Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa
File:                     AS51847.roa (raw, json)
Hash identifier:          tPSQ3V6rgHPDl9Zeol7TVbqYaIAl9p3vEHmTWbxEzJY=
Subject key identifier:   F0:F3:64:5B:69:CB:CD:08:89:34:88:93:70:A0:55:65:5D:16:2B:79
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4DCD5131E27C72B4F3CD79FF25EE7F542A269C45
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa
Signing time:             Wed 10 Apr 2024 09:33:08 +0000
ROA not before:           Wed 10 Apr 2024 09:28:08 +0000
ROA not after:            Wed 09 Apr 2025 09:33:08 +0000
asID:                     51847
IP address blocks:        157.254.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cd:51:31:e2:7c:72:b4:f3:cd:79:ff:25:ee:7f:54:2a:26:9c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 10 09:28:08 2024 GMT
            Not After : Apr  9 09:33:08 2025 GMT
        Subject: CN=F0F3645B69CBCD088934889370A055655D162B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:ee:b0:e5:7f:3f:30:fc:7c:09:bc:f9:6f:
                    da:77:1b:d5:6c:a2:e0:9f:71:a8:8f:b9:0d:58:94:
                    29:96:5d:9e:c3:c0:fb:d8:2f:b1:42:d4:84:a0:39:
                    59:95:9d:ae:ff:6c:a8:5e:16:24:57:d3:c2:9f:ef:
                    5e:ce:3b:cb:d8:48:fc:5d:59:2f:48:e7:00:b0:d2:
                    fb:5e:6e:22:b0:d6:06:92:f6:50:f4:fc:b1:0c:8c:
                    74:dc:c0:d5:79:92:7f:5e:cd:d1:36:35:a2:6f:f8:
                    3d:44:33:dd:cc:91:4e:37:b6:bc:38:8e:89:72:5c:
                    96:8b:0a:32:3e:8f:c0:7b:99:69:1b:4f:67:d2:77:
                    2b:a9:72:05:39:f5:66:1a:dc:7b:70:8e:22:04:0e:
                    b5:27:0f:ab:ab:24:93:cb:42:39:0c:5c:cc:9a:a7:
                    78:06:4d:26:63:eb:38:9d:65:45:6c:81:8f:92:43:
                    2a:b2:21:10:5b:62:68:bc:cd:69:54:ad:3a:79:8f:
                    b2:a5:bb:8d:d1:60:1b:a7:17:37:88:74:d0:40:7a:
                    22:06:f1:05:be:67:05:18:ed:6a:d9:fc:38:ef:05:
                    53:07:ec:d8:70:f3:c4:41:8f:ca:7b:13:e0:41:62:
                    bf:fa:84:67:c6:2c:b2:fd:b9:f7:fe:fd:11:63:91:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:64:5B:69:CB:CD:08:89:34:88:93:70:A0:55:65:5D:16:2B:79
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:24:12:b9:44:6b:13:a0:72:1c:12:57:70:c3:73:48:59:
         dd:a8:af:f5:17:78:03:c8:c8:d8:52:cd:40:49:83:37:ac:6f:
         cb:6f:14:c7:8d:82:cb:c3:10:b5:52:3a:3f:c8:d4:c9:90:af:
         6d:46:3e:4b:90:7d:09:14:d6:0f:e6:6f:bd:02:62:46:d9:1b:
         a0:03:5c:18:69:c7:11:be:15:27:14:8d:66:e5:87:3b:60:ef:
         ec:31:08:12:b0:3e:24:37:01:44:95:99:fd:67:69:b9:6a:3a:
         b3:05:3e:0f:4c:fd:e0:9b:00:ae:dd:41:16:a8:cf:d1:db:5d:
         1c:f6:54:bf:3c:e6:d7:b4:63:7f:98:40:9a:9f:63:93:72:71:
         d7:bb:fe:1b:4a:4a:2a:0d:23:bc:c2:6b:b8:a8:03:6c:8b:22:
         09:bc:df:33:ba:17:56:86:46:a3:c8:70:90:3d:c9:de:e0:c0:
         bb:27:7a:2b:1f:8e:f9:19:39:9a:60:5f:ad:c5:4d:f8:ff:7c:
         3c:74:8e:ec:ab:6e:87:1d:9b:28:6b:04:21:0c:8f:bf:3d:78:
         8f:06:d9:6d:25:04:42:23:31:c6:fb:79:b9:df:2c:e8:b6:b6:
         a0:b0:00:f8:64:d7:a1:16:27:e4:4d:47:9d:d2:1d:6f:bb:74:
         d4:d4:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:08 2024 by rpki-client on console-fra.rpki-client.org