Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          Un97SlVHuPyPM45zLcf+dK5BWvFQygi864/ONqmnddo=
Subject key identifier:   55:E7:0C:55:98:0B:6B:9F:6E:30:58:0B:00:6A:9E:03:12:C0:C4:A1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5A60A12E91ABD7F72C8062C4345DCB04F89EBA53
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa
Signing time:             Wed 18 Sep 2024 10:48:59 +0000
ROA not before:           Wed 18 Sep 2024 10:43:59 +0000
ROA not after:            Wed 17 Sep 2025 10:48:59 +0000
asID:                     40676
IP address blocks:        157.254.40.0/23 maxlen: 24
                          157.254.42.0/23 maxlen: 24
                          157.254.44.0/23 maxlen: 24
                          157.254.46.0/23 maxlen: 24
                          157.254.80.0/23 maxlen: 24
                          157.254.82.0/23 maxlen: 24
                          157.254.84.0/23 maxlen: 24
                          157.254.86.0/23 maxlen: 24
                          157.254.88.0/23 maxlen: 24
                          157.254.90.0/23 maxlen: 24
                          157.254.92.0/23 maxlen: 24
                          157.254.94.0/23 maxlen: 24
                          157.254.132.0/22 maxlen: 24
                          157.254.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 10:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:60:a1:2e:91:ab:d7:f7:2c:80:62:c4:34:5d:cb:04:f8:9e:ba:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 18 10:43:59 2024 GMT
            Not After : Sep 17 10:48:59 2025 GMT
        Subject: CN=55E70C55980B6B9F6E30580B006A9E0312C0C4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:be:4b:48:4f:e3:0e:58:a0:83:7a:a9:d9:
                    06:9b:1d:0d:6b:9d:f2:66:db:4b:65:ba:d4:47:a9:
                    3b:25:0c:13:e3:fc:3c:f4:e7:d3:89:db:31:5f:26:
                    65:d8:72:b9:78:b7:45:93:f7:af:a6:71:e7:48:b9:
                    ef:2f:05:5b:a2:2e:b6:2c:f1:43:a5:8d:c5:2f:af:
                    7d:f7:a7:84:ea:8c:c6:50:b4:8d:b3:38:01:ce:2a:
                    1e:cb:83:03:31:4d:e8:18:81:e7:8e:44:97:00:67:
                    21:6c:95:34:1f:e6:d6:39:ef:0f:4c:ea:26:c6:25:
                    cb:8c:74:e7:fc:33:ca:61:a5:65:94:be:8b:46:a1:
                    fb:fb:7a:4c:e4:2b:e3:c6:ac:a3:5e:a7:9e:c0:95:
                    00:e4:79:4f:64:c1:a5:4f:69:f0:b2:3b:94:4f:aa:
                    7f:56:cc:6d:11:54:90:d1:a8:7c:94:f1:1b:85:73:
                    6d:a6:4e:37:f7:33:6c:4d:bb:ca:b5:d9:bf:d7:10:
                    24:ff:8c:48:86:a0:3c:68:25:61:8d:a7:48:fa:58:
                    53:1a:52:e2:c5:2e:3e:26:c1:ef:e6:82:da:27:cf:
                    96:63:21:e8:9a:51:dd:04:8a:d0:54:1d:24:07:2e:
                    ed:6c:3c:a8:36:70:32:9d:90:cd:78:a4:ea:77:3e:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:0C:55:98:0B:6B:9F:6E:30:58:0B:00:6A:9E:03:12:C0:C4:A1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.40.0/21
                  157.254.80.0/20
                  157.254.132.0-157.254.139.255

    Signature Algorithm: sha256WithRSAEncryption
         37:14:e6:e2:fa:6c:ab:bb:f7:fd:5d:b9:d7:cd:e9:b4:9b:11:
         99:05:d3:b7:be:38:47:94:c8:c1:23:7b:4b:3e:b1:de:07:b8:
         1a:5d:75:14:4c:8a:c0:19:e7:5b:96:dc:fd:1d:82:07:7d:62:
         72:a5:8a:c1:31:82:26:14:3f:83:25:68:90:c7:54:71:84:e0:
         5a:54:b2:b6:8f:3c:8f:98:9a:0b:0a:2a:6a:fe:c6:e6:c9:83:
         17:ea:39:03:e2:4d:68:b2:4c:82:12:af:ef:89:2d:1a:7e:cd:
         24:fb:a2:af:7a:0c:1d:04:03:e8:9a:59:47:a5:9a:ed:3a:d1:
         d8:76:d1:fb:c8:dd:0c:47:12:69:d4:3e:c5:de:5b:88:b6:f8:
         50:62:8f:9d:8d:0e:88:21:4e:b2:32:5a:3b:db:47:5f:62:97:
         56:33:3f:47:47:a4:a6:d2:89:fe:5a:1c:83:2c:67:2d:79:7a:
         31:17:6f:18:cf:cb:ee:19:fc:df:84:f8:55:1d:59:e7:a5:f9:
         71:95:08:ce:b3:df:d7:15:b6:a8:ae:87:2f:83:e6:7c:cf:1b:
         70:c3:2d:03:1f:74:a6:51:6f:d2:40:4f:1f:17:ec:65:46:21:
         8e:87:57:a4:3a:0d:28:5e:38:2e:b3:2d:77:14:44:7b:19:c5:
         6f:f9:f7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:15 2024 by rpki-client on console-ams.rpki-client.org