a:8c:bd:45:15:ee:e2:04:7f:e6:71:6a:
         35:20:96:bf:a9:12:f7:6e:28:2e:a9:cc:26:bf:f2:20:af:2e:
         3f:8f:bc:d5:f4:db:9f:db:c8:9a:65:16:2d:f8:91:b1:65:fc:
         df:c4:36:a0:1e:cf:17:df:d6:4e:c2:63:11:16:d2:ab:fb:97:
         53:9c:c0:05:2a:2e:46:71:61:89:c1:e4:93:ce:d1:f3:37:0f:
         48:e8:e9:b5:77:c8:6d:cb:fe:b4:14:eb:e3:04:ef:f7:1f:69:
         fc:34:55:7d:fc:24:06:83:a3:13:3d:7e:86:91:54:2a:e9:f6:
         f5:a3:10:a3:51:b8:b2:99:ba:7a:33:7f:0e:99:16:84:78:a8:
         4e:0c:30:88:4d:62:c8:75:87:ac:a8:b0:3e:76:bc:84:e4:ae:
         6d:da:fa:a6:ca:fb:72:88:55:77:fc:66:e7:66:1f:2d:3f:53:
         30:67:8e:df:e2:68:06:d7:fd:fd:83:e7:02:f0:36:d4:7d:b0:
         54:5c:e8:94:f9:25:f1:69:a5:23:49:af:4a:6b:50:6f:db:80:
         ab:7b:38:11:d9:f1:75:3c:65:d2:ad:00:23:90:73:6f:8c:c3:
         a1:bc:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org