Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          r/KjGv0VRYs5laajLDsMBls9fqAbyJeuqp9/r+4eN7U=
Subject key identifier:   BB:9A:11:D4:3D:74:E6:2E:5B:A4:9E:F5:FB:47:51:26:C4:6C:7A:ED
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4AAF664397ACBAB7E5BB617D4FD29362249070FF
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Wed 01 May 2024 13:56:16 +0000
ROA not before:           Wed 01 May 2024 13:51:16 +0000
ROA not after:            Wed 30 Apr 2025 13:56:16 +0000
asID:                     834
IP address blocks:        157.254.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 17:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:af:66:43:97:ac:ba:b7:e5:bb:61:7d:4f:d2:93:62:24:90:70:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  1 13:51:16 2024 GMT
            Not After : Apr 30 13:56:16 2025 GMT
        Subject: CN=BB9A11D43D74E62E5BA49EF5FB475126C46C7AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:70:ab:40:fa:cc:a9:9f:e3:3e:e4:0a:f9:
                    52:73:a0:c6:05:04:15:cb:5a:04:2c:88:2e:56:50:
                    9e:18:9b:d0:64:0e:cd:30:26:09:5f:98:74:39:1b:
                    aa:77:22:c5:9e:7a:73:71:b3:eb:b8:89:9d:06:fd:
                    50:fd:59:44:8d:83:cd:21:3e:7b:06:fa:d9:43:ba:
                    e3:6f:a4:bf:35:95:c5:07:0d:87:9d:9c:83:03:78:
                    94:d5:ba:92:7d:61:d9:68:c2:1d:25:36:a2:eb:f5:
                    2d:d8:b8:a5:b8:29:ba:16:58:e3:aa:3b:a1:cd:30:
                    73:7d:3f:df:4d:1c:32:9c:14:73:a3:c6:1b:f7:fc:
                    bd:28:2d:3b:43:3a:ba:ff:d2:e8:5c:6b:b9:db:91:
                    48:64:c5:e7:72:db:15:bb:90:e5:ba:c6:0c:07:a6:
                    19:e1:5e:e0:f7:bf:54:55:c8:c0:29:7f:e1:3b:6f:
                    d6:4c:4b:39:a7:07:b2:d9:13:08:d1:33:fd:93:41:
                    86:d7:ed:34:cc:47:d9:a1:b2:da:74:c1:95:66:92:
                    ad:b1:d0:de:e7:51:c3:8f:83:1b:02:a7:b7:66:75:
                    46:67:8c:a4:8c:7d:8a:41:74:da:ea:59:e6:c3:ca:
                    b4:a2:7b:88:dd:06:df:1a:35:f6:e1:91:d5:72:60:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:11:D4:3D:74:E6:2E:5B:A4:9E:F5:FB:47:51:26:C4:6C:7A:ED
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:41:69:90:31:7e:27:7d:4b:3e:49:b2:6c:c5:e4:0c:49:23:
         33:73:00:bb:45:51:f3:6e:66:d3:8e:29:50:b1:77:1c:e5:21:
         bc:06:14:d1:4f:ac:de:ca:b1:f2:24:96:5a:0f:b5:38:67:00:
         53:67:b0:a1:c3:6d:47:a4:d8:a7:cf:4c:07:2a:8c:64:86:c4:
         b5:b4:2a:6d:ac:08:39:8e:57:8e:df:b3:dd:9c:ce:fb:b8:f6:
         cb:bb:92:85:7c:f5:eb:92:92:ba:a7:8d:fb:d2:d2:3b:8f:f1:
         90:ac:b3:ee:5c:0a:f3:27:cb:36:8b:d3:e8:d4:62:d1:a3:45:
         f9:0f:07:33:00:0e:21:90:1b:e8:35:36:d2:96:31:20:c7:22:
         e5:cb:f3:ed:e9:4a:df:f9:ec:72:95:ed:f0:90:a9:5b:d5:5d:
         13:65:98:12:45:f8:e9:33:2d:04:d7:a0:e2:e5:ea:d0:6e:74:
         53:64:41:2d:06:b1:38:13:60:ca:3d:33:47:fd:e9:64:af:64:
         2b:3d:00:2b:17:ed:55:7b:10:4c:ef:96:4d:2d:46:0f:80:27:
         af:87:b8:01:22:b5:37:c9:93:20:51:b0:84:50:45:94:50:24:
         11:57:6e:d5:df:a5:c8:d2:2c:e1:aa:10:a2:f5:20:d0:1f:37:
         00:c6:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:35:57 2024 by rpki-client on console-ams.rpki-client.org