Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          0stF/3HBHcihYdWoX6fP21l0x5M+FCA0ETV50ZrEkmk=
Subject key identifier:   0A:5D:16:26:85:74:83:6E:1D:70:62:26:46:E5:FA:07:4D:99:93:2A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0471A6DD95D9BF1C40B766621ACBACF4B7170AC7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS19437.roa
Signing time:             Fri 02 Feb 2024 08:34:23 +0000
ROA not before:           Fri 02 Feb 2024 08:29:23 +0000
ROA not after:            Fri 31 Jan 2025 08:34:23 +0000
asID:                     19437
IP address blocks:        157.254.226.0/24 maxlen: 24
                          157.254.238.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:a6:dd:95:d9:bf:1c:40:b7:66:62:1a:cb:ac:f4:b7:17:0a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb  2 08:29:23 2024 GMT
            Not After : Jan 31 08:34:23 2025 GMT
        Subject: CN=0A5D16268574836E1D70622646E5FA074D99932A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:83:34:bc:5e:aa:be:14:05:73:e8:40:9b:
                    d0:80:25:04:db:04:ac:11:0f:1a:ff:f5:90:9a:1d:
                    6b:89:3b:12:22:b5:57:ab:29:19:7c:b0:d3:22:a4:
                    47:ed:bf:a0:5d:6c:85:ac:f3:0e:81:c4:41:ba:6a:
                    11:84:ae:ed:47:64:41:f0:d4:e9:5f:d4:2f:ab:36:
                    07:f9:b6:9a:78:f1:ad:e8:46:65:6c:7b:79:c7:78:
                    13:a4:50:03:c8:49:d4:61:39:62:3d:4c:bf:dc:50:
                    eb:95:17:52:73:44:3c:1c:48:9a:77:1b:fd:29:b0:
                    31:72:9e:86:05:32:86:8e:50:02:65:63:7e:78:5c:
                    7c:19:23:d4:27:1e:ee:d5:23:27:34:21:20:c5:6e:
                    73:87:60:8d:f6:7a:4d:db:76:71:e7:02:c2:de:46:
                    e0:cc:19:5c:46:1c:d8:be:3d:4f:5c:34:b1:fe:e9:
                    c1:b8:a4:2e:0c:ba:5a:c0:8a:0b:54:50:69:88:11:
                    70:1a:57:db:a7:50:d9:4d:59:6a:0c:60:3c:bd:6b:
                    88:56:94:62:64:e8:fb:77:31:c6:f4:94:a3:54:d7:
                    8e:9e:30:8d:02:3e:71:20:2e:b9:99:f7:ab:b2:b9:
                    04:7c:ad:b4:5d:71:00:a1:12:38:dd:c1:8b:9e:37:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5D:16:26:85:74:83:6E:1D:70:62:26:46:E5:FA:07:4D:99:93:2A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.226.0/24
                  157.254.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:19:33:56:22:7f:f1:0d:2c:85:bb:b9:a7:64:b7:31:6a:
         5c:e9:44:00:f6:4c:85:dd:c1:d2:e2:92:f4:a5:e8:8e:19:6e:
         e8:14:22:be:a1:d4:4e:71:11:dd:56:92:33:e1:fe:8d:3f:9c:
         b7:50:0e:9f:27:00:c0:0f:b5:2a:2e:96:fa:d7:bf:42:26:fa:
         0c:5a:fe:04:f6:b2:37:1c:5d:3e:99:f3:f5:46:1f:c4:7a:58:
         30:07:4f:6e:03:87:ee:ae:75:1b:14:f4:73:c7:41:22:2c:46:
         0b:58:15:2f:ac:04:7b:df:7d:9e:b1:0c:0a:3c:05:2a:bf:d9:
         90:e9:7b:a9:3c:26:95:3e:d5:30:79:b3:18:92:4c:82:20:1f:
         2f:7b:c6:b7:b5:4c:47:f4:f9:88:66:72:f9:8a:58:35:e4:4c:
         8c:67:e1:ba:43:1a:cc:92:50:e5:b5:21:f5:c3:ef:67:24:5c:
         d7:20:57:a8:a2:21:30:33:49:4c:8c:9c:6c:1a:3a:a3:8b:9b:
         54:8f:de:e5:08:75:52:a4:3b:97:ea:5a:4d:fa:e5:b4:0b:0f:
         5c:23:59:19:d0:74:b9:25:61:b8:d9:52:b4:cd:10:28:00:78:
         3c:d5:48:06:95:59:73:60:de:9a:01:46:f3:47:ea:c3:8e:a4:
         63:18:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org