Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400967.roa
File:                     AS400967.roa (raw, json)
Hash identifier:          yoXuYgYR3LJbK1BkSti/jerWppIpZ8aoXIVEttVTTN4=
Subject key identifier:   2B:1E:AE:BF:33:25:15:08:0C:5A:3C:98:DB:74:E2:19:5F:4E:48:9F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       10AFF56EC19ACA4F832DDA39BBFAD17E08AEF306
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400967.roa
Signing time:             Fri 12 Apr 2024 02:13:00 +0000
ROA not before:           Fri 12 Apr 2024 02:08:00 +0000
ROA not after:            Fri 11 Apr 2025 02:13:00 +0000
asID:                     400967
IP address blocks:        157.254.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:af:f5:6e:c1:9a:ca:4f:83:2d:da:39:bb:fa:d1:7e:08:ae:f3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 12 02:08:00 2024 GMT
            Not After : Apr 11 02:13:00 2025 GMT
        Subject: CN=2B1EAEBF332515080C5A3C98DB74E2195F4E489F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:55:90:fd:44:6a:9a:b5:18:97:04:84:bf:25:
                    d1:0c:91:fb:36:e3:5c:dd:49:7f:24:ba:33:68:2a:
                    39:36:4b:fc:74:43:a1:8e:1c:70:c8:07:9f:f6:4c:
                    ce:1c:7b:1e:04:a2:1e:73:e4:48:a1:65:a2:ce:b0:
                    3b:81:eb:aa:40:d1:00:5b:3f:f4:5a:27:40:87:0a:
                    d1:0f:93:d0:40:23:fc:3d:cd:95:18:9d:f3:62:30:
                    18:4b:82:db:c4:c1:ac:d1:56:2c:14:45:0b:58:01:
                    f8:78:15:52:9b:bd:62:a5:cc:52:ba:58:19:ad:97:
                    de:57:a4:13:8d:17:45:02:ca:30:25:ea:79:8a:2d:
                    c2:e0:1d:f1:f0:68:f2:11:90:ae:ee:d8:67:82:a5:
                    af:3f:bd:36:f6:62:bb:19:1b:fe:71:75:a9:a5:ef:
                    95:2a:22:13:dc:09:4d:90:64:fc:6f:9f:f0:81:6d:
                    55:e7:26:1c:c3:ae:2b:e7:59:96:64:c4:f9:ba:30:
                    eb:f7:7a:30:4c:b8:bc:c5:8e:d2:1f:8b:c2:67:f8:
                    f4:38:4e:c1:cd:69:61:bd:3e:e9:4f:68:30:9c:cc:
                    94:99:78:1e:52:e2:fd:c4:95:5e:e8:a4:24:89:59:
                    ab:05:8b:5f:2c:3c:a0:16:bd:a7:20:96:9b:a9:89:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:AE:BF:33:25:15:08:0C:5A:3C:98:DB:74:E2:19:5F:4E:48:9F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400967.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:fa:e7:a1:f9:b1:8e:08:ef:4b:20:8f:73:91:b4:b2:cf:
         71:bb:9e:e1:67:91:06:a6:65:26:42:50:01:ce:a2:75:d9:47:
         38:f5:b8:60:8d:65:0c:de:93:69:20:ea:0e:33:b2:ef:ee:c4:
         45:8f:4c:b3:24:78:bd:d5:b2:0d:61:cf:e8:06:1d:41:b7:ce:
         32:36:dd:de:59:84:53:d2:07:c5:1e:8c:c5:88:f2:1a:0e:1a:
         05:73:04:53:48:8f:68:21:f4:b3:07:58:75:37:93:4b:11:d8:
         30:16:d6:54:bb:e8:75:f3:d7:58:57:84:ca:19:32:59:56:9e:
         36:2f:77:fb:78:d0:7a:4b:69:d8:75:8b:b8:3c:6a:03:39:a5:
         13:8b:ef:70:8e:e2:d4:99:d0:11:b1:c3:21:4e:b3:53:80:e4:
         36:9f:d5:a7:27:f4:8e:8b:a7:da:9b:0a:71:4d:95:17:1b:81:
         de:46:e2:0a:05:b2:84:33:dc:27:b9:3a:e3:b4:fe:e1:32:66:
         e8:07:a6:07:70:d6:ed:6c:4f:c5:be:05:e0:ce:bf:06:5a:4f:
         2b:0b:83:22:f2:77:13:67:e9:b7:b5:20:58:4b:e1:d0:f1:eb:
         0f:ff:88:80:2e:05:0b:0d:64:66:fd:1a:f3:f0:9a:0f:0c:d7:
         a3:64:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:08 2024 by rpki-client on console-fra.rpki-client.org