Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398395.roa
File:                     AS398395.roa (raw, json)
Hash identifier:          56tFREN5khVWYC2raCqeQBwxKBMOw4OsLO+gl3k/DmU=
Subject key identifier:   A6:C8:3D:F9:26:DF:DE:B3:BE:CB:72:1E:4C:F1:F8:8A:DF:38:79:30
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       021FF953DD7F32416FED95C3F16C9367E37F7864
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398395.roa
Signing time:             Sun 06 Oct 2024 02:01:32 +0000
ROA not before:           Sun 06 Oct 2024 01:56:32 +0000
ROA not after:            Sun 05 Oct 2025 02:01:32 +0000
asID:                     398395
IP address blocks:        157.254.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:f9:53:dd:7f:32:41:6f:ed:95:c3:f1:6c:93:67:e3:7f:78:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct  6 01:56:32 2024 GMT
            Not After : Oct  5 02:01:32 2025 GMT
        Subject: CN=A6C83DF926DFDEB3BECB721E4CF1F88ADF387930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:51:17:e4:ec:eb:46:36:59:a4:2b:8d:81:
                    c1:51:ac:81:c6:6c:b4:0e:bd:e0:0d:03:a9:9f:60:
                    be:d3:b7:b1:a0:75:71:f8:98:65:43:0e:66:fd:75:
                    bf:98:63:04:94:36:47:d2:38:c4:9e:95:36:e5:25:
                    ec:ed:ce:73:e7:b0:ab:02:b1:58:ab:bd:ee:53:8a:
                    3d:c5:77:b9:a3:0b:75:44:1e:fe:a0:57:d5:00:47:
                    42:de:1e:84:27:42:79:e9:12:29:c7:b2:f2:8a:60:
                    18:90:f6:61:e0:b9:b0:7a:6a:9f:f5:a0:72:01:60:
                    12:e1:a8:dc:c9:1c:57:fd:de:49:33:b1:bc:5c:6b:
                    a5:81:6f:8f:eb:9b:01:27:8d:4b:1a:c3:8d:e5:87:
                    24:96:9f:24:68:a1:54:e9:ee:98:cf:8c:d8:49:6e:
                    bf:97:6c:8c:2a:5a:70:e1:dd:39:f0:a6:9e:ba:d4:
                    09:09:cb:94:a1:e2:83:8b:d7:1d:be:c6:54:f1:ab:
                    4e:cb:ed:8a:b6:59:1c:a6:ee:4d:90:56:28:88:60:
                    cc:8f:1a:51:d9:e2:83:c1:16:3d:36:58:15:e7:b7:
                    c8:51:bb:0b:fc:1a:2e:c8:39:2b:4d:7b:05:be:c0:
                    2d:99:aa:82:d0:5d:f9:37:5a:10:31:17:17:8d:14:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:3D:F9:26:DF:DE:B3:BE:CB:72:1E:4C:F1:F8:8A:DF:38:79:30
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398395.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:f9:d5:84:1e:ee:e6:74:1b:7d:11:93:9f:5e:e6:08:5f:
         55:46:54:d4:89:01:ea:41:e7:ed:c6:96:d7:93:89:f3:ed:4c:
         f0:44:57:6a:c1:f5:f6:c1:ac:17:6b:c1:48:4c:be:49:21:55:
         4d:e5:a9:6c:45:ae:10:2a:e2:83:c0:69:6f:f8:c0:09:da:13:
         99:e7:d9:c9:e9:0e:7c:7f:42:5e:49:55:56:fe:c5:68:dc:8c:
         fc:0e:b6:7c:8e:72:f7:2b:3d:51:c9:8f:58:8d:ca:ec:f5:dd:
         f2:24:0c:df:9d:f5:95:d2:d9:20:9c:26:e2:8e:1f:b0:30:9e:
         da:b9:c1:e6:d2:c0:a5:82:d6:2e:9b:5a:c3:5a:61:18:b6:da:
         d7:b4:a2:66:81:d7:5d:a9:a8:0e:18:07:37:04:ce:a0:94:f5:
         46:f7:6d:dd:11:ec:14:4d:03:e4:0e:53:e4:b2:c7:6a:31:07:
         9b:9e:cc:e4:2c:1b:00:cd:60:96:c9:f5:c7:84:8a:a1:c0:22:
         55:54:fc:ab:8a:59:f1:0c:a1:7c:62:b7:93:92:d7:c9:a1:8e:
         63:a2:ca:a2:5f:e8:ad:49:58:7e:f3:6d:98:eb:ae:96:69:f7:
         59:ae:b0:81:df:f1:f4:45:a7:3f:c7:88:12:79:8f:cc:5d:a4:
         38:db:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org