Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          nYG2ypGgzdEZKp+2Xj0G4cEJ/bmoZD0lAZAAB4rsjmQ=
Subject key identifier:   27:58:07:3C:15:16:C4:E1:6C:D3:AC:42:FF:8B:58:BA:FF:34:B3:EE
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0DA41A905AA4B5E6A2870A708E27B960AC1F5FF8
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS19437.roa
Signing time:             Fri 03 Jan 2025 09:28:23 +0000
ROA not before:           Fri 03 Jan 2025 09:23:23 +0000
ROA not after:            Fri 02 Jan 2026 09:28:23 +0000
asID:                     19437
IP address blocks:        157.254.226.0/24 maxlen: 24
                          157.254.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a4:1a:90:5a:a4:b5:e6:a2:87:0a:70:8e:27:b9:60:ac:1f:5f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan  3 09:23:23 2025 GMT
            Not After : Jan  2 09:28:23 2026 GMT
        Subject: CN=2758073C1516C4E16CD3AC42FF8B58BAFF34B3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:a7:d9:e0:e5:97:7c:04:40:38:ea:87:82:
                    c5:62:87:1d:c9:c0:a1:b4:0e:1f:98:d9:ae:8b:f0:
                    b0:8d:f8:b9:6d:fc:1b:3a:b8:f5:d3:4c:58:fe:00:
                    3c:a7:72:0d:22:4d:6c:1a:2e:8b:6d:6d:89:c4:af:
                    2c:44:a4:16:93:fd:90:45:e1:7a:a8:a4:8b:0d:87:
                    10:8b:eb:56:fb:45:6e:95:e3:6c:84:45:12:9a:1e:
                    42:51:cd:78:f1:a9:b3:4c:f2:e2:a0:a6:5c:f5:95:
                    a0:67:d7:6d:d0:17:c4:ac:de:8b:4d:d6:bc:33:36:
                    89:c3:e7:e2:09:14:d0:16:cd:b3:54:7e:22:4b:d3:
                    e6:b3:6a:47:16:73:08:fd:53:52:ef:d8:34:61:70:
                    bc:85:62:ba:f0:89:fe:01:a5:06:11:52:fe:cd:e1:
                    b8:0e:87:df:24:98:4f:d6:9a:aa:cf:46:e9:db:7a:
                    28:59:de:96:11:a4:f0:25:7a:f3:6e:23:c4:eb:20:
                    57:bd:2f:39:79:34:0d:5f:1b:cb:22:0d:14:69:26:
                    e7:09:42:03:16:00:4b:7c:43:5c:eb:5c:05:e4:8b:
                    70:94:b2:9e:e5:b2:9d:ab:e8:9b:fe:94:db:53:ac:
                    97:4c:4f:32:5a:e0:02:bd:bd:7e:c9:05:78:49:ba:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:07:3C:15:16:C4:E1:6C:D3:AC:42:FF:8B:58:BA:FF:34:B3:EE
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.226.0/24
                  157.254.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:11:01:28:18:a8:72:a3:a0:ee:14:d0:3b:b3:24:33:84:
         6f:32:ca:d2:96:11:54:9f:ed:4e:3c:69:8c:1e:c8:ef:30:36:
         a3:36:e9:b7:cb:97:a0:99:7c:50:72:b0:7f:e8:04:26:88:d2:
         33:6e:62:07:a4:d7:cf:fa:e0:c2:6d:be:2a:58:8c:64:f4:72:
         c3:1c:8e:8e:54:d0:ad:63:5b:60:bd:98:0f:09:3c:90:72:f2:
         1c:99:ac:bc:93:4e:5f:45:b9:9f:31:ff:84:95:3e:63:dd:c1:
         4d:86:bd:19:9e:b2:19:7e:cd:64:26:e5:a9:05:ab:d0:ac:e9:
         e8:ca:ef:66:22:0c:72:9d:b8:d1:b3:35:b6:5f:11:a1:97:63:
         09:87:f5:1c:7d:89:a3:a6:94:87:54:8c:e1:16:d6:d0:60:1b:
         dc:7d:d9:2b:76:50:0a:b4:07:87:e7:63:f3:65:83:57:fa:51:
         7d:68:64:5b:2f:42:6e:3f:aa:5f:b1:f0:ce:33:b6:1b:27:d8:
         48:91:fc:d0:9e:99:b1:34:fd:f3:d9:a7:4b:62:29:25:7b:78:
         89:f1:8a:d4:e1:28:20:c6:33:74:35:eb:9e:84:49:6f:ac:3f:
         60:0b:a6:26:dd:70:f5:19:fd:f9:6e:76:4e:20:18:99:a0:70:
         86:39:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:38 2025 by rpki-client