Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa
File:                     AS7224.roa (raw, json)
Hash identifier:          t5m8cq7h1WUVzD+l/n47hfBZyuE7dnDQlEkhQGHfAqw=
Subject key identifier:   C5:E2:F7:3B:1D:30:6B:21:92:29:97:3B:26:01:C2:BA:F0:B9:30:4F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       75064A7516511B434F62EB0E0B012E859A6A4675
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa
Signing time:             Thu 01 Aug 2024 08:48:59 +0000
ROA not before:           Thu 01 Aug 2024 08:43:59 +0000
ROA not after:            Thu 31 Jul 2025 08:48:59 +0000
asID:                     7224
IP address blocks:        157.254.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:06:4a:75:16:51:1b:43:4f:62:eb:0e:0b:01:2e:85:9a:6a:46:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  1 08:43:59 2024 GMT
            Not After : Jul 31 08:48:59 2025 GMT
        Subject: CN=C5E2F73B1D306B219229973B2601C2BAF0B9304F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:37:92:18:66:ad:82:86:be:36:88:d5:82:
                    54:24:67:66:6b:75:3a:68:80:4c:fe:04:d3:c7:4d:
                    9c:04:3b:9c:47:4a:06:f8:9c:fd:e6:76:5f:2b:80:
                    6f:0b:4c:9c:b7:05:de:1d:72:0c:5b:a6:76:fe:02:
                    92:e8:50:64:37:e7:91:b8:95:ab:65:20:6e:06:f7:
                    83:43:cf:fa:94:47:35:44:dd:30:9d:82:93:7e:a9:
                    66:9a:3d:33:0f:51:a5:7a:19:a6:e3:09:79:a0:e7:
                    83:51:b1:61:91:e5:61:df:3a:af:4f:c2:6b:73:9e:
                    9e:71:21:0c:e8:52:f5:41:0a:7e:3c:90:9a:95:d7:
                    48:95:22:54:ee:c9:24:7e:27:ea:ed:92:86:17:5a:
                    80:62:0b:0e:36:40:6c:b0:f3:7b:f9:21:ff:37:50:
                    92:16:4c:6b:48:44:dd:81:b9:b9:fe:e6:99:4f:5f:
                    1f:1a:b5:de:a8:f7:01:d6:c8:6f:72:7e:17:c5:1f:
                    1d:70:10:3a:a6:47:7c:80:1f:36:23:b5:8a:e2:3d:
                    12:74:a8:65:0b:df:be:ef:99:16:0e:5b:50:83:a1:
                    a4:a9:6e:92:41:13:e2:93:1d:60:59:62:c0:f7:01:
                    93:22:a2:93:59:e8:e0:29:c1:09:54:97:ba:c5:15:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:F7:3B:1D:30:6B:21:92:29:97:3B:26:01:C2:BA:F0:B9:30:4F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:b0:7c:56:b0:85:65:f4:0e:73:af:0a:fc:34:a1:3e:e3:a3:
         a1:b8:c8:f3:e2:83:9c:30:46:b8:b5:8d:3b:90:6e:7c:78:80:
         f8:ac:30:64:72:05:0b:f6:15:65:98:8a:ba:2e:d3:99:08:68:
         7f:be:3e:ea:9e:4a:30:bd:80:c6:a1:41:4f:98:b5:23:18:66:
         5c:7d:c9:c1:8c:b7:47:ae:63:10:d7:43:da:c6:42:e5:3b:a3:
         6e:a0:19:49:ce:29:c3:d8:51:28:07:e4:9f:dc:96:6c:d1:2d:
         e3:13:c1:39:a8:e7:3a:26:8b:6a:17:d5:b0:26:be:f2:3e:38:
         6b:bb:1b:74:bb:09:dd:04:09:f2:df:fb:d0:c2:cf:12:f4:4a:
         40:09:e2:66:a8:bb:c2:0a:e3:f8:a1:61:cc:e7:ca:cb:2a:30:
         da:08:e8:1b:47:27:76:1e:2c:77:ce:49:f8:c5:be:b3:f9:7a:
         8b:1d:96:89:5a:12:90:5b:77:03:bd:fa:1f:20:1c:e8:13:5e:
         f0:2d:2b:65:dc:9e:39:be:0d:2a:05:b9:6a:dc:e5:77:b1:86:
         d5:f3:93:4c:4a:7f:a0:57:de:66:fd:db:f6:11:9f:4b:e5:3c:
         e8:99:6e:43:f7:88:d6:de:7a:75:40:fd:ac:0a:d3:26:f5:9e:
         b6:06:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org