Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152485.roa
File:                     AS152485.roa (raw, json)
Hash identifier:          RrM0X4aWvL9MQQ2urQaHvTN4oC9Ymj/mWuAPECfqVs0=
Subject key identifier:   EC:73:1C:76:98:04:A1:5F:D2:B8:75:A8:34:CD:FB:66:B3:9F:90:0B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       67779A211653399FE3F6B1855AFF9F96A8723FAE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152485.roa
Signing time:             Wed 13 Nov 2024 19:15:09 +0000
ROA not before:           Wed 13 Nov 2024 19:10:09 +0000
ROA not after:            Wed 12 Nov 2025 19:15:09 +0000
asID:                     152485
IP address blocks:        157.254.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:77:9a:21:16:53:39:9f:e3:f6:b1:85:5a:ff:9f:96:a8:72:3f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 13 19:10:09 2024 GMT
            Not After : Nov 12 19:15:09 2025 GMT
        Subject: CN=EC731C769804A15FD2B875A834CDFB66B39F900B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:3b:00:be:bd:0c:12:33:e6:be:6e:f7:6d:
                    92:ef:ab:95:71:aa:0e:3f:cb:75:4c:7b:0d:4f:61:
                    82:2b:d4:24:bc:9f:39:d0:83:0c:6d:2b:43:06:bd:
                    8d:5d:fc:6e:33:8e:18:b4:82:06:10:f1:b0:cd:e3:
                    7b:81:6e:77:ff:d0:cf:c0:01:4d:f0:a1:45:b4:bb:
                    f9:14:51:28:a2:96:84:77:16:ca:62:d7:1e:fb:be:
                    21:8a:ff:1b:91:63:a0:7c:3f:fa:c0:b8:93:1c:94:
                    97:e3:c9:a5:14:6e:1d:f0:35:cc:60:bb:8c:fb:3e:
                    84:a0:93:47:b7:17:43:eb:64:97:93:39:f0:fc:0c:
                    f1:7d:4d:90:c8:25:ef:b1:2d:69:41:8e:84:1c:6d:
                    a3:26:27:30:8e:51:e1:07:a8:6d:df:19:88:a0:64:
                    e0:f0:0b:eb:e8:2e:aa:f8:c2:ec:9d:31:04:cc:47:
                    e0:22:0a:20:09:51:0d:57:83:d9:46:8c:3d:98:ea:
                    30:ed:2b:b2:e7:70:f8:03:b1:f5:46:94:f7:fd:a7:
                    f1:d3:35:1e:ce:85:a6:f9:cc:ff:b8:de:31:e6:6f:
                    36:f7:16:b2:1a:67:bf:19:0b:ff:db:97:52:06:03:
                    99:cb:8e:8a:b0:0b:77:95:56:1d:ce:de:80:62:92:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:1C:76:98:04:A1:5F:D2:B8:75:A8:34:CD:FB:66:B3:9F:90:0B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152485.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:47:e3:d1:6b:cc:63:49:ce:11:4c:a2:a3:88:5e:b9:83:1b:
         e1:ba:d8:31:83:e6:89:fd:53:ee:61:de:35:2f:17:e4:de:6f:
         38:c3:1a:bf:ec:13:85:6c:fb:35:6f:dc:39:5b:5a:86:cf:f9:
         63:42:d8:f5:22:a2:92:0a:7c:96:9c:99:d4:41:19:2a:a9:45:
         5e:c5:e9:23:24:6c:e3:c9:eb:a7:eb:7c:45:4c:df:16:38:40:
         0d:f0:b2:f7:bf:f5:a7:86:78:b2:bf:57:81:8e:99:29:01:ba:
         03:92:3d:2b:cd:34:f9:57:bc:85:75:04:e5:b0:34:47:68:db:
         f0:e2:24:7e:cc:6e:7c:e0:e4:bf:99:42:a6:70:bc:14:6d:2d:
         85:36:bd:01:26:04:09:8b:c5:51:cd:5b:f2:ae:61:09:a6:64:
         26:df:96:0b:67:f1:85:35:ed:57:51:9e:c6:93:23:b6:c1:af:
         79:14:25:39:c4:c7:36:97:32:1f:44:be:ee:65:06:24:bf:52:
         01:e2:3c:c8:29:4d:4a:6f:c4:e6:92:fb:59:93:a8:7c:aa:97:
         0c:84:7f:73:5b:5d:6c:8a:35:db:55:6e:e0:e3:c8:2c:1a:10:
         92:86:28:05:73:9a:bc:40:09:81:7c:15:a6:05:20:1f:e8:e2:
         a1:af:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org