Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17378.roa
File:                     AS17378.roa (raw, json)
Hash identifier:          hUOvSssCODjGl3kHKq48FUkFES4WT7esrsUFrAdwsNM=
Subject key identifier:   AD:0E:AA:C4:81:D3:DD:6C:32:94:B6:D1:BE:5D:7C:07:3A:C1:D8:25
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       666625C82EE702DEC1078EAE3A502AC71A204428
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17378.roa
Signing time:             Tue 04 Mar 2025 18:12:47 +0000
ROA not before:           Tue 04 Mar 2025 18:07:47 +0000
ROA not after:            Tue 03 Mar 2026 18:12:47 +0000
asID:                     17378
IP address blocks:        157.254.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:25:c8:2e:e7:02:de:c1:07:8e:ae:3a:50:2a:c7:1a:20:44:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar  4 18:07:47 2025 GMT
            Not After : Mar  3 18:12:47 2026 GMT
        Subject: CN=AD0EAAC481D3DD6C3294B6D1BE5D7C073AC1D825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:5f:db:22:3e:3d:44:c1:34:8f:8e:5a:1b:
                    53:54:b3:6e:e0:80:1e:49:12:a5:76:25:0d:17:56:
                    28:7a:26:a1:20:bd:2a:81:8e:69:28:16:f0:63:db:
                    17:d8:2c:8f:a8:1b:5b:ba:16:04:bb:34:4f:dc:13:
                    54:88:6f:09:1d:9d:d9:ce:de:2d:83:77:b6:0c:0b:
                    7e:f2:e1:3c:10:2e:e1:9e:38:e6:c7:db:db:cf:54:
                    93:66:99:e2:0a:f9:cf:9b:4a:f0:bd:18:42:db:ba:
                    c5:c8:1e:89:7d:ce:c1:74:2b:37:16:38:32:1c:80:
                    db:7d:88:4a:cb:9a:b9:eb:5c:f4:da:b5:79:6f:15:
                    84:3a:f7:8b:ea:bb:e9:12:ce:ad:44:38:28:08:51:
                    18:9b:a9:db:f7:24:aa:33:75:17:48:b9:0f:d9:ad:
                    fa:52:fc:83:2a:5e:5b:ae:fa:f7:cc:fd:c2:b8:4a:
                    62:35:fb:e7:fe:2c:b7:e6:dd:72:f5:7f:dd:82:6f:
                    46:60:a8:52:47:19:ff:be:e5:01:f2:43:a8:69:c8:
                    13:be:e8:db:df:58:af:c9:0b:72:4b:c3:73:d4:17:
                    4d:5a:5a:9c:61:2a:8c:82:4e:b6:33:65:97:ae:8c:
                    e2:ba:51:9f:bb:a4:d3:ff:ca:28:89:c8:9b:3b:ff:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0E:AA:C4:81:D3:DD:6C:32:94:B6:D1:BE:5D:7C:07:3A:C1:D8:25
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:3b:6d:5d:cc:d1:19:f3:c8:7b:bd:a5:65:7a:2c:1a:25:
         46:ac:69:87:4d:3e:47:3e:d6:46:ab:de:d8:1c:7b:87:8c:55:
         75:c5:ee:3d:55:c1:81:05:bc:4e:18:54:47:e6:de:b4:50:63:
         40:18:37:46:ab:64:b8:96:cb:1a:da:08:59:9d:c7:ee:21:ab:
         d0:58:6a:96:53:3b:f7:64:36:43:84:6b:91:25:1d:cf:fa:47:
         fb:ae:59:58:49:d3:93:23:b1:3c:2f:b8:d6:e3:b0:86:d4:8f:
         a5:96:ee:71:51:8f:d0:48:18:c5:b6:6e:0a:e8:ed:7e:c1:b7:
         bb:2b:cb:b2:d3:44:8d:da:60:94:4a:26:96:a4:7b:7b:c9:7c:
         b4:01:42:8b:69:15:85:0f:dc:1c:79:a5:ee:d7:94:2d:98:65:
         89:15:1f:f2:1b:17:a0:7b:e6:40:82:b5:7b:f4:df:eb:09:bb:
         04:84:6a:c1:e3:27:47:ab:79:83:f1:0e:dd:31:6a:7a:89:c5:
         f7:fc:5c:2e:77:1e:5e:20:c1:8d:ad:54:e4:02:ae:27:fb:5e:
         13:43:4e:a7:8b:24:24:c2:2b:4d:ee:e7:41:bb:85:e0:b4:81:
         83:74:2c:81:f7:f0:90:55:3c:24:aa:83:c3:4e:0b:d5:68:23:
         7d:0b:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:31 2025 by rpki-client