Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa
File:                     AS51847.roa (raw, json)
Hash identifier:          iyWb28/wb6Fyi4l9CU+TiFK9Z0FoiNVbKeL+XF8wa7A=
Subject key identifier:   64:99:09:E8:EA:3B:D6:9D:90:4F:26:3B:6E:52:4D:22:31:96:A8:31
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7929184A763D3905761920904683A9D056632758
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa
Signing time:             Sat 10 Aug 2024 06:49:01 +0000
ROA not before:           Sat 10 Aug 2024 06:44:01 +0000
ROA not after:            Sat 09 Aug 2025 06:49:01 +0000
asID:                     51847
IP address blocks:        157.254.38.0/23 maxlen: 24
                          157.254.178.0/23 maxlen: 24
                          157.254.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:29:18:4a:76:3d:39:05:76:19:20:90:46:83:a9:d0:56:63:27:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 10 06:44:01 2024 GMT
            Not After : Aug  9 06:49:01 2025 GMT
        Subject: CN=649909E8EA3BD69D904F263B6E524D223196A831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:cb:ac:96:0e:08:68:89:95:74:1e:4f:1a:
                    5e:3a:a4:93:b6:c8:bd:58:c5:23:93:1b:7e:6e:89:
                    cf:f5:70:dd:7e:07:df:4e:25:07:71:4f:fa:1f:9b:
                    7c:f8:d3:e5:85:c8:96:d9:09:86:3d:59:de:d1:6e:
                    b9:81:b3:26:8e:df:ef:83:a0:b5:14:bc:32:27:a7:
                    16:84:a7:7b:ff:63:b6:e0:2f:79:e2:a5:12:f8:07:
                    cc:01:e8:b1:f7:b5:5d:e4:a1:b2:a5:6e:0b:34:b5:
                    11:99:68:b3:20:a6:11:8a:09:f4:3e:63:d4:09:63:
                    e5:50:e8:fb:ba:a9:e2:cd:88:10:dc:f9:32:54:ad:
                    5f:c9:ff:ec:db:29:9c:a7:9e:de:4b:65:90:ee:24:
                    69:be:df:9e:ad:53:5e:6b:e3:57:db:1c:b8:ca:62:
                    7d:63:aa:3d:61:8c:be:6f:d5:ff:d2:46:98:a1:e8:
                    29:3a:3f:44:48:72:97:6c:ea:6a:47:77:ee:0b:81:
                    45:2b:a9:bb:1a:36:0c:50:27:71:0e:9b:a9:72:35:
                    20:5d:25:29:05:f6:55:70:8e:20:89:35:f9:81:96:
                    a7:55:5a:72:a1:96:cf:c5:5c:49:0c:1f:b8:43:12:
                    55:ea:72:8e:13:af:70:b2:93:f2:d1:87:42:cb:0c:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:09:E8:EA:3B:D6:9D:90:4F:26:3B:6E:52:4D:22:31:96:A8:31
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.38.0/23
                  157.254.178.0/23
                  157.254.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:99:13:bf:10:51:d3:b1:cf:e4:a5:26:33:06:3d:68:63:f5:
         38:fb:24:1c:03:dc:af:88:86:8a:6b:ea:bc:ba:5c:e5:39:dd:
         e9:4a:ba:57:66:f8:03:04:2e:81:a4:07:d3:65:3e:78:b3:ed:
         19:25:43:9e:4b:16:16:6a:b6:84:bb:fb:43:16:69:ed:9d:79:
         25:a8:ef:99:02:5b:a8:dc:ef:23:40:b9:20:77:20:7f:b6:ba:
         5b:ca:7e:1e:ce:05:71:cd:f5:ee:6c:12:73:29:94:4c:f3:95:
         70:ab:5b:0e:62:d8:d3:29:cb:a4:1d:a4:19:45:ba:6e:23:1a:
         dc:64:f8:fc:dd:cc:f6:5d:3c:fe:7f:b6:d9:3c:db:e6:e3:b3:
         f5:32:9c:ed:f6:8d:8b:8f:30:9a:02:14:ee:b5:b7:bf:57:80:
         54:bb:dd:54:04:84:3e:ef:d7:f9:c5:f6:d4:75:ea:16:16:e9:
         31:df:69:d6:dd:9f:88:32:05:36:9f:fc:77:d5:3f:de:2a:87:
         c2:e3:20:b6:b3:5c:41:87:b4:78:0d:28:a1:a2:50:9e:8c:c9:
         82:12:9d:27:c7:69:be:28:e5:dd:95:f4:35:4e:6e:14:c5:8b:
         93:5b:29:5c:8b:c5:db:db:16:3e:49:6f:74:09:06:77:74:bf:
         56:30:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org