Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          poPGJZ/0SCyj2mfgQZGpeYAxC+bv6r3OzabWwByyzYw=
Subject key identifier:   25:B1:D3:76:37:0A:CF:D8:C3:12:D7:90:0A:E4:68:87:51:A1:6A:89
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       12D07DE35D5D21A654C1F3EF4294E20E07A43181
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51082.roa
Signing time:             Thu 03 Oct 2024 10:29:52 +0000
ROA not before:           Thu 03 Oct 2024 10:24:52 +0000
ROA not after:            Thu 02 Oct 2025 10:29:52 +0000
asID:                     51082
IP address blocks:        157.254.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d0:7d:e3:5d:5d:21:a6:54:c1:f3:ef:42:94:e2:0e:07:a4:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct  3 10:24:52 2024 GMT
            Not After : Oct  2 10:29:52 2025 GMT
        Subject: CN=25B1D376370ACFD8C312D7900AE4688751A16A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:77:03:79:48:5a:f3:eb:f2:ad:7d:8a:64:
                    5e:74:24:e0:21:6c:79:f8:30:86:ff:e5:00:00:a8:
                    9f:0f:ff:ed:90:47:18:81:c7:a9:6b:c3:d1:63:c7:
                    e9:f1:98:cf:c9:26:9f:96:f6:de:58:88:9d:e8:3f:
                    60:c5:83:05:02:db:23:a3:2a:df:4c:00:15:42:c2:
                    4e:9f:28:d6:10:4b:79:f0:34:3f:b4:49:22:dc:c7:
                    55:21:c6:93:0d:47:c7:bd:f1:d8:34:e4:e6:d2:e9:
                    f5:8a:8c:f1:38:9d:f2:1e:ab:6e:a5:c3:aa:45:bc:
                    da:14:87:9b:bb:d3:3c:6c:c8:29:69:df:f0:62:b3:
                    f9:88:de:bd:07:e1:f0:79:a2:e7:ef:71:d3:15:a4:
                    f7:c2:b5:a3:82:93:3e:ff:8c:20:a2:c0:fb:1f:e5:
                    88:d5:fd:70:56:89:85:24:d3:1f:2c:5f:0b:eb:45:
                    27:dc:ba:b8:bc:63:38:e9:b1:f7:21:48:f6:6d:5b:
                    7e:5e:a3:6e:c1:4d:59:ac:e9:68:53:03:a8:32:e4:
                    38:c2:f6:7e:bc:f6:d5:47:a5:19:bf:dd:f0:dc:67:
                    44:fe:86:82:09:11:4f:1d:ba:8b:00:ea:6d:c3:f3:
                    8d:d0:ee:72:dd:30:35:01:fd:4c:7d:ef:6f:05:92:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B1:D3:76:37:0A:CF:D8:C3:12:D7:90:0A:E4:68:87:51:A1:6A:89
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:78:93:07:ea:de:b3:15:28:21:76:fc:36:d5:77:eb:bc:
         d8:c2:ed:76:74:be:bd:47:58:e3:6f:f2:ba:b4:32:3d:c2:93:
         55:11:a2:37:79:52:b8:6b:b1:be:18:e9:52:93:51:fa:f2:e2:
         81:be:ba:c3:f5:d3:20:e9:6b:a3:f9:7f:7d:ae:06:e9:c5:86:
         b6:d5:5f:fa:6f:ab:15:85:15:f2:52:cf:d7:a6:eb:a7:25:ac:
         2d:84:6b:36:5e:2a:53:7a:77:d9:ff:f9:f9:44:56:31:95:37:
         c8:7c:ed:91:e6:d3:d0:da:ca:5c:ad:3f:8b:40:94:5a:f5:54:
         15:e4:ff:cf:eb:68:32:dd:50:7c:df:64:a0:23:1e:43:19:1c:
         1f:91:0f:7a:95:0e:95:7b:05:c7:49:2d:f3:aa:4c:ef:ae:c3:
         be:a2:4b:6f:b2:f5:e0:c2:cc:82:3b:d0:6a:31:7a:b5:7e:53:
         f3:47:32:f6:fa:ed:86:4e:92:8a:2a:cc:01:e5:33:fe:87:91:
         f7:29:b4:66:db:27:e3:40:15:cc:ef:11:08:a8:ca:10:3e:92:
         db:94:68:c6:54:a7:8c:6a:f3:17:e1:8f:0f:d8:33:a0:ff:76:
         ac:77:02:27:74:a2:61:2b:96:3f:d6:f2:6e:da:8c:db:73:d4:
         10:b4:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org