Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa
File:                     AS396026.roa (raw, json)
Hash identifier:          1NXnmnKhFibDbMlwzpyYvf0q3w0IOoWdci8nTkBlYa4=
Subject key identifier:   BE:A6:6B:0E:D8:C3:FC:52:6B:A5:AD:7B:2B:B5:4E:97:A7:BE:13:59
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5B1E6E249FC710E36071E9CDB69D46F6A849DE41
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa
Signing time:             Mon 09 Oct 2023 20:02:13 +0000
ROA not before:           Mon 09 Oct 2023 19:57:13 +0000
ROA not after:            Mon 07 Oct 2024 20:02:13 +0000
asID:                     396026
IP address blocks:        157.254.0.0/23 maxlen: 23
                          157.254.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1e:6e:24:9f:c7:10:e3:60:71:e9:cd:b6:9d:46:f6:a8:49:de:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct  9 19:57:13 2023 GMT
            Not After : Oct  7 20:02:13 2024 GMT
        Subject: CN=BEA66B0ED8C3FC526BA5AD7B2BB54E97A7BE1359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:51:d4:1a:24:ca:66:1d:a7:d5:85:3f:c8:
                    5b:60:ec:15:7b:03:3d:9d:2c:a4:b7:20:47:0a:06:
                    b9:33:9c:9f:92:57:6f:aa:90:a7:33:5e:2b:44:34:
                    fd:23:19:35:53:21:ba:f3:4d:71:0e:b3:f8:6c:a1:
                    ba:66:1d:28:ad:e2:41:6a:53:c7:46:af:4e:95:f3:
                    57:3a:d1:e1:fc:62:27:b0:6a:ec:07:a4:49:65:fe:
                    33:bb:18:c2:29:98:fe:1c:31:94:78:c3:a5:e8:9e:
                    85:9e:bd:c4:fd:6a:32:1f:3d:eb:58:52:ff:39:04:
                    13:9d:2a:d5:cb:61:53:db:be:36:01:65:a6:83:3d:
                    8a:f1:10:79:4e:80:2a:3d:66:5f:c5:87:0d:3e:d3:
                    90:29:db:b6:88:44:29:5f:f9:df:59:9e:54:26:6a:
                    1d:08:3c:d3:25:c0:b1:a8:6a:31:8a:0a:00:ee:0b:
                    68:26:6a:3b:8b:a8:4b:82:32:4f:0c:9c:d4:29:04:
                    60:d0:27:0e:11:23:9b:e9:47:8e:91:68:4f:46:45:
                    9f:0f:2a:b2:91:60:ad:f9:2e:56:e5:d9:23:bb:95:
                    73:ac:0a:96:b3:68:08:00:08:13:3a:b8:e9:cb:3c:
                    6e:b4:74:ed:96:b0:45:6d:27:a0:73:00:4b:41:01:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A6:6B:0E:D8:C3:FC:52:6B:A5:AD:7B:2B:B5:4E:97:A7:BE:13:59
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/23
                  157.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:28:4a:be:10:71:3a:4a:85:07:ae:77:25:4e:71:62:f0:ed:
         c7:9a:76:ab:5f:31:d7:82:3b:27:df:f2:45:4a:29:f1:42:5a:
         87:8e:fb:aa:00:55:f3:19:b4:a5:85:0c:1a:7c:32:01:20:69:
         17:c1:06:16:78:13:61:eb:1a:1a:d7:a7:06:5c:8c:d7:4c:70:
         52:61:3d:0e:8d:a1:d0:da:eb:a2:2b:c0:10:df:e0:81:03:c6:
         4c:c4:e2:18:f4:98:7b:6d:9e:42:8e:cc:ed:a9:49:13:77:f3:
         14:81:67:c5:8a:ad:88:bd:5f:c3:9c:16:75:68:44:89:5a:e2:
         9d:12:92:7f:79:5a:e8:bb:71:08:9c:53:b4:30:8f:70:ed:6b:
         f9:2f:38:02:03:f4:b7:86:21:9b:ba:14:1f:4c:c7:3d:f0:ae:
         0e:57:e2:1b:05:78:d0:d3:bc:80:35:56:07:90:90:c7:6b:4b:
         9f:3f:49:d6:d7:96:8b:81:4b:a1:f2:0a:45:ac:d7:25:c5:d0:
         73:de:a0:dc:9e:2a:53:49:ec:27:90:eb:a7:20:ba:2e:a9:15:
         0c:a6:37:65:ba:5f:a4:80:5c:e4:f9:5a:2d:9c:85:8e:d1:b9:
         47:51:c5:13:72:f0:ea:9e:1e:2d:90:92:f3:19:93:21:3b:95:
         7f:4d:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org