Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151704.roa
File:                     AS151704.roa (raw, json)
Hash identifier:          7DDGbXIzfCW1eUfmUS2Onl034MFJl/amZWF19ncAoKw=
Subject key identifier:   AB:3E:BB:F7:3B:3A:C2:91:27:E4:C7:CF:B4:AD:D9:D3:E5:A8:AF:CC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0F717C34A7DA55BD0B3DC209E73FFEC8C142E585
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151704.roa
Signing time:             Mon 06 Jan 2025 17:48:30 +0000
ROA not before:           Mon 06 Jan 2025 17:43:30 +0000
ROA not after:            Mon 05 Jan 2026 17:48:30 +0000
asID:                     151704
IP address blocks:        157.254.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:71:7c:34:a7:da:55:bd:0b:3d:c2:09:e7:3f:fe:c8:c1:42:e5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan  6 17:43:30 2025 GMT
            Not After : Jan  5 17:48:30 2026 GMT
        Subject: CN=AB3EBBF73B3AC29127E4C7CFB4ADD9D3E5A8AFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:b0:04:cb:dd:df:47:b2:83:e1:98:c0:6a:
                    94:f9:34:a0:c7:85:48:54:51:f0:61:27:90:6e:f8:
                    c3:22:26:f7:09:64:ef:af:5d:9d:e0:06:7c:e2:f4:
                    e4:a0:8a:69:a0:a9:3c:46:2d:e5:e1:9a:3c:92:ce:
                    18:66:4f:6d:da:c6:2c:89:73:6e:cb:00:3a:d3:66:
                    f9:ff:c4:ef:1a:2d:82:ef:36:28:9f:72:59:14:85:
                    f9:a0:e6:4b:23:62:3a:b8:16:e8:a0:53:6f:17:f9:
                    cf:0c:56:d3:2a:d4:b3:e2:b1:f1:e8:dd:39:db:a6:
                    38:f3:02:29:e7:18:08:ca:b7:72:b2:40:aa:62:92:
                    1a:05:88:4b:76:1b:1a:e8:b6:bb:82:9e:63:8d:33:
                    81:58:ac:e8:b7:b9:9a:26:2a:8c:ba:b8:48:9d:f4:
                    62:1e:9f:e7:d2:02:82:5d:20:5a:2e:04:3d:dc:1a:
                    91:51:f0:50:7f:10:17:7d:e8:45:0c:68:c9:ab:1a:
                    41:ad:99:68:da:5d:d7:66:02:5e:bc:65:d6:a7:02:
                    60:fb:37:3b:d6:47:6b:9c:e1:fe:90:09:70:46:7b:
                    ab:08:1e:79:ea:f3:47:3a:98:9f:b9:cd:31:d5:49:
                    6e:a5:d7:48:5a:a5:82:62:76:18:01:f3:ba:32:22:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:BB:F7:3B:3A:C2:91:27:E4:C7:CF:B4:AD:D9:D3:E5:A8:AF:CC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151704.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e5:64:81:4a:ee:ad:ab:0f:87:36:b1:78:e3:50:f6:75:f8:
         f5:7d:02:a8:50:cd:53:c1:0d:de:84:37:d9:6c:d0:63:5c:e7:
         d6:48:6d:c6:e3:a1:bb:f1:db:95:49:26:7b:52:b4:c1:49:39:
         cd:53:dd:34:ec:64:90:6c:4e:b8:5e:d1:3b:b8:5c:c1:e6:99:
         f9:cc:3b:ed:d1:c8:d0:2b:f0:bc:11:35:ff:16:8c:c9:c6:66:
         93:84:81:74:dd:0c:53:ed:16:37:20:23:dc:62:ba:e7:23:6e:
         6f:04:5e:58:76:08:64:8d:a7:96:5f:61:20:20:8d:23:06:29:
         8c:96:af:7b:f8:f1:fd:c8:50:9c:ab:29:f7:dd:00:25:41:31:
         00:71:e0:a0:40:cb:4c:1a:62:19:36:1e:7a:b5:bc:8b:a5:b7:
         b0:cc:cb:d4:e4:6f:3e:1c:1a:64:96:e0:bb:25:13:40:8c:7f:
         02:9f:c9:64:52:7e:b9:e8:4d:5b:da:63:00:f4:a5:69:ee:0f:
         64:c3:ee:99:77:43:20:d0:ab:fa:9e:78:64:d1:d0:84:36:35:
         97:d8:65:df:1e:93:f2:6f:6e:4e:df:01:10:98:84:86:f0:18:
         f3:29:b3:3b:0a:7a:5e:14:95:5e:11:15:93:26:29:a9:ad:ce:
         6c:db:b9:00
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUD3F8NKfaVb0LPcIJ5z/+yMFC5YUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTA2MTc0MzMwWhcNMjYwMTA1MTc0ODMw
WjAzMTEwLwYDVQQDEyhBQjNFQkJGNzNCM0FDMjkxMjdFNEM3Q0ZCNEFERDlEM0U1
QThBRkNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l+wBMvd30ey
g+GYwGqU+TSgx4VIVFHwYSeQbvjDIib3CWTvr12d4AZ84vTkoIppoKk8Ri3l4Zo8
ks4YZk9t2sYsiXNuywA602b5/8TvGi2C7zYon3JZFIX5oOZLI2I6uBbooFNvF/nP
DFbTKtSz4rHx6N0526Y48wIp5xgIyrdyskCqYpIaBYhLdhsa6La7gp5jjTOBWKzo
t7maJiqMurhInfRiHp/n0gKCXSBaLgQ93BqRUfBQfxAXfehFDGjJqxpBrZlo2l3X
ZgJevGXWpwJg+zc71kdrnOH+kAlwRnurCB556vNHOpifuc0x1UlupddIWqWCYnYY
AfO6MiK/NwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKs+u/c7OsKRJ+THz7St2dPl
qK/MMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE1MTcwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+GDANBgkqhkiG9w0BAQsFAAOC
AQEAduVkgUrurasPhzaxeONQ9nX49X0CqFDNU8EN3oQ32WzQY1zn1khtxuOhu/Hb
lUkme1K0wUk5zVPdNOxkkGxOuF7RO7hcweaZ+cw77dHI0CvwvBE1/xaMycZmk4SB
dN0MU+0WNyAj3GK65yNubwReWHYIZI2nll9hICCNIwYpjJave/jx/chQnKsp990A
JUExAHHgoEDLTBpiGTYeerW8i6W3sMzL1ORvPhwaZJbguyUTQIx/Ap/JZFJ+uehN
W9pjAPSlae4PZMPumXdDINCr+p54ZNHQhDY1l9hl3x6T8m9uTt8BEJiEhvAY8ymz
Owp6XhSVXhEVkyYpqa3ObNu5AA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 04:42:48 2025 by rpki-client