Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa
File:                     AS7224.roa (raw, json)
Hash identifier:          tO3rEXt/118FgQQU2JBrI2xFLPXW6TfHobNEjfLL3DM=
Subject key identifier:   DC:AB:A0:5C:79:D2:31:0B:E0:B2:8B:E3:1A:96:71:F4:43:8D:2A:C5
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3192775C53FC32160C928A1080F019AB6DA438D1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa
Signing time:             Thu 31 Aug 2023 07:52:11 +0000
ROA not before:           Thu 31 Aug 2023 07:47:11 +0000
ROA not after:            Thu 29 Aug 2024 07:52:11 +0000
asID:                     7224
IP address blocks:        157.254.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:92:77:5c:53:fc:32:16:0c:92:8a:10:80:f0:19:ab:6d:a4:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:11 2023 GMT
            Not After : Aug 29 07:52:11 2024 GMT
        Subject: CN=DCABA05C79D2310BE0B28BE31A9671F4438D2AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:68:fe:aa:e0:35:a1:07:5f:8d:f7:71:31:
                    5f:c7:dc:aa:fe:4f:9d:e4:67:3d:91:dd:1e:2c:a7:
                    db:1c:7b:81:37:7d:e5:62:55:d2:21:64:c3:e7:be:
                    02:02:10:e2:21:b9:ed:2a:e3:d8:39:fa:1c:58:ef:
                    70:58:40:e9:8f:8e:34:9c:b3:8d:fa:69:fe:18:ad:
                    01:cc:5d:69:c4:b5:69:c4:26:b7:5e:ec:f5:a4:d9:
                    d5:f1:fd:48:6c:65:f6:3c:7a:da:cb:3e:8a:49:a1:
                    d2:b1:01:29:9f:80:88:57:ab:ff:34:d7:ad:0e:4d:
                    58:6a:4e:96:90:29:af:cc:79:d8:01:a2:2d:6f:ab:
                    3b:80:e3:42:30:7e:d7:99:2e:67:c3:4d:07:6b:e2:
                    29:a8:df:dc:e0:b0:81:77:22:46:d5:da:a4:8b:61:
                    72:52:91:ad:bf:6c:df:0d:8e:39:11:14:fd:d6:93:
                    99:6c:68:5f:f1:e2:9e:f3:3a:bf:f3:f0:1c:a7:0a:
                    83:29:49:c8:f8:17:ad:7d:9c:61:47:fd:41:b0:9a:
                    af:c3:e2:57:05:73:29:6b:5b:a0:1e:b7:b5:36:c5:
                    3f:6c:fe:f2:ca:eb:5c:1d:b9:8d:06:df:81:65:11:
                    26:01:75:67:1a:6f:b2:f8:da:22:39:12:69:11:66:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:A0:5C:79:D2:31:0B:E0:B2:8B:E3:1A:96:71:F4:43:8D:2A:C5
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:ee:fb:2c:e8:e7:cb:d9:c0:81:ed:ba:2b:aa:93:5f:4f:
         ea:01:4d:36:70:27:66:8c:76:39:73:87:28:b4:d7:ca:d5:81:
         53:12:47:74:eb:b8:68:07:01:0f:23:f4:73:08:27:68:17:6e:
         de:8e:7b:3c:fe:34:53:47:f0:67:4c:f8:68:84:9d:30:21:45:
         ad:39:08:b4:08:bd:9c:45:3d:1a:7c:4c:12:cb:c2:05:b7:c6:
         20:9d:2d:b9:a1:43:fe:d8:29:e4:d3:9e:69:ef:70:be:f7:32:
         35:aa:2a:8c:88:15:cd:39:4b:3c:3c:f1:04:95:06:cc:2b:e5:
         de:e3:64:f9:bf:07:c1:61:d0:61:af:52:16:9c:9e:61:92:cd:
         a6:a2:05:91:1c:33:53:fc:85:f1:22:d8:63:3a:20:91:7d:c8:
         0c:a7:62:01:52:ce:49:e7:68:d5:03:28:1b:a0:5b:42:d2:2a:
         6f:c9:5c:e1:f9:e1:a2:9d:ed:9b:62:79:7b:75:28:a8:78:bb:
         89:c5:c5:47:21:77:7a:c6:13:c0:07:ca:55:ef:dd:26:e8:49:
         b4:02:91:6a:ba:14:14:4b:e3:71:cd:2e:12:e8:e9:82:38:60:
         89:fd:6e:7d:f1:af:34:c0:75:a9:d7:bb:55:03:89:1d:93:33:
         72:b5:6e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org