Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          RU3I3a7RLhqb/qNN/1LDV4jB9ebUOiWHBKjmgvmU9Uo=
Subject key identifier:   83:32:2B:94:95:72:5B:AC:80:7A:6D:31:16:4F:7F:0E:4B:C4:B0:15
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       41FF3BE6473588D40CCA87B5F39FCD65806A612A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa
Signing time:             Mon 08 Apr 2024 08:09:28 +0000
ROA not before:           Mon 08 Apr 2024 08:04:28 +0000
ROA not after:            Mon 07 Apr 2025 08:09:28 +0000
asID:                     5065
IP address blocks:        157.254.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ff:3b:e6:47:35:88:d4:0c:ca:87:b5:f3:9f:cd:65:80:6a:61:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  8 08:04:28 2024 GMT
            Not After : Apr  7 08:09:28 2025 GMT
        Subject: CN=83322B9495725BAC807A6D31164F7F0E4BC4B015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:9d:c6:85:34:a8:3b:ce:78:c5:f5:a6:ee:
                    69:81:9f:53:77:8f:3c:e2:0c:66:6c:65:31:05:bc:
                    88:c6:b1:03:88:7d:5f:d9:9a:e0:d9:cc:e5:71:30:
                    43:1e:be:c7:92:75:6a:ce:8b:49:d1:b6:cd:f9:10:
                    85:25:18:28:8b:e5:83:7a:1a:d5:9f:8a:cf:ae:6c:
                    3f:f2:12:c0:45:a8:f0:22:a1:e6:ee:69:41:76:97:
                    7c:07:62:2f:09:b2:89:ad:fe:92:d7:a4:d9:4b:cf:
                    7b:d1:c6:f4:17:53:b8:88:9e:ca:d0:c5:41:49:07:
                    a0:f0:2c:9f:79:a2:06:bf:66:43:e5:1a:f1:c5:0e:
                    c0:67:07:4d:2b:e4:8f:c6:0d:1f:7d:c6:1b:d9:76:
                    39:05:3d:38:75:52:07:f2:8f:5a:44:d2:c4:c3:d3:
                    9f:27:e8:2c:ca:42:df:2f:80:ae:f0:4a:d9:23:df:
                    41:5a:59:39:53:41:53:4c:8a:02:a1:f3:15:08:93:
                    fa:b4:27:fe:7a:66:6e:a8:66:28:27:45:7c:8e:18:
                    6a:16:51:4a:b7:c1:35:cc:96:ea:04:43:92:2a:13:
                    7c:d6:77:e5:8b:6a:52:f3:eb:0a:e5:77:ca:63:15:
                    2b:8d:91:a9:57:ac:5d:ba:a6:fc:d7:47:56:18:9c:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:32:2B:94:95:72:5B:AC:80:7A:6D:31:16:4F:7F:0E:4B:C4:B0:15
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:eb:ff:42:0a:8b:34:07:d7:5d:0e:4e:9f:21:c8:27:66:
         c8:8c:34:4a:42:e9:f2:2f:fa:7b:b6:f7:c1:17:76:39:07:a3:
         79:b7:2a:be:dd:4d:e0:db:ad:0c:a5:15:e4:3b:6f:d5:87:25:
         83:50:e7:6c:4c:e6:e4:73:3d:16:51:89:ce:40:65:e7:d5:c9:
         ed:44:fc:9d:e2:e5:fb:c1:7b:b9:6a:e5:b9:fd:27:b1:13:76:
         14:68:72:f0:d0:02:58:6a:4f:c0:8f:97:1b:6c:59:84:fe:54:
         ac:2e:2f:df:65:07:e4:2e:6c:4b:75:98:8c:f4:21:e2:5d:91:
         89:d0:7b:6a:7a:6c:ff:c2:74:b3:38:2b:f5:bc:b9:27:29:76:
         96:8f:c9:51:cb:af:54:09:b7:01:ca:35:da:2c:5e:ff:4c:27:
         60:ed:cd:90:d1:3b:b5:fb:e6:a1:23:5d:2a:79:31:dd:c7:da:
         75:7a:80:6f:92:ca:79:4b:e7:36:a6:da:3c:ac:79:5e:e8:ff:
         0c:d8:ee:74:b8:19:03:4f:9c:5a:34:8d:c4:05:93:82:a3:05:
         8d:ba:ba:6f:3b:a2:50:47:f5:fc:2d:a2:d0:49:4d:a9:eb:bd:
         98:6b:e3:12:18:68:de:a6:29:0a:d2:3f:17:64:a3:93:bb:d1:
         aa:b6:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org