Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215287.roa
File:                     AS215287.roa (raw, json)
Hash identifier:          IEkBKnNSEho3A50bZsTe7DP43xHsYhXhc2RLLUCNGSg=
Subject key identifier:   CD:08:DC:73:69:D3:FA:E0:09:77:F1:08:DF:3B:06:27:C9:A6:BD:8B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7EDE94E8F1054E11F3070DE5F28FFA3B6D2045D3
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215287.roa
Signing time:             Sun 17 Nov 2024 19:59:24 +0000
ROA not before:           Sun 17 Nov 2024 19:54:24 +0000
ROA not after:            Sun 16 Nov 2025 19:59:24 +0000
asID:                     215287
IP address blocks:        157.254.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 06:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:de:94:e8:f1:05:4e:11:f3:07:0d:e5:f2:8f:fa:3b:6d:20:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 17 19:54:24 2024 GMT
            Not After : Nov 16 19:59:24 2025 GMT
        Subject: CN=CD08DC7369D3FAE00977F108DF3B0627C9A6BD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:e6:76:0a:41:3d:24:c5:f3:49:0e:4f:90:
                    90:cd:2a:62:73:0e:e9:e3:a0:75:28:87:72:79:65:
                    80:b9:17:f9:9a:59:e0:47:41:df:20:df:e7:2c:08:
                    48:5e:d5:53:cd:57:41:d9:b2:f6:88:d9:58:54:74:
                    70:59:15:26:97:65:a6:6c:1e:c8:d7:74:af:28:98:
                    c2:c3:2c:21:fe:40:1d:47:32:de:31:52:8c:a4:72:
                    1b:93:b5:01:dd:d8:64:9f:34:16:42:1c:84:a1:94:
                    b7:c0:a7:8d:a4:b3:61:ad:b1:cb:ef:ce:65:58:3c:
                    e7:ef:1e:3e:95:10:ed:8b:e4:4d:61:6d:d0:fc:3a:
                    d4:54:3f:5c:79:01:59:71:55:1b:a9:5b:0d:fc:c6:
                    36:c8:58:42:93:61:13:63:a1:96:22:3d:61:0b:55:
                    17:b4:8b:bf:95:29:47:aa:a3:e8:d6:f1:9a:ec:42:
                    be:f4:46:1b:b1:82:81:33:25:dd:a6:28:f8:2a:24:
                    e8:f8:17:13:74:5c:6d:ba:78:f6:ca:8c:8c:34:3e:
                    ab:e6:6d:e1:5d:d6:be:9d:f3:fb:17:51:f1:eb:ce:
                    5b:4b:4b:66:71:18:7d:07:71:7a:47:54:a9:b5:0b:
                    dd:0a:1d:db:8c:36:08:1a:f7:1b:77:ea:a9:e1:5d:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:08:DC:73:69:D3:FA:E0:09:77:F1:08:DF:3B:06:27:C9:A6:BD:8B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:4b:61:81:64:e3:3e:0f:9f:b3:18:f4:fd:89:3f:2b:05:
         00:0f:4c:76:4c:3a:57:ef:30:62:3b:77:54:f1:98:6e:11:82:
         37:3c:92:61:85:45:56:06:4e:17:99:17:77:c8:d8:1b:0a:0b:
         b2:2c:23:87:e5:5c:1f:95:9c:8e:11:07:42:43:ed:f6:a5:91:
         3d:3e:e3:a2:3c:3a:16:32:37:9b:46:14:2b:be:d8:e6:f6:6a:
         96:6b:11:b2:04:b4:de:aa:dd:77:39:e0:f1:90:0b:aa:29:eb:
         39:a3:fd:aa:55:be:af:af:6a:3f:94:77:f1:e5:64:56:27:9e:
         c9:e0:23:59:cb:7a:9c:66:c0:ed:d8:52:89:a6:05:14:3d:87:
         5d:f4:1d:30:78:ee:97:1b:ad:bd:a7:a1:65:74:5a:57:55:8c:
         08:73:97:5e:da:67:ff:75:de:77:7b:d0:c7:ba:35:8d:f7:cf:
         76:ac:12:9c:9a:74:c2:fc:cb:68:69:fe:57:61:ee:30:2a:56:
         a8:0a:15:3f:cf:6c:1d:bc:97:34:aa:f1:14:74:c2:59:53:1a:
         cd:df:a7:4e:26:bf:c8:3a:0b:c7:a6:42:60:76:3d:e8:11:e2:
         6e:32:3f:08:9c:c2:f0:cd:e2:0a:8e:35:8c:6c:7e:21:c8:e2:
         9c:31:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:01 2024 by rpki-client on console-ams.rpki-client.org