Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151592.roa
File:                     AS151592.roa (raw, json)
Hash identifier:          5aeqGj3mTKO9j9/P7pk0fWgBkwCTJa1elCJwTsdg+kU=
Subject key identifier:   5A:8E:12:A5:3D:EC:5E:C1:3C:3D:8D:B0:6C:94:BF:C2:30:D9:EF:C0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       467F31A6798F73A1A1B60896D49A27D2028806E4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151592.roa
Signing time:             Thu 13 Mar 2025 07:26:53 +0000
ROA not before:           Thu 13 Mar 2025 07:21:53 +0000
ROA not after:            Thu 12 Mar 2026 07:26:53 +0000
asID:                     151592
IP address blocks:        208.76.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7f:31:a6:79:8f:73:a1:a1:b6:08:96:d4:9a:27:d2:02:88:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 13 07:21:53 2025 GMT
            Not After : Mar 12 07:26:53 2026 GMT
        Subject: CN=5A8E12A53DEC5EC13C3D8DB06C94BFC230D9EFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:f4:61:8c:a4:7b:ad:64:98:30:59:4e:78:
                    d7:e6:60:b2:a1:d2:f2:23:54:dc:3e:e1:86:c5:5b:
                    21:3c:53:6d:d1:08:5c:1e:ac:1c:1a:5a:29:a6:b6:
                    c4:af:cb:f6:e1:57:91:d2:7f:02:ac:85:02:91:46:
                    c6:3a:7c:fb:fc:ce:10:f2:0d:92:28:c2:0a:6f:c6:
                    53:c1:89:ea:24:fb:5a:d7:5b:ec:50:71:4e:3e:2a:
                    c9:24:51:91:b1:53:42:85:f2:01:11:4e:35:25:8b:
                    67:be:ae:49:10:28:92:8d:fd:90:83:00:c0:48:fe:
                    6b:b9:33:9b:5c:72:83:39:7c:6a:51:31:65:54:c6:
                    0c:ef:a8:d5:80:1f:f1:2b:56:1a:de:eb:62:9e:82:
                    26:65:ba:40:3b:8b:1e:bc:f6:d2:5d:19:02:f6:60:
                    03:2f:03:ed:eb:02:80:ff:4a:53:c5:1b:9e:7e:a0:
                    2c:cb:0c:6e:19:75:4a:14:26:a0:d6:45:6a:14:50:
                    71:48:42:37:9d:69:3d:44:ac:5d:07:ae:47:ba:c8:
                    47:23:8d:54:ab:f5:af:9b:0d:e6:0c:f3:98:0e:7c:
                    fd:cd:da:69:fe:54:44:e3:60:c2:17:e7:69:e0:d2:
                    32:9d:81:21:28:fa:e1:12:ce:4c:94:16:e6:11:9d:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:12:A5:3D:EC:5E:C1:3C:3D:8D:B0:6C:94:BF:C2:30:D9:EF:C0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:84:93:98:cb:09:28:de:83:74:9e:42:70:31:7b:74:d5:e3:
         8c:1d:f4:56:c1:55:1e:ef:94:2e:51:ce:1b:b5:32:aa:8e:c2:
         1e:48:5a:75:20:3a:4c:d1:02:f9:fa:ea:22:f2:ea:8c:7c:d2:
         5c:39:7e:7b:15:79:96:ef:97:53:9d:db:3c:6e:c2:94:47:b9:
         57:7b:94:ab:79:a4:57:76:3e:d5:84:7d:07:58:2b:49:2a:b1:
         29:bc:ea:f6:2d:32:58:71:8d:e2:c5:dd:ca:a2:0a:78:16:89:
         7a:ff:56:50:e6:bb:2b:5e:2d:88:e0:07:ed:13:67:9e:82:67:
         5b:f4:fd:f2:c2:ba:53:59:59:f3:61:9b:0f:33:db:dc:b0:5b:
         8a:9e:fe:84:af:b5:4e:c0:21:b6:36:a2:05:1a:71:9a:ee:95:
         07:bb:a7:bd:9f:3b:4e:b4:36:4e:a9:59:5f:15:0d:5c:57:f8:
         c8:a7:08:ca:22:8c:ee:72:be:c1:95:35:6f:b5:bd:73:52:94:
         cc:48:d8:5e:b3:97:cb:11:27:11:4e:6e:f5:15:ad:68:0e:82:
         dc:04:be:9c:c3:47:38:7d:42:10:5f:f6:07:54:95:ff:18:2f:
         10:e0:f3:66:d0:a5:03:d5:b6:49:94:1a:fa:e7:30:00:56:36:
         38:86:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:30 2025 by rpki-client