Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272786.roa
File:                     AS272786.roa (raw, json)
Hash identifier:          UoJBisAOaWP/KF1kSJKt0GYvptHv8VyFNBX5E9rOgHQ=
Subject key identifier:   94:C6:40:DC:E1:BA:C7:2D:6C:21:03:1D:E1:F5:DF:4D:61:93:68:1F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       485C6805688667124DB7680BDBDA438D6B0F781D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272786.roa
Signing time:             Thu 31 Aug 2023 07:52:08 +0000
ROA not before:           Thu 31 Aug 2023 07:47:08 +0000
ROA not after:            Thu 29 Aug 2024 07:52:08 +0000
asID:                     272786
IP address blocks:        157.254.254.0/23 maxlen: 23
                          157.254.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5c:68:05:68:86:67:12:4d:b7:68:0b:db:da:43:8d:6b:0f:78:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:08 2023 GMT
            Not After : Aug 29 07:52:08 2024 GMT
        Subject: CN=94C640DCE1BAC72D6C21031DE1F5DF4D6193681F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:f6:e8:36:4c:86:4b:92:6a:07:dd:6d:a6:
                    6b:31:01:71:f8:79:27:fc:d8:01:24:e7:8b:c1:db:
                    d6:84:26:ed:f1:ad:39:e7:ad:e4:30:06:09:f0:e9:
                    62:9a:c5:c0:20:ea:43:1e:32:78:cc:8b:34:70:ad:
                    9b:ad:99:ba:49:72:10:22:2b:b9:97:c0:17:ce:47:
                    0f:6c:e3:cc:27:a9:65:61:d0:d9:9f:32:88:09:1e:
                    b7:21:c5:ad:54:b1:7d:99:38:8e:8f:f3:cb:3f:68:
                    0d:8a:1a:4e:6c:7a:8a:eb:13:59:fc:c8:36:24:b4:
                    8c:57:d6:d1:07:7b:8a:a8:82:41:38:ec:f9:cc:5c:
                    93:4e:87:26:9b:64:d5:1a:9f:4b:e7:10:3e:a8:45:
                    8f:42:89:b7:e5:d2:12:c6:7a:6c:05:9f:99:2e:27:
                    ed:73:83:24:16:f6:c1:2f:06:d8:ec:52:6c:2f:f9:
                    0c:b5:df:26:25:0e:22:53:74:3c:33:6b:50:c4:8a:
                    03:62:d0:ef:7b:e2:82:0c:44:1f:04:f9:b5:ad:7e:
                    2d:db:cf:8c:67:2d:6c:de:ca:ea:4f:a8:62:64:2c:
                    6f:e2:84:a4:a7:a2:f3:cf:94:39:af:e2:13:67:9f:
                    4f:81:32:f2:e3:3f:46:53:9c:47:08:ae:90:57:dd:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:40:DC:E1:BA:C7:2D:6C:21:03:1D:E1:F5:DF:4D:61:93:68:1F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:3a:d8:8d:c1:7c:1f:fa:2f:1c:7e:1a:d8:4c:d5:db:f3:
         2a:74:f0:ca:d5:c4:61:2c:c8:d8:63:47:00:6f:22:bc:ab:08:
         11:6e:08:09:5f:fb:e7:38:bf:8f:c3:d8:41:48:5b:34:d2:65:
         06:68:8d:84:46:e4:ba:9b:21:92:92:ec:99:8d:78:cf:57:04:
         5a:fd:50:e6:5e:0c:c6:a8:5d:e7:88:83:4a:46:36:dd:d0:51:
         ba:97:e2:73:93:3a:b7:34:fc:7b:39:d1:1e:52:40:ec:1b:4c:
         ce:20:8d:56:2f:09:52:82:27:be:21:27:1d:4f:7c:b4:62:b7:
         75:36:c7:f0:f3:84:2d:22:cc:1f:0c:7d:c5:e8:1e:f6:94:0b:
         28:9f:16:0f:e7:64:eb:05:4e:26:e8:1e:b2:d0:30:02:06:e9:
         3d:c4:66:01:89:44:74:76:db:55:b5:ae:da:5d:19:ba:af:03:
         a0:1a:62:70:0a:1b:cd:23:46:64:31:39:86:f4:a7:a5:d8:31:
         80:a5:41:2c:4e:91:f1:5a:8a:5b:cd:99:d3:2a:89:f3:7e:91:
         9a:8e:e3:cb:61:04:5b:5a:2d:29:01:b1:d7:cd:8f:5b:1e:ea:
         99:80:f6:0a:d3:1f:9d:19:8b:cb:59:e9:3d:27:f0:e4:38:b2:
         6d:19:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org