Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20057.roa
File:                     AS20057.roa (raw, json)
Hash identifier:          KLi0c3D961fXivMkHSOuQLPVgZHtE11NpSpRbtx2U68=
Subject key identifier:   4F:A1:18:DA:A1:A0:43:36:A0:A8:2D:86:17:21:3E:62:27:45:26:54
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       78B0CAD0BD58F02BB8CFC294B800F79A265F28A6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20057.roa
Signing time:             Mon 12 Aug 2024 12:40:52 +0000
ROA not before:           Mon 12 Aug 2024 12:35:52 +0000
ROA not after:            Mon 11 Aug 2025 12:40:52 +0000
asID:                     20057
IP address blocks:        157.254.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b0:ca:d0:bd:58:f0:2b:b8:cf:c2:94:b8:00:f7:9a:26:5f:28:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 12 12:35:52 2024 GMT
            Not After : Aug 11 12:40:52 2025 GMT
        Subject: CN=4FA118DAA1A04336A0A82D8617213E6227452654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:de:18:26:c0:85:ea:aa:05:85:6f:1f:15:
                    1d:c6:7f:06:00:68:11:f2:f8:0c:32:08:ae:20:0c:
                    86:dd:86:93:5d:03:22:56:f6:b6:00:18:55:ef:90:
                    d6:30:ba:b9:e1:ab:a9:cf:4b:d0:5d:81:02:9c:31:
                    f9:4b:97:db:1a:67:24:a2:18:67:26:1b:6b:8b:04:
                    b3:45:6a:e0:a8:3f:48:52:17:7f:b9:67:4f:20:54:
                    57:aa:a2:4c:7e:28:04:16:0c:db:ad:ff:37:37:c3:
                    b5:b2:ef:ce:e0:a2:40:d4:16:5d:b4:88:25:84:58:
                    72:6b:3c:c8:91:b1:e3:53:f2:ba:37:b2:5c:48:d1:
                    79:d2:a0:e4:a4:a9:6d:ec:16:c1:02:07:c2:b2:d6:
                    23:14:0c:68:5b:3d:67:12:58:f2:67:4f:7b:f3:a0:
                    5e:18:e3:03:b2:0c:d5:00:60:56:c6:4a:d9:1a:51:
                    a1:94:fb:58:13:1c:65:aa:85:ad:49:2e:ea:b1:96:
                    51:c6:15:73:c2:20:3c:fc:17:e2:be:ee:dc:59:fa:
                    a5:62:6f:3d:11:47:0f:d0:2e:22:e4:de:6a:44:90:
                    21:1e:9f:05:a0:c0:57:4f:5c:b8:09:50:2a:d1:c6:
                    54:0a:49:01:ef:49:01:de:6c:fe:d5:f9:42:32:15:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A1:18:DA:A1:A0:43:36:A0:A8:2D:86:17:21:3E:62:27:45:26:54
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:5f:77:55:bc:d8:5c:8e:3e:de:2b:51:fb:66:5c:45:fc:
         ed:83:b4:81:fd:27:83:55:f3:79:16:b5:40:cd:de:cf:c2:90:
         71:bf:8f:9a:d1:af:be:51:ad:93:e9:12:74:78:0c:ee:14:ac:
         e4:fe:3c:db:ac:1d:4d:a3:1e:17:fe:cb:7a:93:0d:1c:13:23:
         2f:7a:59:9f:6c:b0:e6:f2:b8:e8:fa:8a:0b:33:ee:80:eb:85:
         65:50:07:7f:5d:e7:94:fb:a1:fd:b0:ab:fb:ab:a3:11:b3:47:
         32:4a:ee:59:5f:3f:7a:2d:cc:d8:48:87:07:27:e0:09:52:5a:
         21:85:79:a3:f2:d7:ec:0a:45:74:4d:f8:3b:4d:92:f3:83:fc:
         5f:8b:1a:22:e0:fa:cf:51:fc:5d:87:70:c5:c4:76:1d:c1:04:
         a1:b5:bf:33:67:04:7a:96:ee:a6:f4:5b:c0:5f:7f:15:cf:41:
         d1:f1:8f:3a:b1:96:ec:61:3f:81:ee:9d:6d:b1:80:60:3f:64:
         3a:68:79:14:0c:95:e5:ba:b4:5e:7f:f8:f0:dc:5d:d7:b4:ee:
         2d:09:7e:51:6a:98:20:30:40:be:51:f2:f2:e8:59:33:a5:26:
         70:13:88:89:de:88:ac:b5:2f:5a:02:ef:ec:2c:e1:c0:6d:77:
         5e:3b:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:18:20 2024 by rpki-client on console-fra.rpki-client.org