Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          THbPz+HcJowNYA87c44oUpocZnkrJzBVI5m9MGvw5cQ=
Subject key identifier:   5A:6C:56:8C:0D:2E:36:A1:BA:9A:E7:D6:6D:D3:0F:01:2B:2E:8E:8E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7F98C9C2F74C709ECB54133AD25A4D42630CFE08
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
Signing time:             Thu 31 Aug 2023 07:52:13 +0000
ROA not before:           Thu 31 Aug 2023 07:47:13 +0000
ROA not after:            Thu 29 Aug 2024 07:52:13 +0000
asID:                     396356
IP address blocks:        157.254.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:98:c9:c2:f7:4c:70:9e:cb:54:13:3a:d2:5a:4d:42:63:0c:fe:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:13 2023 GMT
            Not After : Aug 29 07:52:13 2024 GMT
        Subject: CN=5A6C568C0D2E36A1BA9AE7D66DD30F012B2E8E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:3e:8e:42:36:90:2b:42:b2:44:56:e4:f6:
                    c6:b7:e0:19:d7:35:05:8c:ca:fa:7c:32:f7:59:b0:
                    fb:96:fa:0c:0c:b0:97:b2:08:4c:5d:e8:cb:6c:a9:
                    63:fa:f6:a7:43:32:e2:55:dc:9c:29:a9:30:6c:06:
                    45:56:c4:27:ce:3e:58:ee:51:b4:9d:95:bc:0c:7b:
                    5e:3d:9a:f6:07:14:7e:99:8c:d6:ae:0e:06:06:f3:
                    13:ec:c9:69:d6:43:a7:9e:11:45:ad:d7:8f:3a:61:
                    96:26:ac:b5:8b:98:ac:00:08:1a:87:c7:51:fc:4a:
                    b1:b2:18:64:9b:7d:a3:80:c7:61:6c:03:48:33:aa:
                    19:ac:b3:78:cb:14:73:57:96:95:8a:9d:d4:4b:54:
                    8d:82:b0:64:77:a8:69:aa:55:57:55:9e:e9:0d:27:
                    0a:70:ce:12:07:88:40:b2:d1:1c:c4:25:8d:42:a0:
                    45:b1:fd:0b:c8:1b:2e:98:b2:e1:13:41:2d:6f:56:
                    20:6e:cc:97:27:86:6f:70:4a:32:1b:c1:fd:5f:27:
                    0f:63:85:02:59:f7:e8:e6:d3:32:64:2c:d6:fa:a2:
                    0e:af:4b:de:ab:03:30:95:99:ae:b0:ad:7e:5d:86:
                    f9:ee:12:69:d6:f1:01:1b:4b:ae:38:18:44:25:ba:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6C:56:8C:0D:2E:36:A1:BA:9A:E7:D6:6D:D3:0F:01:2B:2E:8E:8E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:42:76:a5:f2:d1:2f:40:00:a1:4b:0b:d2:60:89:1b:8b:4f:
         ef:d7:03:cc:f5:0b:18:41:83:a4:34:5a:8b:7a:57:4f:b1:62:
         3d:3e:15:aa:7f:7d:c2:4f:bd:1c:90:36:df:f4:37:59:4b:da:
         93:8d:18:ee:e8:0c:7d:e3:12:6d:20:fa:d2:82:15:50:04:fa:
         30:c9:fa:b5:a4:5f:55:e2:a4:1d:ca:52:7b:38:08:e8:84:66:
         a6:7b:4b:11:15:f0:6c:e3:9b:58:52:c0:0a:5b:32:69:2f:aa:
         88:6c:2f:fa:26:27:74:ca:a2:f6:43:ba:a7:45:33:66:6f:ad:
         e8:b2:4e:d6:49:0c:ca:d7:8d:e2:da:32:f7:7b:7d:a7:f1:e6:
         bf:70:1e:52:15:47:96:fb:ab:78:e4:9b:59:bc:bb:97:b1:fb:
         71:34:81:58:00:61:d4:8f:9a:8a:42:26:45:01:f6:b8:88:69:
         9b:f0:16:d3:e8:79:11:11:51:78:c7:ab:e8:b4:91:b0:98:7d:
         50:3a:43:f1:5a:4f:3f:14:2b:30:c9:7b:8d:92:be:52:81:8d:
         ef:7d:96:e7:16:cf:3c:f1:a5:d1:63:53:77:fe:08:b5:3f:e3:
         32:ed:5e:a8:c3:d9:de:4d:20:96:94:f2:7e:c2:e1:75:f6:19:
         c0:79:b3:77
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUf5jJwvdMcJ7LVBM60lpNQmMM/ggwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODMxMDc0NzEzWhcNMjQwODI5MDc1MjEz
WjAzMTEwLwYDVQQDEyg1QTZDNTY4QzBEMkUzNkExQkE5QUU3RDY2REQzMEYwMTJC
MkU4RThFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOg+jkI2kCtC
skRW5PbGt+AZ1zUFjMr6fDL3WbD7lvoMDLCXsghMXejLbKlj+vanQzLiVdycKakw
bAZFVsQnzj5Y7lG0nZW8DHtePZr2BxR+mYzWrg4GBvMT7Mlp1kOnnhFFrdePOmGW
Jqy1i5isAAgah8dR/Eqxshhkm32jgMdhbANIM6oZrLN4yxRzV5aVip3US1SNgrBk
d6hpqlVXVZ7pDScKcM4SB4hAstEcxCWNQqBFsf0LyBsumLLhE0Etb1YgbsyXJ4Zv
cEoyG8H9XycPY4UCWffo5tMyZCzW+qIOr0veqwMwlZmusK1+XYb57hJp1vEBG0uu
OBhEJbr+DwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFpsVowNLjahuprn1m3TDwEr
Lo6OMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+rTANBgkqhkiG9w0BAQsFAAOC
AQEAVkJ2pfLRL0AAoUsL0mCJG4tP79cDzPULGEGDpDRai3pXT7FiPT4Vqn99wk+9
HJA23/Q3WUvak40Y7ugMfeMSbSD60oIVUAT6MMn6taRfVeKkHcpSezgI6IRmpntL
ERXwbOObWFLAClsyaS+qiGwv+iYndMqi9kO6p0UzZm+t6LJO1kkMyteN4toy93t9
p/Hmv3AeUhVHlvureOSbWby7l7H7cTSBWABh1I+aikImRQH2uIhpm/AW0+h5ERFR
eMer6LSRsJh9UDpD8VpPPxQrMMl7jZK+UoGN732W5xbPPPGl0WNTd/4ItT/jMu1e
qMPZ3k0glpTyfsLhdfYZwHmzdw==
-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org