Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400758.roa
File:                     AS400758.roa (raw, json)
Hash identifier:          +F5nZHsoRLRDalAYWMIqiqya/hVTDvrIpvRjhY9IAPo=
Subject key identifier:   38:0F:79:64:82:A3:55:6D:5B:53:FE:93:E6:F7:0A:DC:5D:C1:D9:B4
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       47A6275BF0644E72A114C367C1CFBA63881C6F41
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400758.roa
Signing time:             Thu 31 Aug 2023 07:52:12 +0000
ROA not before:           Thu 31 Aug 2023 07:47:12 +0000
ROA not after:            Thu 29 Aug 2024 07:52:12 +0000
asID:                     400758
IP address blocks:        157.254.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a6:27:5b:f0:64:4e:72:a1:14:c3:67:c1:cf:ba:63:88:1c:6f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:12 2023 GMT
            Not After : Aug 29 07:52:12 2024 GMT
        Subject: CN=380F796482A3556D5B53FE93E6F70ADC5DC1D9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:1d:ba:c6:1a:e7:27:bd:43:4b:b3:3a:7a:
                    b2:c4:12:70:c9:02:45:2a:a0:be:0b:b7:79:ab:00:
                    23:94:32:3c:73:2d:80:09:56:bb:70:b9:ef:33:af:
                    a1:92:af:42:9a:b1:d3:f2:49:17:cb:ed:dd:36:17:
                    08:54:41:97:01:ad:91:c9:44:3f:f1:8e:2e:ef:56:
                    5a:14:42:a4:83:f6:c1:62:81:c9:8c:1e:df:0a:90:
                    4a:6f:3a:fe:4f:08:c6:e6:12:e5:74:56:ae:87:12:
                    be:10:b6:6a:8a:08:41:e8:6c:80:39:e1:39:53:29:
                    86:19:cf:48:52:3b:2b:b6:0b:97:c6:db:2e:7c:c5:
                    9f:f0:45:f2:8d:3b:e6:f0:af:3b:7b:65:0b:f3:79:
                    4a:e1:56:d1:c9:c5:19:cf:9f:08:c6:13:02:be:54:
                    b7:a5:17:48:57:64:18:6e:0c:7b:92:02:85:46:f0:
                    ac:38:dd:06:99:a3:b3:e6:17:5c:4d:36:6f:88:4d:
                    04:b6:f3:0a:f3:85:20:bc:40:83:58:13:60:5c:ab:
                    a6:c9:9c:1b:6e:eb:f1:98:b8:cb:54:67:10:4a:ad:
                    a9:54:77:ad:1a:ab:4b:76:e3:6d:7b:28:a0:9b:33:
                    32:f6:c0:1e:ca:09:22:2e:85:7d:96:ec:8d:e3:4d:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0F:79:64:82:A3:55:6D:5B:53:FE:93:E6:F7:0A:DC:5D:C1:D9:B4
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400758.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:83:63:f3:e7:e9:2c:90:e8:29:45:89:ea:16:12:a3:b8:
         44:43:9d:ff:f4:7a:5e:d4:70:16:f5:7f:8c:23:e8:5d:13:b2:
         40:bc:74:65:57:1e:89:9e:f8:3b:f2:fe:73:29:f6:52:b8:75:
         f1:c5:66:8f:1a:b9:a7:a7:86:91:ce:0f:78:cc:dd:cc:26:f8:
         3b:e7:48:9d:27:2c:4d:c2:28:4b:b3:1e:82:7a:49:66:e1:c5:
         e4:68:aa:fe:12:eb:4b:4b:7b:a4:44:05:7e:6d:41:fe:ce:40:
         a7:d0:93:3e:43:e1:20:08:35:e8:e9:ce:07:ee:87:7c:63:ce:
         db:f4:9d:ac:3d:cb:87:f1:bc:bd:1e:59:6b:fd:8f:5b:25:0c:
         b0:ca:0b:23:30:39:c0:4f:aa:75:2b:aa:e2:d4:4e:58:97:24:
         23:29:9c:f7:40:d4:ce:51:30:55:2e:9f:56:e7:7b:e6:96:c5:
         e4:5f:9d:1d:51:57:51:58:72:9b:d8:47:78:93:b1:74:0f:b1:
         c7:08:79:02:6e:85:06:a7:50:e8:d6:b7:48:ac:9a:81:8c:24:
         87:08:28:1f:6b:dc:91:5c:b8:a9:18:3c:d9:a1:c1:45:04:7f:
         44:ba:55:97:ad:50:5c:ff:1c:56:fe:09:f9:a3:72:50:15:15:
         d9:e0:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org