Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20057.roa
File:                     AS20057.roa (raw, json)
Hash identifier:          3PfZ/FCmNlX2sr+dGCNGVwhOs2VW13O9R2BYWLryggQ=
Subject key identifier:   FA:92:27:90:A8:11:61:75:22:D2:F7:94:5B:40:B6:A7:ED:C5:6F:25
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2D0CD6BB42D51ABD5516130968DEC0E3CF3D594C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20057.roa
Signing time:             Mon 14 Oct 2024 08:42:22 +0000
ROA not before:           Mon 14 Oct 2024 08:37:22 +0000
ROA not after:            Mon 13 Oct 2025 08:42:22 +0000
asID:                     20057
IP address blocks:        157.254.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0c:d6:bb:42:d5:1a:bd:55:16:13:09:68:de:c0:e3:cf:3d:59:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 14 08:37:22 2024 GMT
            Not After : Oct 13 08:42:22 2025 GMT
        Subject: CN=FA922790A811617522D2F7945B40B6A7EDC56F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:2e:bb:6c:42:04:23:db:67:be:62:58:bf:
                    b2:8c:91:56:ff:ce:a3:af:36:5f:d0:ed:a4:cf:57:
                    3d:d4:67:1d:80:a6:66:b1:0c:0f:23:fa:99:81:ed:
                    c8:0c:40:84:61:bd:06:87:78:43:8b:3c:26:f9:54:
                    e4:df:d5:d4:e3:1d:17:30:12:cd:b2:92:df:1c:72:
                    d4:5c:6a:42:3c:ad:00:02:cd:3b:a2:41:59:18:c9:
                    52:43:86:16:65:e2:e4:74:4b:ae:89:5b:41:e6:f5:
                    f6:4a:f5:37:ab:a9:a6:6e:9c:1f:9d:e1:a9:98:e4:
                    05:90:cd:71:0e:ba:84:12:63:41:7a:6c:04:9a:0c:
                    d4:2c:dc:48:75:63:d5:3e:eb:3b:c5:c6:3d:61:22:
                    73:7f:de:42:25:2c:16:2a:6d:2a:19:a3:4e:50:9a:
                    ba:f1:8b:30:76:48:21:fa:99:ed:2e:03:44:75:e6:
                    c4:11:11:43:ae:c2:70:7f:2f:89:36:4c:47:d9:0e:
                    df:b9:b7:38:3e:0a:d9:5c:83:67:b3:f8:33:63:12:
                    bc:e5:f4:c1:3d:87:da:8b:ce:5c:d6:aa:56:97:b7:
                    05:e3:dc:46:85:30:a7:7e:01:59:b3:d1:01:e8:c2:
                    0b:d9:d1:d9:df:a2:cf:c5:9d:0a:5d:c4:da:c9:92:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:27:90:A8:11:61:75:22:D2:F7:94:5B:40:B6:A7:ED:C5:6F:25
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:61:f3:d1:c0:38:cf:d5:af:12:06:71:5c:b1:13:11:d1:
         58:da:48:ef:bd:80:da:79:52:5b:f7:36:55:73:51:da:33:0e:
         af:71:6c:20:2c:7c:52:b8:1b:fe:5f:a9:ab:2f:13:0d:a6:17:
         59:06:e3:2e:e9:74:46:63:b0:8e:0e:2d:13:23:db:1a:78:9d:
         9f:71:ab:35:50:89:9d:2e:9e:74:9a:06:27:a3:87:f6:09:88:
         bc:2d:1f:e1:b6:69:d7:cd:9e:cc:90:d4:7a:62:b2:26:1c:4c:
         79:90:64:4c:84:58:f3:da:bf:5c:3c:5c:1c:f6:72:cc:e0:85:
         72:e7:56:d1:39:97:31:d9:40:b9:c3:8b:67:78:b5:57:e0:40:
         56:f9:16:0e:1c:d4:b0:52:40:50:5f:4e:e0:fe:9d:b2:8d:dc:
         b4:9e:1c:b5:31:ca:8b:58:e8:56:92:3a:02:33:27:f2:c0:13:
         77:b7:09:79:7f:0f:a6:03:ea:26:b3:f9:01:e3:51:b2:7f:56:
         b0:45:93:e2:7f:d2:c7:15:08:3e:51:6f:1f:88:33:10:a6:a3:
         c0:a1:c3:83:e0:73:af:a7:cb:e9:1b:53:d9:0f:52:5b:7e:d0:
         e2:f8:8e:1e:14:c0:96:75:83:f5:54:05:d0:02:cf:fd:ea:07:
         10:ff:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org