Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150249.roa
File:                     AS150249.roa (raw, json)
Hash identifier:          OmZ6mvOG4eOH3w4d8sDU+XEvXoozx9ivTovez8533ok=
Subject key identifier:   73:C3:9A:CA:10:6F:1C:D1:A3:96:AC:63:EE:BD:F2:CC:20:C5:18:92
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       566AFE607704FB6A73902466511275122C1C13FB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150249.roa
Signing time:             Mon 03 Mar 2025 17:19:56 +0000
ROA not before:           Mon 03 Mar 2025 17:14:56 +0000
ROA not after:            Mon 02 Mar 2026 17:19:56 +0000
asID:                     150249
IP address blocks:        89.35.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6a:fe:60:77:04:fb:6a:73:90:24:66:51:12:75:12:2c:1c:13:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar  3 17:14:56 2025 GMT
            Not After : Mar  2 17:19:56 2026 GMT
        Subject: CN=73C39ACA106F1CD1A396AC63EEBDF2CC20C51892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:bf:06:eb:3a:0e:94:6f:69:10:cf:49:9e:
                    cb:65:9f:55:66:6c:40:8a:60:c0:ba:72:55:03:8c:
                    de:da:9e:60:22:50:28:e4:0e:7b:80:c7:0a:79:1e:
                    4a:8c:08:51:2a:3c:53:85:4b:f2:be:e4:98:88:c3:
                    aa:dc:68:4d:e1:b9:15:10:8c:6c:12:81:b9:72:57:
                    6a:16:39:5e:79:40:b8:dc:9e:22:55:bf:d9:7a:8f:
                    c8:a7:c6:62:a5:2a:bf:86:c5:51:b3:3c:b3:25:2c:
                    56:7f:4b:05:34:a9:fd:79:4d:fd:4b:0d:97:65:ca:
                    c4:24:3c:f0:4e:5f:52:df:c1:8b:1b:0a:74:e5:e4:
                    84:61:f4:b7:23:bc:e2:42:da:d9:ce:00:7e:5b:7d:
                    c0:42:89:e2:47:46:aa:55:f8:20:e5:05:78:78:ff:
                    a7:74:37:82:db:f4:1d:f5:da:d8:3c:4f:b2:b9:7f:
                    02:61:61:fb:06:54:4a:bf:a8:da:a2:d8:39:6d:3a:
                    3b:79:ba:07:44:81:fd:fc:a3:93:32:4c:e0:28:1d:
                    27:97:f2:5b:8c:35:66:42:1a:c0:4a:17:80:7d:05:
                    8a:b4:e9:be:20:05:c2:9d:ac:bb:bf:d1:f5:49:61:
                    99:5f:ce:cd:97:77:45:18:9d:46:0a:ba:48:ce:de:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:9A:CA:10:6F:1C:D1:A3:96:AC:63:EE:BD:F2:CC:20:C5:18:92
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150249.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:52:76:ac:d7:82:da:0a:de:fb:e8:bf:de:3a:3f:3f:52:
         5d:9a:39:2f:3c:48:c6:25:34:23:86:a4:f0:7b:ab:2e:66:5c:
         15:29:e4:3d:7a:b4:fe:0f:b4:5d:94:6f:3f:0b:c3:af:12:ed:
         4a:c5:a5:d5:db:e9:10:4e:de:0c:fc:42:d6:81:72:0e:35:eb:
         f3:f7:7e:32:8b:af:b6:c7:5a:2d:b2:3d:d1:ef:a0:ea:c9:0f:
         12:a5:74:e5:ce:16:8f:8f:60:ab:c5:fa:91:40:14:c8:be:c0:
         a4:dd:52:ef:5b:26:a2:fe:64:9a:39:2e:a6:16:bd:99:1f:f5:
         c6:40:f9:6a:ce:f1:b4:8b:fb:4d:36:d9:b2:7a:88:d4:d1:29:
         e3:55:d3:a7:96:ae:e9:b9:ea:df:0f:7b:97:70:1f:07:16:f7:
         4d:fb:d1:65:61:93:33:16:28:a0:cc:43:17:30:d8:67:62:dc:
         dd:9b:11:ed:33:85:9e:16:cd:87:b9:f9:7d:44:db:9f:eb:9b:
         a8:57:29:c7:7d:d8:32:ea:d2:4b:58:7e:23:42:91:ee:41:af:
         18:b7:35:df:1f:f7:e2:ff:55:1f:f5:8d:b6:79:2c:19:56:ea:
         f0:76:de:35:83:e3:1a:9d:1b:0a:91:d0:86:13:5b:ab:2e:3d:
         e6:bc:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:43 2025 by rpki-client