Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          7S24zJkqJOKlgvyznCN3xFHtTwcFTMUPq69bgmpERJw=
Subject key identifier:   31:D2:1B:D6:D0:92:E7:80:B0:A3:0C:19:F9:C1:49:9E:A7:BE:05:51
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       58C06AF3BEF6ECBA653CC3210EE21D8E87359675
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
Signing time:             Mon 18 Nov 2024 07:08:30 +0000
ROA not before:           Mon 18 Nov 2024 07:03:30 +0000
ROA not after:            Mon 17 Nov 2025 07:08:30 +0000
asID:                     16276
IP address blocks:        157.254.30.0/24 maxlen: 24
                          157.254.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c0:6a:f3:be:f6:ec:ba:65:3c:c3:21:0e:e2:1d:8e:87:35:96:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 18 07:03:30 2024 GMT
            Not After : Nov 17 07:08:30 2025 GMT
        Subject: CN=31D21BD6D092E780B0A30C19F9C1499EA7BE0551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:0a:33:f0:b9:c0:14:f6:98:60:59:55:b2:
                    a2:25:1d:ae:c0:29:39:99:7a:ec:02:88:fa:a0:b0:
                    06:4d:32:1b:75:b2:cb:71:d7:99:17:d4:0c:79:13:
                    7b:bd:a4:43:82:f6:47:03:06:e5:b4:b0:4c:06:d2:
                    dc:69:b0:82:c2:59:ac:91:4a:69:41:61:ae:30:78:
                    b4:84:02:a6:db:b5:36:5f:66:cf:df:66:a6:1e:17:
                    70:13:88:7e:f8:5b:63:90:cb:67:3b:38:43:15:de:
                    7a:6b:ee:87:ff:96:a5:d1:28:18:5c:89:95:6e:72:
                    a8:89:bf:b0:3c:2d:e1:93:69:ff:05:8a:f3:a7:7d:
                    a8:50:87:6a:1a:48:50:de:24:91:74:08:9f:84:e6:
                    90:f7:3b:6a:77:53:5a:b8:71:f6:6a:f1:63:29:6c:
                    50:a7:71:e7:6d:c4:bb:bc:8d:ae:36:a0:0a:6d:a8:
                    00:b0:f7:73:aa:2f:79:fd:df:39:b5:6c:49:ca:02:
                    8d:ca:b9:5a:71:d9:2b:0a:00:e7:27:6d:5d:67:10:
                    5b:b7:bc:96:57:e0:25:02:19:43:c7:7b:5b:fd:58:
                    79:27:be:88:66:ee:22:58:06:f0:f8:31:8c:87:49:
                    65:16:c6:60:94:e6:e5:e8:47:17:38:6d:63:45:65:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D2:1B:D6:D0:92:E7:80:B0:A3:0C:19:F9:C1:49:9E:A7:BE:05:51
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.30.0/24
                  157.254.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:02:72:e7:2d:7d:10:d6:5e:d3:65:7c:9d:87:ad:68:81:2c:
         a5:59:b4:41:79:6c:d7:76:77:22:72:ac:91:76:0c:f4:ba:7f:
         79:74:5e:79:5f:e7:04:4d:80:43:38:2d:cc:22:8f:c2:66:ab:
         80:d4:28:80:38:53:52:bc:a6:0d:6d:e6:60:ea:65:79:bd:5c:
         9d:e6:1c:ca:eb:eb:db:40:83:63:ba:ee:5b:28:e0:6d:be:09:
         f9:af:ea:36:9e:d6:b5:9f:48:d7:7c:20:28:3b:74:67:06:23:
         78:c9:bd:07:c4:72:75:49:e4:d7:91:b3:33:c7:41:86:2a:27:
         ff:62:d3:96:79:32:f3:0f:66:7f:1b:6c:a6:66:5d:a2:c6:0a:
         47:0d:f8:d8:2b:12:5f:91:42:4c:71:b0:39:8a:f6:64:33:47:
         c7:b8:fd:ae:73:e3:18:e7:f1:ac:91:d3:a2:ea:c3:0b:2a:52:
         af:2a:3e:d5:1b:a8:86:5f:1b:6f:1f:f5:bb:f5:33:cd:f5:b0:
         a1:15:ca:4b:83:ac:18:db:48:87:bd:85:43:67:45:81:20:70:
         57:51:a6:90:c8:06:c1:4e:8a:83:a0:88:f3:6f:40:ea:41:11:
         e8:0c:78:c6:52:77:8b:e8:73:da:1b:a1:c7:8a:17:57:02:10:
         95:c7:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org