Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa
File:                     AS202662.roa (raw, json)
Hash identifier:          XV+9Bgb0MqLTgCTIPpGCn8tf1aEdRP5HsWfzx/9vXsM=
Subject key identifier:   ED:55:55:B3:F3:50:8F:67:3A:99:6B:FE:0A:B6:A4:C6:02:C0:6E:E8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0AB80B81A20DBBFE2E3FB81ECE0A6BCE53012A9E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa
Signing time:             Sat 20 Jan 2024 10:07:52 +0000
ROA not before:           Sat 20 Jan 2024 10:02:52 +0000
ROA not after:            Sat 18 Jan 2025 10:07:52 +0000
asID:                     202662
IP address blocks:        157.254.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b8:0b:81:a2:0d:bb:fe:2e:3f:b8:1e:ce:0a:6b:ce:53:01:2a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 20 10:02:52 2024 GMT
            Not After : Jan 18 10:07:52 2025 GMT
        Subject: CN=ED5555B3F3508F673A996BFE0AB6A4C602C06EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:ca:f4:77:e7:06:f5:7d:4c:c6:18:6b:c3:
                    a8:61:7b:d8:a8:64:e6:ea:05:3d:a8:e6:13:c1:71:
                    0c:ea:05:8f:24:a6:7c:e9:7c:00:ac:16:67:83:fb:
                    7b:cc:8d:02:c1:7a:19:76:4f:2a:58:cb:05:30:46:
                    e6:6e:f4:8a:f1:0a:e4:cb:6a:6c:aa:d6:57:47:6a:
                    82:80:1b:6c:b3:5f:f4:ee:75:3c:2f:33:04:01:b0:
                    b5:81:f5:77:c8:dd:8a:5e:57:5f:7d:43:0b:8c:c5:
                    30:9e:12:8f:49:b1:c0:18:25:27:b9:fc:44:cd:8c:
                    31:93:2b:24:d9:77:92:0b:3b:86:60:f9:a2:db:ba:
                    e2:c7:14:4d:41:7d:73:c2:d0:54:da:b1:8c:6b:d8:
                    38:d3:e8:8d:27:d1:aa:37:ff:74:22:6f:65:3a:fe:
                    a9:0e:4e:9d:21:bc:e9:40:b6:a3:1e:2f:fe:31:dc:
                    7f:9c:8f:c5:7f:c5:22:42:10:16:10:91:e2:39:74:
                    e2:34:31:9b:04:52:2b:56:4c:ed:7a:ee:4e:9b:e4:
                    b5:b2:91:18:ea:f6:8a:10:ae:5d:83:86:5c:46:ae:
                    3f:fe:be:21:75:5f:74:96:8f:77:bf:47:ae:9e:93:
                    1d:c9:51:16:ae:77:3e:38:f8:8c:5e:98:e7:42:37:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:55:55:B3:F3:50:8F:67:3A:99:6B:FE:0A:B6:A4:C6:02:C0:6E:E8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:10:00:d9:99:54:0d:11:89:b8:8c:d4:1d:06:21:5c:9d:86:
         d5:74:f3:89:ce:58:2d:84:63:65:08:4e:de:d6:25:43:fb:6a:
         4b:9a:5e:fa:56:c2:bb:b4:7b:29:c4:f2:2a:5a:d5:1c:da:03:
         dd:48:cb:9c:89:f9:23:56:fc:3f:46:9b:de:95:82:e5:f1:2f:
         a8:ba:5e:b2:35:95:f2:a4:ca:e7:47:29:76:ab:37:83:f2:37:
         9e:f6:b4:45:d8:f9:e9:13:c8:e3:6b:d5:0f:d1:6e:44:28:f1:
         73:97:b2:d9:d3:cc:df:e8:2e:47:be:b8:9f:21:ee:9f:65:21:
         56:e3:ad:54:a3:4f:2b:1f:53:45:e4:e9:c4:49:54:14:e0:ab:
         c9:bf:44:35:82:f7:11:ef:8d:e7:a4:21:33:f9:96:d0:38:91:
         d2:3e:0e:67:d7:e9:f6:c1:57:23:8f:f5:57:8f:fd:9a:68:34:
         79:6d:b5:59:53:19:71:5e:c8:80:e1:5b:24:3d:ee:99:4f:79:
         cd:e1:99:f1:6d:37:19:1d:29:8f:83:1f:46:d8:77:6b:80:f8:
         be:87:37:fc:18:66:ab:29:cc:7d:0a:ed:31:6e:25:7c:f4:7c:
         b7:48:2a:c3:2b:20:cc:94:0b:72:41:6b:4d:f7:3d:1c:d6:f9:
         d0:ac:37:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org