Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS271935.roa
File:                     AS271935.roa (raw, json)
Hash identifier:          4qMuPPoFhLcTuA6GauA8lNCt2m0gdUjVTp66yw02ZCc=
Subject key identifier:   60:02:D5:C1:4E:AD:EB:CC:F1:7D:8C:F4:FD:9E:BA:82:21:22:D0:2F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6CDF4E635E993EB4902C7A4E39811A432B80D429
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS271935.roa
Signing time:             Mon 16 Oct 2023 01:34:12 +0000
ROA not before:           Mon 16 Oct 2023 01:29:12 +0000
ROA not after:            Mon 14 Oct 2024 01:34:12 +0000
asID:                     271935
IP address blocks:        157.254.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:df:4e:63:5e:99:3e:b4:90:2c:7a:4e:39:81:1a:43:2b:80:d4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 16 01:29:12 2023 GMT
            Not After : Oct 14 01:34:12 2024 GMT
        Subject: CN=6002D5C14EADEBCCF17D8CF4FD9EBA822122D02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:3f:39:f0:07:5a:06:e3:58:2c:bc:6f:b6:
                    44:cd:1c:44:1e:c7:8a:84:7a:a3:71:c5:0a:37:73:
                    15:8d:57:a8:fc:c5:77:47:fb:7c:45:db:36:78:96:
                    34:9a:84:f5:f2:fd:4a:73:86:f5:44:c8:61:48:15:
                    13:51:28:f0:fa:9d:d3:2a:6c:92:71:af:63:b6:93:
                    95:9d:2e:7f:4a:79:7c:78:fe:4f:0c:f7:93:bb:fa:
                    a3:fe:b3:6a:83:19:b9:a5:33:49:7e:6a:bf:80:69:
                    d2:f7:90:d4:15:6c:e7:6e:90:a3:6a:6f:05:bd:0a:
                    28:bb:0a:33:45:85:45:47:b4:1f:d2:d1:68:f9:1f:
                    50:01:70:62:b0:e0:12:a0:de:c3:80:42:e7:d3:a3:
                    1a:79:db:dc:92:39:6a:2a:39:65:81:a5:ad:7f:88:
                    36:7e:47:a5:12:f8:32:6d:77:eb:64:e6:76:4e:a9:
                    11:8c:5c:25:50:18:db:bb:af:37:65:46:11:eb:8e:
                    00:13:f8:a4:35:43:98:cb:01:ce:1b:73:5a:b7:2e:
                    45:a4:36:12:c4:d9:93:7b:77:ec:00:6f:38:40:b7:
                    15:92:a3:21:07:33:bc:7d:9e:66:f7:5d:14:21:8d:
                    c2:d2:30:5f:28:96:fa:ee:5a:5d:7e:c1:05:e9:01:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:02:D5:C1:4E:AD:EB:CC:F1:7D:8C:F4:FD:9E:BA:82:21:22:D0:2F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS271935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:5a:58:75:f2:9e:c6:11:ee:2a:e8:3b:5a:a8:01:7c:ee:
         0d:19:e3:05:d8:39:1f:8b:9b:2d:cc:4f:e3:c6:f6:0e:55:97:
         3c:33:74:08:44:07:e4:5d:00:17:67:77:bd:7f:ce:4f:40:c6:
         b5:b1:4e:04:86:ac:ea:2e:9f:5c:14:4d:2a:34:0d:c6:b3:bc:
         76:2a:72:51:f7:2d:39:e5:e4:50:06:86:5c:bd:a0:12:5d:16:
         e9:9f:82:69:5f:da:a8:3f:32:8b:1e:1b:0f:84:71:e9:02:6f:
         66:79:2f:69:97:2a:f8:db:1a:5d:43:54:04:26:3f:f6:d1:db:
         ee:d3:e6:4e:4f:27:c6:cf:27:4b:dc:b5:67:3f:0e:47:a8:5f:
         bf:1e:8c:6e:3f:ed:ba:2b:2a:1a:30:5c:01:c8:2b:cc:f7:0b:
         3e:2f:8a:69:27:75:d1:b4:e8:d4:77:82:33:c9:8d:fb:f4:94:
         ce:c9:ee:b1:cc:ff:cc:3a:30:21:02:f6:3e:bf:5c:c6:7d:49:
         68:b8:c6:ab:81:8c:d2:6f:5a:f7:c8:0d:5a:00:85:6b:67:22:
         d0:44:bc:cb:8d:7f:00:4f:9e:6a:33:e1:de:ad:99:7c:90:36:
         7d:89:74:61:87:a4:ba:c6:fd:a9:a5:0d:e3:1e:26:e2:97:b2:
         39:5a:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org