Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS204957.roa
File:                     AS204957.roa (raw, json)
Hash identifier:          yM9VEwnnhun979/UN76iBwR1CTDaRkoCu0/PRkgR2Yc=
Subject key identifier:   71:08:EC:FF:72:E8:68:7B:C7:7E:A5:32:2B:0A:AC:D5:61:AC:E1:52
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6B905AFE6F8E1C46A64123464550EE8225F53BE9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS204957.roa
Signing time:             Thu 06 Mar 2025 09:41:23 +0000
ROA not before:           Thu 06 Mar 2025 09:36:23 +0000
ROA not after:            Thu 05 Mar 2026 09:41:23 +0000
asID:                     204957
IP address blocks:        157.254.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:90:5a:fe:6f:8e:1c:46:a6:41:23:46:45:50:ee:82:25:f5:3b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar  6 09:36:23 2025 GMT
            Not After : Mar  5 09:41:23 2026 GMT
        Subject: CN=7108ECFF72E8687BC77EA5322B0AACD561ACE152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:7d:d1:c1:31:ed:87:fb:a2:5b:e3:42:83:
                    af:46:55:bf:13:20:de:85:38:78:a6:5f:17:ad:df:
                    e3:ed:fa:45:10:ce:2e:4f:e7:ba:42:d3:e4:c1:c1:
                    a6:dc:05:14:61:f4:5d:b4:9a:74:09:1e:08:c8:a7:
                    b6:93:1d:a7:26:b9:66:b0:b7:05:26:95:87:c7:5d:
                    20:ab:e4:ca:c6:c2:94:80:9a:1d:79:4b:00:24:4a:
                    0b:7f:8a:6f:6d:8c:6c:5f:4a:b9:94:28:37:3c:6e:
                    6e:b6:d0:00:2d:4f:60:6c:ff:b1:f1:e3:ae:16:d4:
                    f8:6c:a6:69:62:6f:90:e0:2f:02:c8:0b:fa:d5:d4:
                    c2:5f:66:c6:78:a9:3d:bf:e6:33:f0:d4:ca:fc:44:
                    b9:35:2f:2d:46:ef:92:c1:c1:2b:7d:76:9f:6b:88:
                    62:a6:40:12:c1:aa:10:ce:1d:80:1a:bd:78:53:11:
                    af:90:dc:4d:8c:de:18:4e:16:7d:83:0e:45:b7:e8:
                    d6:41:8f:5b:63:c8:d7:ab:b3:3d:cc:ee:cf:f4:ca:
                    2a:4c:c2:08:a5:fd:b5:3f:50:19:46:e8:bc:66:7e:
                    58:cf:ea:ac:90:09:ae:37:5e:5f:18:d5:6c:3e:16:
                    51:b0:8f:8e:ae:b6:67:51:5b:9c:e3:e4:e9:f9:ad:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:EC:FF:72:E8:68:7B:C7:7E:A5:32:2B:0A:AC:D5:61:AC:E1:52
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS204957.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f1:ac:1c:2a:a3:de:5f:2c:f7:80:24:ac:71:e2:95:7d:da:
         52:ac:76:56:75:2d:e3:58:c4:7b:71:09:87:a6:fa:bd:e3:a2:
         ed:30:67:a0:31:26:ef:20:f7:f1:60:5f:6a:ac:82:c4:c5:56:
         d4:1f:5b:f5:4c:48:64:b3:af:49:36:f9:bd:e0:10:2b:d9:b3:
         7e:18:7a:8f:31:52:30:b2:34:6b:6d:4a:aa:f4:58:46:f5:89:
         bd:18:89:0f:e5:5c:73:78:63:7c:65:0c:d4:93:10:83:fe:83:
         21:ad:07:0a:49:91:02:8c:77:f1:7d:ac:35:1c:c0:f8:41:f7:
         b8:fb:95:46:51:32:b8:2e:32:81:95:7d:8f:a3:bc:a1:9c:d7:
         ab:6f:fd:12:73:ba:2e:45:4b:33:af:17:22:39:0a:06:aa:aa:
         5e:e6:22:76:93:83:4a:08:5a:d1:f3:ec:a9:67:5c:e5:ed:34:
         fa:40:72:eb:00:77:7a:bd:f4:89:de:3d:4b:6e:23:45:f7:1e:
         5f:36:cb:2f:a7:1b:d2:9d:be:7c:ef:16:4f:c6:ca:5f:2d:c1:
         bd:3d:12:4a:9c:e1:20:85:67:82:29:8e:73:85:f5:e8:09:96:
         80:bb:be:20:82:2b:a3:52:13:97:ec:f5:13:26:17:b0:0f:d5:
         f5:0b:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:34 2025 by rpki-client