Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26141.roa
File:                     AS26141.roa (raw, json)
Hash identifier:          GZgNhC8R42AFoc457uqR0w4DblHYV07LsMa/qr8GnFo=
Subject key identifier:   D3:32:5B:7A:5F:A4:9F:20:FE:FE:4B:D9:BA:95:72:7F:F1:52:56:75
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       28252C1C3F26DDD4D6C6AE6C256342469E17BC43
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26141.roa
Signing time:             Tue 05 Nov 2024 17:18:59 +0000
ROA not before:           Tue 05 Nov 2024 17:13:59 +0000
ROA not after:            Tue 04 Nov 2025 17:18:59 +0000
asID:                     26141
IP address blocks:        157.254.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:25:2c:1c:3f:26:dd:d4:d6:c6:ae:6c:25:63:42:46:9e:17:bc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov  5 17:13:59 2024 GMT
            Not After : Nov  4 17:18:59 2025 GMT
        Subject: CN=D3325B7A5FA49F20FEFE4BD9BA95727FF1525675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:ff:29:5a:e4:e1:4c:f3:19:b2:a2:dd:0c:
                    f6:88:41:5e:17:1f:e9:f5:24:2d:60:bb:e0:9b:20:
                    32:97:20:83:1c:43:7c:d2:fb:da:0f:4c:5f:00:f8:
                    36:8a:e5:0d:bb:1f:a9:99:da:c1:23:35:ce:f9:a1:
                    16:32:21:41:8f:f5:9f:b5:74:41:12:5c:dc:36:c0:
                    94:3b:0a:24:06:58:bc:7a:4a:31:25:50:ff:e5:82:
                    5e:5d:df:d2:38:55:10:90:89:c7:0c:72:2d:e2:f8:
                    80:8d:59:44:b4:64:55:da:af:ac:b4:56:74:5b:4e:
                    6c:44:18:83:8a:cf:89:bb:1b:fc:b5:ab:e4:d0:9f:
                    5c:69:1a:51:6d:5c:39:06:d2:e7:55:58:94:42:c0:
                    75:f1:56:1d:62:2b:32:cd:d0:ea:7f:b2:97:b6:95:
                    18:c1:ac:ca:fe:7a:b8:ea:09:49:0f:6f:59:65:47:
                    f7:5b:c9:4b:d0:e5:5d:80:73:84:e6:7c:40:fb:ff:
                    42:a8:8d:6d:c4:26:c9:c0:24:75:c6:81:79:eb:1d:
                    34:95:99:b1:41:96:84:20:8d:e1:76:89:01:0e:62:
                    49:5a:83:34:49:8c:ef:f6:5b:8a:bf:af:c0:95:6b:
                    62:8b:af:c4:1e:be:98:fa:b6:c4:22:70:10:c3:01:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:32:5B:7A:5F:A4:9F:20:FE:FE:4B:D9:BA:95:72:7F:F1:52:56:75
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26141.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:cd:a9:91:c7:06:5a:81:74:f6:55:61:d6:27:60:9b:0a:c3:
         6f:be:7d:ff:32:d1:c7:5f:7d:41:01:90:dd:ec:9f:29:1e:a2:
         15:46:41:29:d7:16:d8:1c:f3:99:f9:e5:4f:a0:62:56:a6:37:
         76:39:99:19:e0:6f:88:f5:4b:fd:a4:bd:87:cc:87:c9:6e:09:
         8a:5b:a5:a0:43:d9:53:25:c6:37:b5:fc:38:7a:d1:5e:30:d5:
         47:14:b6:b3:da:40:df:80:1b:a3:80:a3:38:e2:0b:52:5e:ee:
         02:8b:d9:3e:5e:94:9a:cb:46:e8:06:36:c6:d0:27:bc:34:c6:
         f0:26:3a:00:1a:cc:1a:9e:eb:a9:00:6b:46:57:43:9a:9b:51:
         76:84:61:1f:14:37:38:29:af:e5:ab:a3:97:6d:75:38:3b:3a:
         04:dc:80:a5:20:bf:92:ea:d9:d8:f8:53:47:6c:45:e1:39:d6:
         b5:2b:e0:c1:af:53:76:71:b8:4d:f8:23:3e:89:4f:5d:d6:70:
         79:b0:62:ab:af:9f:17:73:aa:c3:6e:f3:81:7c:e8:ef:e2:4f:
         ca:5f:c0:41:0f:fd:59:38:dc:14:e4:51:eb:e5:75:fd:48:7e:
         51:ee:98:af:a3:e3:49:0a:14:1f:27:2a:fe:48:cc:0d:25:4b:
         93:5c:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org