Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199856.roa
File:                     AS199856.roa (raw, json)
Hash identifier:          1oKSw7zEBfcXwtPUtxmjUSDSug2UICtaQWeaxCFb1mU=
Subject key identifier:   27:B1:DE:AA:42:B9:C4:80:13:39:A3:9F:FB:79:D0:FB:78:8E:6A:DC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1D6A5AD6412F9CA288D02575A82A59C435C2D5B6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199856.roa
Signing time:             Wed 10 Apr 2024 15:56:38 +0000
ROA not before:           Wed 10 Apr 2024 15:51:38 +0000
ROA not after:            Wed 09 Apr 2025 15:56:38 +0000
asID:                     199856
IP address blocks:        157.254.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6a:5a:d6:41:2f:9c:a2:88:d0:25:75:a8:2a:59:c4:35:c2:d5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 10 15:51:38 2024 GMT
            Not After : Apr  9 15:56:38 2025 GMT
        Subject: CN=27B1DEAA42B9C4801339A39FFB79D0FB788E6ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:43:0f:57:bf:1c:6f:1f:b0:9d:d4:03:ea:
                    78:1c:cc:43:30:2d:33:9e:a6:a3:4a:bd:97:db:c8:
                    f5:d9:54:74:b7:ab:34:c0:a0:f3:e8:9a:45:d4:82:
                    10:82:04:68:f9:f7:d2:ab:93:0a:91:a1:26:ed:be:
                    eb:8b:07:bc:31:5f:39:6e:d4:8f:2d:11:cf:aa:df:
                    d5:51:f5:06:46:4c:b7:86:b5:72:5f:46:11:4d:c3:
                    f1:c0:83:9f:ee:00:9b:d6:3c:a8:7a:bf:5e:04:79:
                    89:7c:c6:c6:00:e5:79:1a:c0:17:4e:86:24:e6:da:
                    49:2c:43:93:31:76:2b:7b:7a:87:e1:d5:e3:53:f0:
                    cd:10:3d:78:db:fe:e3:00:ba:2b:c9:2f:2a:6c:22:
                    af:27:5c:a1:f3:d4:94:58:ec:cf:78:36:82:b8:82:
                    df:c1:d0:35:2e:a8:b8:77:9b:7b:56:56:b8:45:74:
                    b8:73:c5:32:59:5e:a3:b0:64:6e:cd:d9:81:92:a9:
                    8e:54:5b:e0:a6:a1:22:e0:3a:e1:2b:12:ae:a3:a6:
                    54:3e:8a:75:81:f3:da:a3:6e:ed:a1:05:08:1e:ea:
                    ca:5d:19:22:78:0b:fe:1f:8e:53:f4:d5:13:9d:de:
                    e6:73:57:45:55:13:aa:e0:90:e6:e6:ad:c9:9f:0d:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:DE:AA:42:B9:C4:80:13:39:A3:9F:FB:79:D0:FB:78:8E:6A:DC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199856.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:89:4f:8f:6e:0e:77:92:10:bd:e1:8f:fc:f0:68:99:72:9a:
         4d:83:5e:84:4f:8a:23:6e:af:d0:0b:6a:3e:1a:e5:37:da:f7:
         26:f9:ca:37:60:50:cf:3f:70:08:08:0c:56:ed:e1:5e:82:dd:
         dd:2a:e8:21:ad:69:3f:f4:77:a9:6b:81:c7:29:f6:fe:57:81:
         b9:50:6f:aa:48:e8:7e:2e:21:26:11:61:f4:e2:d7:8b:8a:1c:
         86:f8:13:5e:78:0b:c3:d4:6e:de:5b:fd:ff:24:9b:5d:0e:b0:
         2d:bb:8e:99:ed:66:cb:b7:ec:9b:a0:ff:d3:88:82:43:d0:9f:
         67:b5:b4:d4:bc:b0:af:2f:6c:c3:50:c7:1d:a6:75:7d:3f:09:
         35:2f:2b:ab:22:b8:d6:56:74:79:de:89:c4:b1:20:4c:75:1c:
         52:5f:36:94:30:74:bb:07:86:6f:79:91:ef:6c:19:5b:3a:1f:
         ad:7a:c5:b1:1e:ca:9b:03:5f:5e:57:31:2a:c2:fc:45:fd:db:
         b3:45:f2:0a:7e:43:52:38:b9:56:7a:28:ef:b4:74:f4:36:ef:
         4e:a8:d4:7b:93:6e:4d:f5:7d:98:c7:5e:4f:47:cd:88:e6:7b:
         32:92:c3:98:98:64:21:d6:e2:31:c5:6b:60:26:fa:67:3f:38:
         1b:f2:41:01
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUHWpa1kEvnKKI0CV1qCpZxDXC1bYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNDEwMTU1MTM4WhcNMjUwNDA5MTU1NjM4
WjAzMTEwLwYDVQQDEygyN0IxREVBQTQyQjlDNDgwMTMzOUEzOUZGQjc5RDBGQjc4
OEU2QURDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2BDD1e/HG8f
sJ3UA+p4HMxDMC0znqajSr2X28j12VR0t6s0wKDz6JpF1IIQggRo+ffSq5MKkaEm
7b7riwe8MV85btSPLRHPqt/VUfUGRky3hrVyX0YRTcPxwIOf7gCb1jyoer9eBHmJ
fMbGAOV5GsAXToYk5tpJLEOTMXYre3qH4dXjU/DNED142/7jALoryS8qbCKvJ1yh
89SUWOzPeDaCuILfwdA1Lqi4d5t7Vla4RXS4c8UyWV6jsGRuzdmBkqmOVFvgpqEi
4DrhKxKuo6ZUPop1gfPao27toQUIHurKXRkieAv+H45T9NUTnd7mc1dFVROq4JDm
5q3Jnw2+hQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCex3qpCucSAEzmjn/t50Pt4
jmrcMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE5OTg1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+GjANBgkqhkiG9w0BAQsFAAOC
AQEAqYlPj24Od5IQveGP/PBomXKaTYNehE+KI26v0AtqPhrlN9r3JvnKN2BQzz9w
CAgMVu3hXoLd3SroIa1pP/R3qWuBxyn2/leBuVBvqkjofi4hJhFh9OLXi4ochvgT
XngLw9Ru3lv9/ySbXQ6wLbuOme1my7fsm6D/04iCQ9CfZ7W01Lywry9sw1DHHaZ1
fT8JNS8rqyK41lZ0ed6JxLEgTHUcUl82lDB0uweGb3mR72wZWzofrXrFsR7KmwNf
XlcxKsL8Rf3bs0XyCn5DUji5Vnoo77R09DbvTqjUe5NuTfV9mMdeT0fNiOZ7MpLD
mJhkIdbiMcVrYCb6Zz84G/JBAQ==
-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org