Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS400529.roa
File:                     AS400529.roa (raw, json)
Hash identifier:          25QtcpjA3tz4ke2qcHNeojZWMrPORJrD4OR8yfdQF5o=
Subject key identifier:   C5:2B:78:A9:CB:A1:0B:7D:6C:5E:C2:40:10:0A:72:1A:44:51:D2:BB
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       1B1585842B8494CBF4E7D72385798D05528DE401
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS400529.roa
Signing time:             Fri 15 Nov 2024 18:38:31 +0000
ROA not before:           Fri 15 Nov 2024 18:33:31 +0000
ROA not after:            Fri 14 Nov 2025 18:38:31 +0000
asID:                     400529
IP address blocks:        205.234.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:15:85:84:2b:84:94:cb:f4:e7:d7:23:85:79:8d:05:52:8d:e4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:31 2024 GMT
            Not After : Nov 14 18:38:31 2025 GMT
        Subject: CN=C52B78A9CBA10B7D6C5EC240100A721A4451D2BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:e7:e5:e5:a1:5b:fc:e1:61:57:7c:2f:b1:
                    d3:a4:0f:63:71:72:04:74:4e:f3:a6:f4:0c:7b:a7:
                    eb:fd:aa:1f:80:ce:9a:a1:be:a7:39:a4:5d:9d:1e:
                    70:42:d2:a6:b8:1d:5f:f7:07:01:dc:70:fc:9d:14:
                    21:fd:dd:2f:26:99:ee:ca:a4:b5:12:43:a5:88:26:
                    06:5d:a1:a6:50:fa:87:ad:44:f6:07:1c:1a:88:69:
                    8b:a6:42:44:0b:fb:8e:dc:db:82:dc:7d:7e:1d:9c:
                    7d:f8:9c:24:9a:fc:ec:98:61:39:52:68:55:33:9c:
                    48:b0:d0:87:c7:07:5e:b8:0a:6f:5f:5c:fb:5f:8b:
                    15:6d:71:d8:53:d4:1e:12:a3:8c:cf:ad:40:f1:40:
                    73:26:52:ed:5b:84:3d:3f:5e:eb:81:6c:fb:51:13:
                    bc:a7:c4:78:5b:b6:7c:85:f4:ac:72:2a:a2:2f:fd:
                    14:28:07:32:57:3a:3f:27:03:96:84:31:9f:8e:4b:
                    06:fa:cc:dd:a2:c6:46:97:12:73:07:1a:29:4d:e8:
                    7e:12:1f:f9:e1:5a:a4:e3:90:d7:95:58:dc:9f:3b:
                    05:bb:90:5e:bc:1e:aa:ac:92:17:3a:17:11:44:26:
                    ea:74:9b:05:5e:eb:5f:04:2f:da:6c:58:b6:4c:7c:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:78:A9:CB:A1:0B:7D:6C:5E:C2:40:10:0A:72:1A:44:51:D2:BB
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS400529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:65:68:bd:8f:26:37:83:97:ff:da:3c:2c:4d:04:9a:53:d8:
         45:e1:bb:3a:2c:ba:25:4e:5a:be:ce:a1:21:28:05:37:b3:f3:
         1c:f5:58:e6:7a:e0:fe:79:f8:c6:7a:eb:88:4c:1f:0a:a2:8a:
         dc:55:49:74:8b:8d:57:e3:54:73:89:30:86:3d:32:87:be:81:
         43:19:36:c4:13:80:01:21:83:12:0b:eb:10:a8:67:d2:8d:aa:
         5a:84:5c:ca:76:f7:04:c3:32:14:5e:24:cb:bc:e5:a4:19:d4:
         0c:af:e1:5d:a8:28:b1:0c:e9:e6:8d:fa:f1:0b:e5:b6:16:ba:
         4d:ef:26:fa:93:4f:93:e2:dc:0c:86:dd:7c:bc:e7:64:fa:d2:
         fa:2f:71:71:f0:d1:b5:95:2e:8d:a6:38:f5:ee:2c:b7:75:a2:
         a4:48:c8:63:d8:49:4a:58:58:de:de:eb:3a:54:2c:c2:44:05:
         6b:6d:f4:9b:a5:b8:b1:35:f0:45:7c:a1:ed:04:b8:b3:08:c1:
         a4:84:a6:f3:f1:1c:d8:5b:7e:b8:e9:d5:6c:76:60:13:33:1c:
         ae:75:0a:c6:09:1e:56:a0:2b:d3:23:09:6d:cb:2f:58:b6:e3:
         55:58:01:a8:04:17:e1:0a:26:8f:9d:9c:1b:20:df:64:c9:09:
         91:d1:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:40 2024 by rpki-client on console-fra.rpki-client.org