Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS211759.roa
File:                     AS211759.roa (raw, json)
Hash identifier:          xAgHfUuTREtLSRatQQgTUpf/GgnXhz1sUQ0Hy92vJ1A=
Subject key identifier:   EC:9E:DD:7E:12:73:23:F8:F1:51:87:4A:19:B7:EB:B6:8A:08:69:E2
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       651F91FE90340E6A5DA66AD118E6BBBAC996D713
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS211759.roa
Signing time:             Sun 28 Jul 2024 08:46:32 +0000
ROA not before:           Sun 28 Jul 2024 08:41:32 +0000
ROA not after:            Sun 27 Jul 2025 08:46:32 +0000
asID:                     211759
IP address blocks:        157.254.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1f:91:fe:90:34:0e:6a:5d:a6:6a:d1:18:e6:bb:ba:c9:96:d7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 28 08:41:32 2024 GMT
            Not After : Jul 27 08:46:32 2025 GMT
        Subject: CN=EC9EDD7E127323F8F151874A19B7EBB68A0869E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:68:b3:c7:2e:31:62:89:72:b4:88:b8:97:
                    ca:ce:00:23:ec:8c:c4:01:9d:6a:5e:56:6c:b6:76:
                    28:92:6a:58:87:3b:58:3e:d4:f4:64:90:8f:63:08:
                    5a:a7:a6:b3:aa:ee:36:93:72:a0:4d:68:55:28:75:
                    b8:5e:35:01:02:22:4d:fe:7a:0c:44:f5:62:ef:5b:
                    8f:f9:bc:15:b9:fd:fb:bb:6a:61:ce:29:44:62:38:
                    1f:bd:33:bc:d9:e6:60:c9:6e:69:f3:a0:bd:33:3a:
                    f2:7c:a4:a3:fc:59:59:03:06:ca:08:a8:84:a0:24:
                    8c:dc:af:eb:b4:bf:7f:3f:d0:9d:fc:f0:02:fa:d2:
                    7e:43:ca:e5:47:56:7e:73:d1:39:22:cf:54:91:33:
                    c1:c0:03:88:c2:7c:2d:b9:0b:20:3b:d7:16:30:a1:
                    23:b0:dc:ec:2e:f3:f9:e2:de:76:b7:d7:ba:6f:43:
                    61:dd:79:0a:4e:88:8a:aa:71:95:34:25:5e:2f:49:
                    ec:91:c2:91:e9:b4:d2:ac:cd:2e:b7:4e:fa:02:54:
                    dc:53:39:51:95:41:1b:67:de:52:75:d5:9d:5d:cd:
                    35:bd:5b:92:4b:6a:28:20:c4:e6:49:ea:7b:9d:4f:
                    f5:b9:48:cb:3a:7e:6c:35:ac:81:83:56:11:39:db:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9E:DD:7E:12:73:23:F8:F1:51:87:4A:19:B7:EB:B6:8A:08:69:E2
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS211759.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f6:01:79:a3:87:eb:38:b4:9a:24:b9:bb:78:0b:f7:81:f4:
         86:e1:c1:d6:98:c0:22:b8:22:d8:0b:48:26:41:29:ea:96:89:
         3e:50:20:00:dd:73:73:74:38:2c:5b:a8:40:db:12:1a:7c:fc:
         76:07:d5:7f:82:8f:be:48:f7:1c:1e:29:2a:f0:53:f1:41:86:
         27:16:a6:3b:2c:9e:9e:93:fd:ad:fd:b3:93:de:f0:b5:95:56:
         6a:1d:a8:e8:9f:75:c1:fd:e0:c2:aa:b8:11:21:cc:ba:f6:26:
         b0:5d:36:df:5f:33:50:9a:ff:80:f3:b5:f5:28:d9:0b:0a:c1:
         53:ad:fe:02:91:53:e9:d6:1f:bd:95:d3:1c:37:c0:76:d3:ae:
         89:50:f0:35:b6:85:00:c9:27:44:64:20:9c:90:33:99:79:8f:
         2d:53:1c:05:78:67:8f:58:44:50:bc:86:d1:81:4a:ce:dc:77:
         83:fa:13:75:79:a1:d6:a0:0e:8e:ed:de:74:44:7c:9c:eb:48:
         ee:03:8d:c7:ae:45:d5:6d:49:c6:5d:70:88:ef:9d:fc:57:93:
         8b:79:34:bd:0c:e2:18:f9:fc:81:85:cf:82:f4:d6:d9:6e:d7:
         02:cc:36:dc:6d:d2:61:7b:12:62:b8:01:8b:3c:34:07:28:76:
         e5:f5:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:09 2025 by rpki-client