Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9384.roa
File:                     AS9384.roa (raw, json)
Hash identifier:          x42+RYSKCMa5BQJIztEkzOscLeNKSzcc/n9IDpsCX5E=
Subject key identifier:   9A:C3:6B:F4:60:B9:EE:62:FD:FA:69:48:DD:8F:D9:16:BD:86:DD:55
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       05E208F234348B00D136F9EDD85DA27F11C2779B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9384.roa
Signing time:             Thu 01 Aug 2024 08:48:59 +0000
ROA not before:           Thu 01 Aug 2024 08:43:59 +0000
ROA not after:            Thu 31 Jul 2025 08:48:59 +0000
asID:                     9384
IP address blocks:        157.254.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e2:08:f2:34:34:8b:00:d1:36:f9:ed:d8:5d:a2:7f:11:c2:77:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  1 08:43:59 2024 GMT
            Not After : Jul 31 08:48:59 2025 GMT
        Subject: CN=9AC36BF460B9EE62FDFA6948DD8FD916BD86DD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:85:a1:c5:4c:34:20:58:eb:52:47:ce:b8:
                    bd:5c:c4:7c:97:31:0d:1d:b3:a9:e6:d8:a5:56:0b:
                    1d:f0:39:7c:0b:2d:18:11:c4:21:3e:2e:a1:74:54:
                    b3:a7:77:47:a4:5f:b8:7c:ff:66:54:bb:1d:9e:de:
                    20:f6:21:ff:85:4c:65:29:14:40:14:fa:f8:95:3a:
                    be:05:96:1f:36:e7:c3:4b:92:0c:1d:c8:46:79:10:
                    1c:81:b8:d6:b1:93:45:6c:e8:20:2d:87:8a:da:ef:
                    67:da:85:49:3e:80:90:a7:2d:11:c1:f4:70:b6:bb:
                    78:8a:33:94:b0:2c:66:f6:f5:3e:98:72:29:85:ca:
                    92:39:9c:54:54:cd:b9:c3:67:d4:9f:ba:75:3f:d0:
                    6d:56:32:74:f9:dd:bf:64:0b:be:c2:81:20:bc:f2:
                    27:79:de:f7:83:23:49:71:68:80:7e:56:2b:2e:43:
                    98:f8:68:f2:d1:db:30:ac:03:d1:3c:28:80:50:b5:
                    a2:e3:d6:36:f4:03:e1:37:b3:9d:42:b8:bf:8e:94:
                    0d:4b:fc:70:cf:6b:33:e0:ec:a3:d1:23:d9:cc:e7:
                    72:7f:5d:88:dd:67:cd:fd:83:91:1a:ce:3f:e3:97:
                    2c:78:e1:69:ea:34:cb:3c:22:01:47:ef:cd:6a:69:
                    1a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:6B:F4:60:B9:EE:62:FD:FA:69:48:DD:8F:D9:16:BD:86:DD:55
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:63:6f:9e:af:95:bd:39:30:91:8b:c8:20:02:b7:c6:65:
         3f:9e:9d:68:08:5a:21:7a:b8:92:38:40:6c:a4:9d:cc:68:b9:
         f6:cd:c5:ef:72:0b:e1:ec:d1:01:ec:94:52:e4:54:31:9a:1a:
         6d:be:ef:ee:37:2c:86:67:d5:65:6f:37:aa:3a:2f:3b:81:74:
         47:ae:91:fd:34:a4:f3:4c:f1:09:b7:77:82:d1:95:f0:e7:5b:
         10:1f:64:f3:57:76:51:af:0d:b0:1a:24:80:e1:08:7b:2b:ea:
         68:08:4b:2d:32:ac:73:b4:33:f1:da:f7:b3:61:7f:85:f7:31:
         28:45:12:57:03:67:16:3d:e3:75:56:e4:52:aa:39:00:0e:55:
         d7:2c:14:f6:da:be:8f:b4:2b:02:e4:28:1f:58:d1:4e:5b:8b:
         53:ee:19:27:57:d2:42:f5:75:35:23:c6:23:ee:ae:91:75:1d:
         d2:d0:6e:f5:3d:d5:52:84:c7:a6:c7:c4:81:d1:d4:df:b4:6b:
         7b:99:2d:54:ca:52:f2:70:b3:98:5c:04:e0:73:11:b9:2a:06:
         84:9e:86:05:22:43:a7:4c:4e:e9:e0:c2:2d:d4:6b:b1:7e:83:
         e5:3b:2c:40:c3:65:7f:9c:99:7a:37:19:7b:a4:59:e5:c6:44:
         03:ea:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org