Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
File:                     AS400890.roa (raw, json)
Hash identifier:          GeluJB9wAce0SuQVbaqwCDjoomFQYC2c6YF3DKtV9xo=
Subject key identifier:   73:A3:22:E5:FD:A5:09:D0:BF:D7:B6:BD:4A:52:5F:A6:52:9B:0C:4E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1E4707423F9FC687B7977E494C047ED7335B0D03
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
Signing time:             Thu 30 May 2024 22:47:39 +0000
ROA not before:           Thu 30 May 2024 22:42:39 +0000
ROA not after:            Thu 29 May 2025 22:47:39 +0000
asID:                     400890
IP address blocks:        157.254.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Nov 2024 11:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:07:42:3f:9f:c6:87:b7:97:7e:49:4c:04:7e:d7:33:5b:0d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 30 22:42:39 2024 GMT
            Not After : May 29 22:47:39 2025 GMT
        Subject: CN=73A322E5FDA509D0BFD7B6BD4A525FA6529B0C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9e:53:31:48:24:93:05:90:bf:7c:8f:57:94:
                    7e:78:53:c7:8a:6e:e7:4d:5d:3b:93:c7:66:22:f3:
                    c9:04:d0:69:b7:b7:17:f1:f5:ec:e9:c8:57:5e:90:
                    65:dd:b7:18:8e:62:5d:8a:ec:8f:c5:73:63:2e:e9:
                    4a:43:fc:6a:f3:55:6b:46:0c:23:72:b9:11:f7:a7:
                    d1:67:39:e5:55:0e:55:ba:f3:37:a2:c7:90:e1:cd:
                    58:a0:fe:e8:bc:08:bb:7a:04:0b:c5:3d:4a:4a:7e:
                    16:9d:f4:56:33:7c:d1:f3:8f:01:6c:b6:0f:fc:c3:
                    ca:14:0a:36:c0:55:aa:3a:b5:8a:2e:8f:99:f3:62:
                    a5:9f:db:b4:a9:86:3b:5d:a4:6c:e4:29:fa:ff:2e:
                    ba:c4:76:54:02:ca:74:9b:6d:99:0c:b7:6f:71:0f:
                    03:cc:66:69:cb:e4:7f:63:4a:e5:b4:d5:26:90:bf:
                    da:3e:b9:b5:6f:51:b9:ca:ca:ad:ad:f5:42:45:40:
                    80:e7:86:9c:2f:9b:30:56:71:c5:8d:7b:12:57:ce:
                    4c:70:67:09:2d:3a:b5:9b:b8:ef:eb:36:eb:75:69:
                    ad:fc:50:97:da:2a:02:d7:2a:aa:4a:c4:9d:52:e0:
                    57:b5:ea:94:0a:9f:ee:12:6b:f6:07:ab:5f:18:9d:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A3:22:E5:FD:A5:09:D0:BF:D7:B6:BD:4A:52:5F:A6:52:9B:0C:4E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:b6:90:de:95:e1:9c:7f:6f:78:f9:b9:1e:18:05:2c:83:
         31:8f:b3:85:30:c5:41:f7:c9:c5:2c:73:04:8f:87:d3:17:4c:
         34:e9:3b:19:04:f6:fb:e9:26:e3:3e:6c:29:7e:ba:95:4a:71:
         fc:af:72:a6:1c:6e:fc:34:f2:75:44:d2:9f:66:f3:7d:9b:d2:
         c7:fd:3d:a5:59:a6:d3:eb:e2:15:c0:f6:7f:21:1f:4d:3e:3e:
         d3:35:a8:6a:cb:ef:c7:58:bf:ef:1e:55:60:58:8e:a2:0a:1a:
         80:de:31:93:18:bb:17:25:fc:31:a0:8e:55:9c:b5:67:8b:16:
         06:d1:f7:76:63:77:dd:f3:b3:eb:91:24:48:bd:3e:50:64:da:
         5d:f1:ce:54:25:0f:fa:61:d6:38:56:0a:ca:88:c2:69:79:0f:
         31:0d:31:c8:0a:8f:b1:98:fc:66:15:ce:82:26:e8:37:b9:01:
         3c:6b:2d:24:12:06:d1:89:3f:07:62:ac:30:76:ee:59:cc:38:
         4b:3b:54:9b:96:c0:d2:5d:f3:2e:60:1e:4d:4e:62:05:d9:d3:
         90:65:a7:c7:57:f6:e5:aa:cd:7c:6e:e1:98:97:60:4b:88:de:
         f7:d7:c7:08:dd:c5:3e:8c:29:99:09:d9:68:4b:86:56:60:22:
         cd:46:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 13:52:49 2024 by rpki-client on console-fra.rpki-client.org