Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS49981.roa
File:                     AS49981.roa (raw, json)
Hash identifier:          xnQDZdJx5got0XQSIuuKVkteKwKJN/42gYdSIe5htEs=
Subject key identifier:   B9:62:D0:E3:4D:15:98:68:9D:60:86:BB:D5:EF:20:DE:69:27:F6:87
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       76EA334215AFBDD2E0C5EC577BD81D7D4D6E4EA9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS49981.roa
Signing time:             Thu 04 Jan 2024 00:00:03 +0000
ROA not before:           Wed 03 Jan 2024 23:55:03 +0000
ROA not after:            Thu 02 Jan 2025 00:00:03 +0000
asID:                     49981
IP address blocks:        157.254.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ea:33:42:15:af:bd:d2:e0:c5:ec:57:7b:d8:1d:7d:4d:6e:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan  3 23:55:03 2024 GMT
            Not After : Jan  2 00:00:03 2025 GMT
        Subject: CN=B962D0E34D1598689D6086BBD5EF20DE6927F687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:8e:07:5e:b3:2f:ee:3f:94:6d:19:31:8c:
                    65:18:f9:c4:3e:55:49:e5:0b:ec:31:d9:87:7b:07:
                    bd:68:06:df:01:1f:1e:e4:7c:70:3d:25:f7:4d:66:
                    12:aa:ec:6e:59:3f:f6:be:98:38:9a:39:33:47:1b:
                    25:15:21:34:a9:d7:01:f9:69:01:da:f4:f1:4d:49:
                    ea:b4:bc:1d:b2:68:a4:f1:97:e6:a1:f8:e2:a4:14:
                    46:91:7a:a7:c0:ed:b1:42:7f:ad:f6:e7:1d:70:1e:
                    49:27:6e:e9:a7:eb:c4:f2:1b:fe:53:e2:d5:40:9a:
                    cb:1f:27:6e:f4:0e:1a:39:8c:e7:57:73:88:ab:6c:
                    2f:98:77:99:6c:7e:af:ae:b1:9b:7e:d1:76:99:4f:
                    0c:5c:0f:c8:24:d8:47:15:e8:ef:3f:5e:d1:77:57:
                    a2:e1:18:5b:f6:33:29:32:2b:51:b8:0d:63:92:e8:
                    22:bc:d5:79:a0:8b:bd:81:c0:59:87:94:5f:60:17:
                    0e:d0:bf:09:1f:23:c7:e1:b2:46:20:a9:6e:b3:c6:
                    d5:35:f0:5f:8b:a5:30:f0:8a:2c:10:34:b1:35:4a:
                    2a:92:7e:5d:b7:0c:c6:c6:5e:09:50:17:c2:22:c9:
                    7b:ab:f8:86:f5:7a:cb:b1:7b:70:57:f0:be:28:6d:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:62:D0:E3:4D:15:98:68:9D:60:86:BB:D5:EF:20:DE:69:27:F6:87
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS49981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7c:63:b0:e2:a6:ab:66:9e:86:64:6f:f9:81:48:60:89:5d:
         e5:d1:c2:20:8b:a3:29:35:80:c9:f4:b5:c5:67:75:ae:8e:46:
         6f:da:b9:2e:69:d6:33:b0:09:aa:c2:da:39:01:1a:3d:0b:44:
         e6:37:41:1b:55:0a:f6:9c:56:b5:7c:2c:22:4d:40:83:28:1e:
         42:34:e4:a2:e3:38:c7:89:0e:64:5b:e6:08:91:8e:3f:17:bb:
         25:8f:6e:62:06:e5:c7:cf:34:cc:a4:05:3d:65:8b:3e:6a:22:
         e3:74:db:21:6a:af:30:f1:e4:9f:f7:48:c3:d4:c2:3f:66:64:
         0a:8f:ce:78:c0:74:22:8d:b3:77:f7:3d:ba:ac:b1:0b:28:55:
         ee:47:63:f3:07:e7:8d:56:9b:68:b6:95:d5:9d:96:91:04:b9:
         fd:2c:aa:89:83:83:de:c3:31:ff:d9:48:23:24:55:0c:8e:7d:
         f4:8a:f1:3a:3f:e9:72:20:40:1e:f1:11:66:70:d9:3c:ee:cb:
         f9:fa:9d:80:03:9b:fa:6a:73:37:cc:7e:4d:16:90:64:2e:43:
         f4:ec:81:38:f1:f6:25:f7:9c:75:8b:ad:62:c7:24:c3:cb:af:
         8e:f6:44:98:91:37:4c:43:52:bf:51:6f:8e:96:62:fd:ca:36:
         07:e4:af:d2
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUduozQhWvvdLgxexXe9gdfU1uTqkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwMTAzMjM1NTAzWhcNMjUwMTAyMDAwMDAz
WjAzMTEwLwYDVQQDEyhCOTYyRDBFMzREMTU5ODY4OUQ2MDg2QkJENUVGMjBERTY5
MjdGNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH2OB16zL+4/
lG0ZMYxlGPnEPlVJ5QvsMdmHewe9aAbfAR8e5HxwPSX3TWYSquxuWT/2vpg4mjkz
RxslFSE0qdcB+WkB2vTxTUnqtLwdsmik8ZfmofjipBRGkXqnwO2xQn+t9ucdcB5J
J27pp+vE8hv+U+LVQJrLHydu9A4aOYznV3OIq2wvmHeZbH6vrrGbftF2mU8MXA/I
JNhHFejvP17Rd1ei4Rhb9jMpMitRuA1jkugivNV5oIu9gcBZh5RfYBcO0L8JHyPH
4bJGIKlus8bVNfBfi6Uw8IosEDSxNUoqkn5dtwzGxl4JUBfCIsl7q/iG9XrLsXtw
V/C+KG2LEwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLli0ONNFZhonWCGu9XvIN5p
J/aHMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzQ5OTgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7YMA0GCSqGSIb3DQEBCwUAA4IB
AQCTfGOw4qarZp6GZG/5gUhgiV3l0cIgi6MpNYDJ9LXFZ3WujkZv2rkuadYzsAmq
wto5ARo9C0TmN0EbVQr2nFa1fCwiTUCDKB5CNOSi4zjHiQ5kW+YIkY4/F7slj25i
BuXHzzTMpAU9ZYs+aiLjdNshaq8w8eSf90jD1MI/ZmQKj854wHQijbN39z26rLEL
KFXuR2PzB+eNVptotpXVnZaRBLn9LKqJg4PewzH/2UgjJFUMjn30ivE6P+lyIEAe
8RFmcNk87sv5+p2AA5v6anM3zH5NFpBkLkP07IE48fYl95x1i61ixyTDy6+O9kSY
kTdMQ1K/UW+OlmL9yjYH5K/S
-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org