Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa
File:                     AS400958.roa (raw, json)
Hash identifier:          9j2rZ/QUc5Zahsbf/BcrAQ8T8bmfU2PaLw7nzLekghI=
Subject key identifier:   CB:A1:13:DD:FB:6F:BC:2D:97:3A:59:09:3D:B9:36:B2:33:C5:32:00
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2C615FCAF17910690762C070880B9BA86E30DF5B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa
Signing time:             Mon 08 Apr 2024 15:18:42 +0000
ROA not before:           Mon 08 Apr 2024 15:13:42 +0000
ROA not after:            Mon 07 Apr 2025 15:18:42 +0000
asID:                     400958
IP address blocks:        157.254.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:61:5f:ca:f1:79:10:69:07:62:c0:70:88:0b:9b:a8:6e:30:df:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  8 15:13:42 2024 GMT
            Not After : Apr  7 15:18:42 2025 GMT
        Subject: CN=CBA113DDFB6FBC2D973A59093DB936B233C53200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:cd:a1:e1:45:96:52:71:72:53:e1:34:cd:
                    f1:b4:f1:4c:69:3e:a5:9d:0d:cb:3b:21:13:5f:28:
                    4f:2c:94:56:ef:f5:9d:c1:79:51:11:31:00:fe:df:
                    82:66:1e:a0:fb:ea:71:46:f2:33:59:ab:39:ba:e0:
                    54:8e:d2:a4:e7:2e:4f:93:66:89:98:35:f0:23:ca:
                    eb:b3:b1:46:45:7b:24:ec:da:d4:99:0c:20:e1:a8:
                    c7:77:0b:1a:7e:54:5b:ab:9f:88:8d:2c:55:bf:16:
                    e7:28:15:5f:18:ce:3b:d8:22:04:09:d5:c0:e8:b9:
                    89:24:42:56:50:e4:ee:44:99:1a:4e:2f:82:72:e7:
                    1e:3f:0a:a7:29:12:83:c5:69:1e:99:f3:95:3b:07:
                    bf:d1:2c:69:0f:5f:d2:e8:00:5a:87:6d:5f:d2:6e:
                    57:24:3e:36:86:0a:49:29:48:ac:c8:1c:ef:84:67:
                    00:9a:aa:5d:59:49:04:03:b5:97:c1:0b:10:ba:08:
                    bb:08:53:45:8a:6a:10:73:cb:41:3f:24:ea:4a:8a:
                    cf:4c:02:e8:e4:fc:6d:93:1b:d1:07:5c:50:84:cf:
                    10:17:d9:b3:53:4d:ce:65:5b:fb:a3:13:05:23:55:
                    4e:c7:4d:b3:91:d1:75:d1:44:fc:ea:b7:8b:c2:9e:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:13:DD:FB:6F:BC:2D:97:3A:59:09:3D:B9:36:B2:33:C5:32:00
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4b:43:ed:d0:90:6b:92:76:aa:c6:9f:1b:75:bc:52:8f:a2:
         4a:35:88:34:97:d8:77:cf:98:ae:e8:04:bd:a1:93:39:99:12:
         19:5e:16:66:4f:70:42:47:25:86:2c:47:70:49:38:da:40:09:
         b6:69:3b:69:b0:ef:a1:ac:a2:cb:a5:9e:0b:4a:a0:22:ef:66:
         ba:2e:ce:e3:cf:cd:ba:4a:36:18:75:6d:4c:fe:63:f5:0c:7e:
         0d:3f:bf:a0:89:b9:2c:d3:c8:6f:95:93:de:5e:a2:f0:13:20:
         6c:f7:ff:c3:1c:9a:0a:ee:ec:3a:8c:22:12:18:f9:c3:30:d2:
         c6:b4:b7:0a:43:97:46:3a:59:06:ad:d8:e2:8e:12:a9:fe:20:
         1f:a7:5c:64:2d:03:f3:9f:1a:c5:79:b5:b1:9e:5e:77:b1:8e:
         61:6d:f4:fd:80:b0:dc:67:a5:65:7e:86:c4:41:85:76:5b:5b:
         6a:90:76:32:7c:ab:2d:23:f8:21:3e:01:76:f3:3b:c8:78:1f:
         78:36:aa:50:45:4e:cc:cb:ac:e1:1a:24:5b:6b:6b:50:65:53:
         73:06:1e:1c:75:bc:b0:19:31:69:f8:2d:95:04:a2:b9:fa:60:
         6e:c3:65:36:49:e0:08:21:ee:66:5c:02:d2:7f:d8:b2:8a:bd:
         af:7d:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:29 2024 by rpki-client on console-ams.rpki-client.org