Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa
File:                     AS142111.roa (raw, json)
Hash identifier:          8SJpVP0JIYjMKO3QHAx6l4H7CHcZX+UBE4OHrHuT1M4=
Subject key identifier:   40:DF:5D:70:11:FB:0C:E0:0B:06:48:49:23:E1:E0:B6:28:F6:F8:C2
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2EB5BA2A58339C5984C92B2D638ACEF1CAD48E7F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa
Signing time:             Mon 23 Dec 2024 14:28:23 +0000
ROA not before:           Mon 23 Dec 2024 14:23:23 +0000
ROA not after:            Mon 22 Dec 2025 14:28:23 +0000
asID:                     142111
IP address blocks:        157.254.227.0/24 maxlen: 24
                          157.254.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b5:ba:2a:58:33:9c:59:84:c9:2b:2d:63:8a:ce:f1:ca:d4:8e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 23 14:23:23 2024 GMT
            Not After : Dec 22 14:28:23 2025 GMT
        Subject: CN=40DF5D7011FB0CE00B06484923E1E0B628F6F8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:49:b3:a0:fa:2f:1d:27:83:20:b7:5d:8d:
                    36:de:e2:92:98:b6:23:eb:44:b4:0b:13:18:2b:33:
                    20:a6:91:72:6d:76:13:92:55:ad:f3:1c:23:81:e0:
                    c4:63:8b:39:57:27:a8:77:f7:fa:09:63:7c:42:5a:
                    6a:a8:bc:24:dd:44:ed:77:bf:64:d3:fe:e8:2a:60:
                    7a:d7:9a:6b:14:2e:dc:f9:d4:a3:a5:94:60:86:c3:
                    c7:62:24:4e:51:6e:7f:ef:15:4b:7c:6d:ee:ac:47:
                    71:c5:28:30:e3:67:89:bc:77:1c:f4:a6:07:14:10:
                    11:c6:cd:32:5a:3d:ce:20:48:36:96:d5:a8:6d:59:
                    c1:d4:33:4d:d0:3b:7b:da:05:ea:7d:e7:eb:45:16:
                    d2:1f:6e:6f:f5:cb:e4:35:db:cf:69:fa:18:c7:90:
                    75:13:a7:e8:60:d5:b0:94:97:f9:87:2b:a4:9a:b2:
                    5a:8e:fc:36:83:fd:8b:56:11:68:31:3f:49:ca:db:
                    8e:b6:c5:47:b1:f5:e1:cd:7f:c9:db:85:31:40:d2:
                    bb:c7:d5:b2:d2:a4:d5:36:88:e1:e3:a3:03:2f:fc:
                    d6:9f:5a:1e:fd:21:51:3e:84:2b:c3:c0:20:cd:5d:
                    28:39:8c:26:28:54:91:4a:54:ec:10:90:db:42:cb:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DF:5D:70:11:FB:0C:E0:0B:06:48:49:23:E1:E0:B6:28:F6:F8:C2
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:39:2e:fc:4b:fa:20:44:95:86:71:d8:d5:53:f2:b3:ef:c0:
         f5:a6:49:c5:9c:61:bb:7b:e0:d8:51:39:48:83:02:a5:55:d1:
         b5:6e:80:e9:2d:ff:bb:be:fe:68:13:f5:54:7c:c7:d3:d9:7e:
         a0:d0:e2:c1:8d:59:fe:69:65:b0:c5:16:24:f6:75:fe:db:9e:
         a1:bd:99:98:d3:b6:09:58:ce:d6:62:b7:76:3d:ad:5c:09:cb:
         e3:fc:2f:fb:b4:37:a9:14:b8:d7:c6:83:87:65:67:37:6f:ff:
         53:26:22:4b:b9:12:38:dd:bc:af:62:05:da:74:08:01:9a:5a:
         60:af:52:00:d4:0d:f9:c1:9d:83:8c:eb:ae:5b:8b:97:8c:93:
         74:88:d6:f0:d8:db:b9:be:a8:60:51:7e:8a:64:73:58:7d:ac:
         d7:b5:3c:b5:d9:a0:2f:e0:0e:1f:c1:1a:f3:92:1f:af:8b:12:
         ad:bf:f7:bf:1c:58:77:37:9e:f9:c1:fa:f6:39:86:31:f6:c2:
         bb:8a:dd:34:42:41:40:d8:85:4a:aa:2e:c5:31:84:c6:a3:0b:
         b3:26:bb:66:aa:96:3c:5e:cd:e3:b9:a5:a5:cf:16:ab:e6:c4:
         be:11:7c:1f:a3:37:f9:43:1a:6e:d1:d1:c6:97:4c:c7:b3:51:
         46:06:36:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:35 2025 by rpki-client