Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          zE4rknhzKLJw1p2F9qN2UZpkaHG89j6SoQOqZMaGTb8=
Subject key identifier:   7D:28:E5:80:D5:49:6C:D6:B5:04:44:75:8B:70:C8:CE:FB:09:B4:F0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       70AAAD5E3820294FFB90298F6C04303387820DE0
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
Signing time:             Thu 01 Aug 2024 08:48:59 +0000
ROA not before:           Thu 01 Aug 2024 08:43:59 +0000
ROA not after:            Thu 31 Jul 2025 08:48:59 +0000
asID:                     396356
IP address blocks:        157.254.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 00:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:aa:ad:5e:38:20:29:4f:fb:90:29:8f:6c:04:30:33:87:82:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  1 08:43:59 2024 GMT
            Not After : Jul 31 08:48:59 2025 GMT
        Subject: CN=7D28E580D5496CD6B50444758B70C8CEFB09B4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:43:2d:f3:3e:9f:34:3e:0c:ca:3d:91:28:4c:
                    cc:53:af:f1:4f:82:2e:10:dd:2b:ea:a7:65:05:64:
                    a6:67:3b:a7:83:8b:09:0e:27:ca:98:28:a0:88:7d:
                    0f:e3:80:a4:d0:bc:84:55:f1:2d:a1:6e:09:dc:bb:
                    8d:23:47:67:30:8a:00:49:df:8a:8e:7b:d9:62:bd:
                    bc:af:b6:a6:5e:14:c8:f9:cd:7e:e9:87:45:91:a2:
                    1c:9a:93:5f:fb:54:af:d9:2c:31:e3:07:ae:84:52:
                    5d:3c:ed:b6:fb:2d:7f:bd:73:b5:b7:d7:27:37:db:
                    6a:be:55:b6:75:24:5a:51:c1:80:1b:43:fc:15:56:
                    0c:b0:51:25:b0:9c:5b:52:f0:10:8b:17:3b:58:7f:
                    b6:ff:2b:fc:46:71:7c:44:35:f9:61:c9:2b:26:d1:
                    db:76:df:1c:0e:33:fa:be:9b:41:66:ae:32:be:a9:
                    b0:2a:1c:0b:74:da:f6:79:9f:8c:f8:2d:4a:c4:b3:
                    3d:2c:24:a6:34:5f:ee:40:cf:a8:71:b8:84:32:e5:
                    42:6e:cf:91:41:52:ff:51:d1:c8:35:ca:85:c7:10:
                    27:13:a8:d7:8a:b3:44:c0:b8:bf:e3:b7:b0:3d:c9:
                    42:73:f9:28:fd:b5:1d:bd:a5:97:9f:ce:98:4f:a6:
                    64:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:E5:80:D5:49:6C:D6:B5:04:44:75:8B:70:C8:CE:FB:09:B4:F0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:7a:b8:fc:84:1a:d4:44:d4:82:d9:25:02:67:84:c6:92:
         06:eb:4d:88:6c:71:47:9c:72:25:e5:db:89:21:4a:fe:fa:5f:
         db:e8:e1:a3:e0:4e:65:ae:84:85:ab:87:e2:2c:1f:82:5c:12:
         56:af:13:63:06:66:77:42:e8:05:8f:06:94:4f:09:57:95:bf:
         2f:5f:76:e5:5d:f0:3e:55:9d:ee:9a:1f:ae:c2:f1:ae:21:b0:
         24:32:7a:2a:c7:68:bd:2d:40:cf:cc:e6:d9:2e:57:1b:5a:f3:
         5a:43:58:49:90:61:cc:bf:b3:ed:68:e0:65:4c:79:9f:8e:a2:
         74:a6:24:48:05:f7:bb:fb:3c:84:73:ad:e3:e0:71:63:9f:0f:
         9e:85:a9:5f:fe:43:cf:95:2c:8c:9d:00:fb:d1:2e:9e:91:33:
         c7:02:f3:70:41:b6:17:a9:23:2b:4b:1e:14:57:b4:d3:27:71:
         6c:1b:81:12:f8:44:6a:c2:1d:71:88:b8:94:7f:45:6b:4c:c3:
         39:5e:5b:63:44:48:63:14:3e:05:68:f9:33:ee:b2:64:69:a4:
         e4:f9:f7:0d:9a:a4:c4:33:d0:d3:63:1d:9b:a2:e2:a9:70:0a:
         8f:f0:b4:d7:d8:42:54:76:6f:5f:54:13:40:3a:ec:aa:39:4c:
         d4:c6:f2:84
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUcKqtXjggKU/7kCmPbAQwM4eCDeAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwODAxMDg0MzU5WhcNMjUwNzMxMDg0ODU5
WjAzMTEwLwYDVQQDEyg3RDI4RTU4MEQ1NDk2Q0Q2QjUwNDQ0NzU4QjcwQzhDRUZC
MDlCNEYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/EMt8z6fND4M
yj2RKEzMU6/xT4IuEN0r6qdlBWSmZzung4sJDifKmCigiH0P44Ck0LyEVfEtoW4J
3LuNI0dnMIoASd+KjnvZYr28r7amXhTI+c1+6YdFkaIcmpNf+1Sv2Swx4weuhFJd
PO22+y1/vXO1t9cnN9tqvlW2dSRaUcGAG0P8FVYMsFElsJxbUvAQixc7WH+2/yv8
RnF8RDX5YckrJtHbdt8cDjP6vptBZq4yvqmwKhwLdNr2eZ+M+C1KxLM9LCSmNF/u
QM+ocbiEMuVCbs+RQVL/UdHINcqFxxAnE6jXirNEwLi/47ewPclCc/ko/bUdvaWX
n86YT6ZkAQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFH0o5YDVSWzWtQREdYtwyM77
CbTwMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+rTANBgkqhkiG9w0BAQsFAAOC
AQEAOkJ6uPyEGtRE1ILZJQJnhMaSButNiGxxR5xyJeXbiSFK/vpf2+jho+BOZa6E
hauH4iwfglwSVq8TYwZmd0LoBY8GlE8JV5W/L1925V3wPlWd7pofrsLxriGwJDJ6
KsdovS1Az8zm2S5XG1rzWkNYSZBhzL+z7WjgZUx5n46idKYkSAX3u/s8hHOt4+Bx
Y58PnoWpX/5Dz5UsjJ0A+9EunpEzxwLzcEG2F6kjK0seFFe00ydxbBuBEvhEasId
cYi4lH9Fa0zDOV5bY0RIYxQ+BWj5M+6yZGmk5Pn3DZqkxDPQ02Mdm6LiqXAKj/C0
19hCVHZvX1QTQDrsqjlM1MbyhA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:15 2025 by rpki-client