Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa
File:                     AS396026.roa (raw, json)
Hash identifier:          wLj5zdKExfy1Jy0q7812GaHHK5LGV9v5gpAKH+WZ4KA=
Subject key identifier:   0B:58:91:7A:EE:50:F6:F7:1D:BD:DD:AE:39:68:47:74:1E:91:AE:56
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2E6980CD9F5AFEE054DE70F95EEF0A25A1BE9640
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa
Signing time:             Mon 09 Sep 2024 20:48:59 +0000
ROA not before:           Mon 09 Sep 2024 20:43:59 +0000
ROA not after:            Mon 08 Sep 2025 20:48:59 +0000
asID:                     396026
IP address blocks:        157.254.0.0/23 maxlen: 23
                          157.254.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 21:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:69:80:cd:9f:5a:fe:e0:54:de:70:f9:5e:ef:0a:25:a1:be:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep  9 20:43:59 2024 GMT
            Not After : Sep  8 20:48:59 2025 GMT
        Subject: CN=0B58917AEE50F6F71DBDDDAE396847741E91AE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:b6:d5:33:72:86:05:3f:90:51:92:78:fe:
                    76:62:02:c3:a4:ec:3c:93:63:1c:f2:d0:34:e4:bf:
                    cf:ee:0a:a2:bb:1a:2d:2c:8b:34:24:44:b0:df:c6:
                    6c:75:20:4d:61:c9:bc:3f:7f:0a:8f:8a:f4:d4:42:
                    68:4c:a0:09:f9:d6:04:5e:1c:65:30:50:1a:22:e2:
                    d5:5c:2e:d3:04:24:e7:86:0c:9a:0a:13:2e:e0:45:
                    01:82:fc:98:19:1e:af:14:f5:cd:60:9c:45:9c:7e:
                    b5:ee:c3:e3:30:bb:fb:65:ef:b3:e2:46:dc:46:b7:
                    52:4e:12:c3:b6:ca:1b:7f:1f:d5:c8:bc:e0:b7:1b:
                    ad:e3:45:b1:ce:56:be:a4:ca:84:09:16:3d:2c:88:
                    4c:f6:03:66:95:d2:a2:08:da:93:28:b1:fa:ef:52:
                    75:43:f6:7a:16:19:fc:be:d1:e8:11:e5:aa:60:7b:
                    f5:76:b6:f8:b8:9e:a6:5f:ff:8a:d3:2e:eb:a8:4b:
                    50:57:ec:a8:62:a3:86:1e:66:af:f6:2e:e8:cc:e0:
                    68:58:83:db:39:3c:f2:f6:c5:3b:87:ea:47:d7:15:
                    47:13:28:70:c0:5a:34:20:4c:94:d3:b2:bc:1c:11:
                    db:95:c4:a0:6c:28:19:af:e0:3f:68:58:14:3d:a4:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:58:91:7A:EE:50:F6:F7:1D:BD:DD:AE:39:68:47:74:1E:91:AE:56
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/23
                  157.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:e1:31:73:9b:5b:7a:d5:46:b2:d1:ad:c9:e3:6c:40:c8:fc:
         9f:2c:50:8d:91:b2:b3:14:8c:8f:c7:b7:d1:54:1c:84:55:f8:
         5d:cd:d3:14:0f:76:99:3a:bc:9a:4e:70:c5:45:1d:2c:de:f6:
         d2:66:09:4b:a5:8f:1e:2e:d3:a9:d1:e6:02:bd:be:f4:ba:33:
         55:d6:37:63:62:f6:68:34:f1:0e:3c:b9:de:6d:14:53:ba:3a:
         28:9b:62:ce:07:55:17:ae:bd:fa:bf:0a:49:0a:5b:68:59:33:
         5f:08:90:52:40:40:b1:90:24:2c:83:dc:87:69:8e:ad:bc:f2:
         f3:66:e5:8f:47:82:49:99:b9:38:51:ad:2f:f7:17:17:27:c8:
         6f:51:df:b3:b9:13:07:15:66:cc:56:2c:75:76:35:73:b9:70:
         93:d9:62:af:7e:4d:99:4f:f6:19:20:49:1d:e8:30:9e:c2:a5:
         ef:f8:6b:1b:8a:13:49:6e:e4:1e:c2:23:5b:65:25:7d:90:67:
         01:dc:fe:f7:fe:ed:1e:7f:cc:ad:8a:8d:18:ec:79:a1:69:d9:
         11:79:07:d6:0a:8b:ed:ab:cd:82:da:b0:47:ef:98:f9:d7:03:
         63:82:a2:80:53:67:93:9c:51:4b:21:18:70:07:66:10:15:df:
         0e:65:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 21:47:40 2024 by rpki-client on console-fra.rpki-client.org