Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397113.roa
File:                     AS397113.roa (raw, json)
Hash identifier:          BwRdPSgXE26B81SZC0+KqZINB96wFMunB4WDX+N9CLU=
Subject key identifier:   5E:C2:BF:AA:9E:4C:B6:A8:83:CC:EB:48:07:90:2E:F6:D5:DE:6A:F4
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7DCBB75EE3FF05606949F922A7885C84882BE1C7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397113.roa
Signing time:             Thu 11 Apr 2024 01:22:05 +0000
ROA not before:           Thu 11 Apr 2024 01:17:05 +0000
ROA not after:            Thu 10 Apr 2025 01:22:05 +0000
asID:                     397113
IP address blocks:        157.254.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cb:b7:5e:e3:ff:05:60:69:49:f9:22:a7:88:5c:84:88:2b:e1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 11 01:17:05 2024 GMT
            Not After : Apr 10 01:22:05 2025 GMT
        Subject: CN=5EC2BFAA9E4CB6A883CCEB4807902EF6D5DE6AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:e4:7c:9c:6f:ad:79:2e:23:46:4d:64:0c:
                    2c:90:93:b9:a0:1b:46:39:5d:bb:cf:14:fd:1c:44:
                    02:8b:ba:45:17:b9:f6:ac:ba:5e:00:98:f6:ce:fc:
                    32:4c:11:e9:a4:46:a1:e1:4b:f7:35:cf:c2:8c:5a:
                    0c:94:90:ca:15:b5:98:8a:63:47:1f:ce:ff:5d:dd:
                    33:ad:0e:7a:0c:84:95:a6:b1:b4:ce:9a:fa:94:fe:
                    b8:40:84:f2:f7:31:f8:73:69:3d:87:bb:a7:1a:8f:
                    9a:95:53:77:25:f0:c0:98:6c:df:a2:72:75:e7:19:
                    25:2a:f1:cb:82:e1:95:80:d8:61:df:32:9a:de:6a:
                    c6:a0:74:36:d2:80:65:cc:6c:19:07:74:11:9b:82:
                    4b:87:32:5c:b8:10:16:54:42:0a:cf:be:59:fd:9e:
                    1e:e3:b9:57:06:bc:ed:b2:16:ee:43:18:dc:6b:26:
                    92:e1:52:98:8c:89:2b:d1:a8:e7:aa:20:44:bc:b8:
                    10:59:89:48:c8:f4:55:4f:90:50:99:c3:b1:c6:a8:
                    0b:04:eb:9c:da:0b:80:40:6c:05:9b:ba:89:44:e0:
                    56:ab:32:56:dc:89:96:62:90:5a:01:c8:e8:6b:c6:
                    3a:91:ba:23:93:8e:ed:16:e1:bc:e2:0a:79:99:b2:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C2:BF:AA:9E:4C:B6:A8:83:CC:EB:48:07:90:2E:F6:D5:DE:6A:F4
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:29:35:fe:4a:32:93:6d:2e:c6:57:47:4b:e1:2f:c4:34:ba:
         55:6e:cd:a2:95:96:33:2d:f6:70:c8:6a:1a:1d:13:d8:e7:a6:
         08:f8:4b:9d:7c:9c:bb:4e:37:3b:52:e8:ce:eb:bf:8a:f7:b7:
         9a:f1:5d:86:22:fb:a9:31:23:4c:6e:3c:1d:64:14:db:7c:15:
         b5:04:9c:46:53:45:80:59:4e:e8:8a:b2:9a:4b:21:98:ff:2e:
         87:f8:da:14:76:69:3a:a4:c9:c3:9c:74:a8:1b:29:de:32:5a:
         6e:6a:73:07:76:6e:60:21:46:c7:f1:d3:d5:97:17:7f:0f:13:
         54:ee:13:98:38:34:af:ce:d9:9f:e3:89:78:67:0d:02:6d:ba:
         9c:d4:c9:5f:0a:2b:9e:08:2d:d0:7e:48:cd:63:4a:fe:a2:4d:
         6a:97:58:a8:3b:4c:11:9d:c6:1c:75:74:3d:d5:36:e2:ce:09:
         41:de:70:73:2b:a3:13:42:8f:c0:f9:4f:22:a5:56:70:8d:e8:
         56:38:48:57:a7:70:9d:db:b3:83:3b:45:8f:84:05:4a:c2:e4:
         3c:01:97:9a:7d:b6:e6:d9:36:66:22:e2:9c:69:80:45:41:95:
         b4:48:8a:e4:f1:09:56:8c:1c:66:79:40:2e:5c:f3:31:45:97:
         d9:d6:0b:22
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUfcu3XuP/BWBpSfkip4hchIgr4ccwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNDExMDExNzA1WhcNMjUwNDEwMDEyMjA1
WjAzMTEwLwYDVQQDEyg1RUMyQkZBQTlFNENCNkE4ODNDQ0VCNDgwNzkwMkVGNkQ1
REU2QUY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiPkfJxvrXku
I0ZNZAwskJO5oBtGOV27zxT9HEQCi7pFF7n2rLpeAJj2zvwyTBHppEah4Uv3Nc/C
jFoMlJDKFbWYimNHH87/Xd0zrQ56DISVprG0zpr6lP64QITy9zH4c2k9h7unGo+a
lVN3JfDAmGzfonJ15xklKvHLguGVgNhh3zKa3mrGoHQ20oBlzGwZB3QRm4JLhzJc
uBAWVEIKz75Z/Z4e47lXBrztshbuQxjcayaS4VKYjIkr0ajnqiBEvLgQWYlIyPRV
T5BQmcOxxqgLBOuc2guAQGwFm7qJROBWqzJW3ImWYpBaAcjoa8Y6kbojk47tFuG8
4gp5mbL4+wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFF7Cv6qeTLaog8zrSAeQLvbV
3mr0MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzM5NzExMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+MjANBgkqhkiG9w0BAQsFAAOC
AQEAPCk1/koyk20uxldHS+EvxDS6VW7NopWWMy32cMhqGh0T2OemCPhLnXycu043
O1Lozuu/ive3mvFdhiL7qTEjTG48HWQU23wVtQScRlNFgFlO6IqymkshmP8uh/ja
FHZpOqTJw5x0qBsp3jJabmpzB3ZuYCFGx/HT1ZcXfw8TVO4TmDg0r87Zn+OJeGcN
Am26nNTJXwornggt0H5IzWNK/qJNapdYqDtMEZ3GHHV0PdU24s4JQd5wcyujE0KP
wPlPIqVWcI3oVjhIV6dwnduzgztFj4QFSsLkPAGXmn225tk2ZiLinGmARUGVtEiK
5PEJVowcZnlALlzzMUWX2dYLIg==
-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org