Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396998.roa
File:                     AS396998.roa (raw, json)
Hash identifier:          VYAOEWV0dkOI9IDGrRFyH1SwOmki7WXoZixPQi5YPT0=
Subject key identifier:   7E:69:1B:03:75:40:BD:22:25:37:07:24:23:49:AB:FA:F2:3F:B8:72
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       57F93262977BC2F15F838A2760ADF810708071DC
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396998.roa
Signing time:             Thu 31 Aug 2023 07:52:06 +0000
ROA not before:           Thu 31 Aug 2023 07:47:06 +0000
ROA not after:            Thu 29 Aug 2024 07:52:06 +0000
asID:                     396998
IP address blocks:        157.254.166.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f9:32:62:97:7b:c2:f1:5f:83:8a:27:60:ad:f8:10:70:80:71:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:06 2023 GMT
            Not After : Aug 29 07:52:06 2024 GMT
        Subject: CN=7E691B037540BD22253707242349ABFAF23FB872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:41:d3:57:78:34:18:b6:20:12:fb:ee:7d:
                    15:31:56:5f:78:65:70:86:b5:15:1b:14:a3:e2:f9:
                    b0:46:b1:43:5c:47:73:d5:dd:8b:b5:84:3a:ae:59:
                    d7:9d:a9:31:74:f1:96:c1:57:a9:83:44:3e:75:53:
                    57:a9:71:0d:1b:ce:10:32:f4:b5:b8:0b:7b:82:5f:
                    c5:d8:7f:99:2d:ce:01:7b:4b:a5:d7:aa:26:a9:10:
                    05:fb:4e:12:15:04:94:b3:a5:af:47:11:3d:21:ea:
                    90:26:75:27:c7:f3:8c:a2:49:97:fc:ea:70:bc:11:
                    59:fe:08:fc:23:cd:22:9e:30:5f:a6:2d:29:3e:14:
                    67:03:46:89:14:05:5e:bf:af:a5:8a:6e:90:c6:fb:
                    6b:5a:43:23:d5:5a:30:65:a2:0f:0e:6c:c7:ac:98:
                    f1:c6:1d:9c:9e:21:27:57:6c:24:64:75:68:01:9e:
                    b1:10:9b:6f:98:83:68:29:18:f7:f1:e0:34:82:28:
                    89:63:1a:94:1b:fa:69:ca:b7:6f:dd:17:98:3e:f3:
                    f0:18:c4:93:cf:b9:f0:da:0a:57:89:1d:50:85:4b:
                    9d:b4:b3:0c:44:84:6f:3a:78:a2:e8:7c:8c:24:b1:
                    c3:49:4c:7d:7c:b8:1b:9b:72:ce:55:14:fa:ff:77:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:1B:03:75:40:BD:22:25:37:07:24:23:49:AB:FA:F2:3F:B8:72
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:8c:b1:c7:3e:91:be:11:da:e2:59:c4:ba:7e:69:4b:5c:
         11:e7:5f:f4:58:4b:69:57:19:03:5b:9f:d9:3e:37:dd:13:6e:
         bf:7c:c2:5d:ae:94:a5:51:82:a4:2e:55:c2:56:89:2e:ea:51:
         42:df:22:c9:cb:40:91:a9:0c:6a:27:8f:a5:35:33:2e:ec:01:
         3d:16:6f:a3:74:ad:3e:41:bd:2d:94:38:0c:24:7e:99:95:94:
         a7:23:94:07:96:d3:1d:cd:27:3a:6c:68:63:8c:8c:e1:2f:40:
         17:12:e9:d0:5a:f4:23:6e:55:54:92:4b:5c:75:19:c4:1f:ed:
         51:cc:74:0a:2a:cd:92:39:5f:31:2d:ca:cf:49:e0:8a:3d:50:
         fc:47:e9:24:fd:b3:8a:c0:47:96:6c:bf:f4:d8:a8:8d:03:89:
         f4:a0:a0:32:c0:c2:9f:7e:ea:8e:b7:63:cb:0e:bd:d6:df:a1:
         9e:11:24:87:65:91:f4:61:fe:92:1a:ae:0b:ad:bc:50:64:c3:
         2c:9a:5b:98:50:ee:84:c9:f8:e3:24:aa:05:f4:21:c7:86:3a:
         59:21:a9:bd:88:12:47:fe:6a:be:34:a7:9a:70:e3:17:70:3b:
         04:85:a1:e3:3c:d6:61:01:58:81:3a:cd:69:3d:54:26:06:d0:
         87:ed:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org