Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272082.roa
File:                     AS272082.roa (raw, json)
Hash identifier:          VKLxMP0zFb0KjPHUUMPmCqlmiiaTv13jw2EZCVY8Dz0=
Subject key identifier:   F3:B7:1C:02:2C:0A:24:A6:C1:2F:14:9E:D5:87:53:9A:AC:75:7C:47
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1D2C26B81D4720A21D4C20961D970113578E7C54
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272082.roa
Signing time:             Fri 01 Nov 2024 00:00:05 +0000
ROA not before:           Thu 31 Oct 2024 23:55:05 +0000
ROA not after:            Fri 31 Oct 2025 00:00:05 +0000
asID:                     272082
IP address blocks:        157.254.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2c:26:b8:1d:47:20:a2:1d:4c:20:96:1d:97:01:13:57:8e:7c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 31 23:55:05 2024 GMT
            Not After : Oct 31 00:00:05 2025 GMT
        Subject: CN=F3B71C022C0A24A6C12F149ED587539AAC757C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:12:7a:ba:5a:cf:05:44:9e:95:a7:b5:91:10:
                    f4:d3:85:36:5e:94:50:4e:ca:f7:0c:7f:17:18:95:
                    b4:12:d0:4f:d2:bf:f4:ef:02:21:80:c0:d3:ac:6a:
                    80:b9:fc:69:5b:d3:44:a9:3d:4d:af:30:d0:7b:ae:
                    48:65:0f:2a:1a:10:e8:2a:11:36:74:26:31:ab:d5:
                    57:59:c2:b8:0e:31:ae:ec:af:98:2b:04:33:34:d3:
                    6e:88:cd:8c:26:32:01:1f:48:54:ff:9b:ce:b8:92:
                    7c:cb:b1:88:39:ff:57:2f:f6:3c:28:d9:1e:fe:cc:
                    1c:01:ac:e9:6e:4a:71:ce:8d:c6:e8:16:99:58:f8:
                    c5:52:10:27:6c:0d:b8:5d:39:99:98:99:ec:26:00:
                    c0:08:72:51:78:6d:c0:4e:d4:0c:a6:d4:2d:6c:59:
                    c8:40:84:ea:fd:3b:bf:4f:33:5e:77:a5:3d:e4:82:
                    c7:ea:d0:5d:75:05:86:e1:6c:af:93:9a:2b:9c:4a:
                    3a:f4:f7:a9:08:5d:d0:a5:11:e0:eb:e6:a1:ff:af:
                    24:49:db:b5:9f:2c:f4:4e:5a:77:3f:4c:62:13:bc:
                    e9:86:76:b2:4f:19:eb:01:a5:7f:23:37:e4:13:cd:
                    80:6b:20:6f:1b:96:fb:e0:ee:81:c6:c0:fb:a8:42:
                    61:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:1C:02:2C:0A:24:A6:C1:2F:14:9E:D5:87:53:9A:AC:75:7C:47
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:cf:4b:49:63:63:d0:c2:ed:b4:da:53:45:04:7b:df:f7:ee:
         46:0b:b1:19:3f:cc:e1:d1:cd:95:55:7c:ba:e3:b8:5f:7c:f8:
         2d:22:a1:bc:38:0d:20:fc:92:f9:c2:89:68:72:fa:5e:b9:df:
         e0:01:e0:d5:89:e4:4d:ce:b7:14:99:39:20:b5:be:b4:5a:5f:
         50:c9:d8:9a:2b:01:e4:6e:0a:d5:3f:c1:fe:e7:c6:77:8c:d1:
         85:f7:88:94:47:3f:77:c5:47:4a:bd:be:ce:5d:e1:39:1a:b8:
         24:77:0e:98:a9:fc:b8:cb:13:5e:09:9b:bd:ac:c8:9c:4f:d9:
         e2:60:3c:ac:cb:bf:e0:0f:aa:f6:96:c4:fd:1f:0c:14:bd:78:
         f1:a4:2c:f0:2d:3c:20:14:35:46:28:cd:a9:d6:79:18:ba:26:
         9f:86:30:0e:fe:a8:ee:7d:a4:ab:a5:bc:88:bc:9e:fd:1d:e9:
         c5:11:3a:37:21:0e:d5:f5:7b:15:b8:ef:21:ea:a0:20:73:3a:
         db:f9:39:b2:1a:1b:12:27:27:53:34:a6:e6:11:2e:47:24:84:
         e8:f2:8d:2e:63:b1:ba:59:6e:16:0b:f4:80:59:1e:00:4e:09:
         8a:4a:3b:0a:00:fa:55:b1:19:7e:f8:be:30:cc:ab:c5:3d:79:
         8c:ec:76:ee
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUHSwmuB1HIKIdTCCWHZcBE1eOfFQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMDMxMjM1NTA1WhcNMjUxMDMxMDAwMDA1
WjAzMTEwLwYDVQQDEyhGM0I3MUMwMjJDMEEyNEE2QzEyRjE0OUVENTg3NTM5QUFD
NzU3QzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hJ6ulrPBUSe
lae1kRD004U2XpRQTsr3DH8XGJW0EtBP0r/07wIhgMDTrGqAufxpW9NEqT1NrzDQ
e65IZQ8qGhDoKhE2dCYxq9VXWcK4DjGu7K+YKwQzNNNuiM2MJjIBH0hU/5vOuJJ8
y7GIOf9XL/Y8KNke/swcAazpbkpxzo3G6BaZWPjFUhAnbA24XTmZmJnsJgDACHJR
eG3ATtQMptQtbFnIQITq/Tu/TzNed6U95ILH6tBddQWG4Wyvk5ornEo69PepCF3Q
pRHg6+ah/68kSdu1nyz0Tlp3P0xiE7zphnayTxnrAaV/IzfkE82AayBvG5b74O6B
xsD7qEJh4wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPO3HAIsCiSmwS8UntWHU5qs
dXxHMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzI3MjA4Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ3+JDANBgkqhkiG9w0BAQsFAAOC
AQEAiM9LSWNj0MLttNpTRQR73/fuRguxGT/M4dHNlVV8uuO4X3z4LSKhvDgNIPyS
+cKJaHL6Xrnf4AHg1YnkTc63FJk5ILW+tFpfUMnYmisB5G4K1T/B/ufGd4zRhfeI
lEc/d8VHSr2+zl3hORq4JHcOmKn8uMsTXgmbvazInE/Z4mA8rMu/4A+q9pbE/R8M
FL148aQs8C08IBQ1RijNqdZ5GLomn4YwDv6o7n2kq6W8iLye/R3pxRE6NyEO1fV7
FbjvIeqgIHM62/k5shobEicnUzSm5hEuRySE6PKNLmOxulluFgv0gFkeAE4Jiko7
CgD6VbEZfvi+MMyrxT15jOx27g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org