Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa
File:                     AS399486.roa (raw, json)
Hash identifier:          a2YxLxMxWE6/e/PaWoWZZqt3Dv4bMC/uijxTvH2bJgY=
Subject key identifier:   B8:5B:A8:2E:38:F4:AA:42:49:21:E8:F3:40:DD:C7:EB:45:6A:F3:27
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       250D24D001105AC78FC4775A1B67BAAEA4E9909C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa
Signing time:             Thu 01 Aug 2024 08:48:59 +0000
ROA not before:           Thu 01 Aug 2024 08:43:59 +0000
ROA not after:            Thu 31 Jul 2025 08:48:59 +0000
asID:                     399486
IP address blocks:        157.254.164.0/23 maxlen: 24
                          157.254.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 06:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:24:d0:01:10:5a:c7:8f:c4:77:5a:1b:67:ba:ae:a4:e9:90:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  1 08:43:59 2024 GMT
            Not After : Jul 31 08:48:59 2025 GMT
        Subject: CN=B85BA82E38F4AA424921E8F340DDC7EB456AF327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:56:d3:91:b4:9d:59:d1:1c:28:e4:de:5f:
                    11:b7:d1:1e:f1:b0:65:ea:56:4b:dc:5e:d5:77:3a:
                    9c:0b:3e:4a:76:65:ee:a2:29:0b:78:c0:90:84:71:
                    60:c2:d9:72:26:2f:62:32:04:9f:c3:3a:46:c2:dc:
                    36:ed:d1:ce:58:8f:5f:1a:19:fe:15:98:2d:11:ca:
                    17:a4:6f:f8:ce:e0:ad:e3:1a:a1:9a:7d:13:6c:be:
                    ba:7d:39:e8:f8:1d:e9:a6:82:0c:f1:29:9a:12:7a:
                    69:27:15:e1:8e:61:df:ef:3c:a2:0b:18:40:b4:e3:
                    3c:6b:de:4b:d6:3c:0b:bb:8e:1d:47:5e:77:86:91:
                    91:fb:b9:53:1f:97:7b:00:fc:8b:96:8a:49:7c:0b:
                    ef:95:82:3d:1e:5f:c5:3b:8c:c6:c2:38:15:f3:eb:
                    49:19:c7:8b:5c:28:11:bd:aa:60:f1:4b:96:c1:91:
                    05:bb:de:67:32:61:8a:1d:5b:e6:1a:8f:bf:93:71:
                    f4:2c:61:72:61:a0:0c:46:5d:5f:bc:d9:84:c8:1e:
                    af:89:36:3c:b2:70:ba:4d:56:49:13:96:d3:f6:1f:
                    51:3f:67:57:c0:b8:da:f3:a6:d5:bb:bf:73:19:2b:
                    6b:4f:e3:9c:c8:a2:e5:66:26:b6:ed:e2:ee:22:b1:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:A8:2E:38:F4:AA:42:49:21:E8:F3:40:DD:C7:EB:45:6A:F3:27
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.164.0/23
                  157.254.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:df:28:3b:a3:da:f8:2e:01:b3:16:f8:c5:6a:41:f0:b2:
         b2:fc:2d:22:93:64:6a:c9:c0:72:86:ef:7e:a8:ab:70:26:2c:
         1d:62:d1:be:d8:bf:c7:07:f5:f3:7d:78:4a:3a:9b:e5:85:f8:
         74:1f:07:81:f5:ef:38:3d:b8:17:98:79:35:6c:56:d8:7f:93:
         6e:34:09:e3:3c:48:84:a0:9b:97:84:3e:fb:a1:b8:10:be:b3:
         b8:62:c6:e2:f9:b0:1c:62:4a:a1:21:ed:a9:2b:ac:75:c4:a6:
         09:28:00:bf:39:ff:e7:a5:63:fc:3f:4a:31:86:40:d9:ea:35:
         1d:c4:87:df:42:05:fd:f2:b9:d6:1d:18:15:e1:b6:a9:dc:f9:
         1a:06:09:46:a4:97:c3:87:68:d3:d2:02:69:e8:83:5e:bb:dd:
         78:c0:d9:c0:21:c2:ad:94:db:29:4d:e2:05:e3:12:b0:2d:4e:
         61:53:6c:6f:ed:c0:77:71:36:42:4b:8d:1f:9a:a7:cf:4d:34:
         d7:b0:98:8f:75:1e:60:1a:72:36:e4:48:1b:71:b0:79:ef:e8:
         8a:ce:39:a7:4a:fa:f7:b7:45:28:c4:1b:30:18:3c:98:df:08:
         54:91:0e:e5:be:b2:75:cf:7e:30:6e:8c:c6:62:f2:d1:b2:46:
         9d:99:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:56 2024 by rpki-client on console-fra.rpki-client.org