Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215304.roa
File:                     AS215304.roa (raw, json)
Hash identifier:          slILqfY3VDsGeHkV/jH+muIAjkpmO8Q+OgBElsw13CQ=
Subject key identifier:   DC:01:E0:D2:0C:CB:86:D7:F7:9F:6B:8B:B2:43:17:42:0C:8F:4D:FB
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4B004CC373711B678FE8DDA03CDF8AA39BAB7C15
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215304.roa
Signing time:             Tue 13 May 2025 11:16:47 +0000
ROA not before:           Tue 13 May 2025 11:11:47 +0000
ROA not after:            Tue 12 May 2026 11:16:47 +0000
asID:                     215304
IP address blocks:        157.254.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:00:4c:c3:73:71:1b:67:8f:e8:dd:a0:3c:df:8a:a3:9b:ab:7c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 13 11:11:47 2025 GMT
            Not After : May 12 11:16:47 2026 GMT
        Subject: CN=DC01E0D20CCB86D7F79F6B8BB24317420C8F4DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:43:e7:30:e3:92:ba:63:f6:8d:ed:43:ca:
                    57:5e:48:e0:5d:14:ea:b5:15:f4:7d:45:e1:b0:92:
                    1c:d7:b2:0b:80:18:b8:0b:09:f4:d6:92:c4:b7:57:
                    39:57:1e:46:56:f8:c5:91:bf:a2:df:da:1a:9a:27:
                    b0:fe:b2:5b:44:03:a2:64:c1:08:e4:ae:fc:64:35:
                    dd:61:67:3c:d9:2c:3e:93:6c:ff:c3:c8:39:42:f1:
                    05:4b:9b:08:41:07:fe:2c:f0:fa:01:d5:9d:d5:8a:
                    da:3a:8e:20:aa:de:e0:cd:79:ca:39:70:77:c2:fa:
                    06:48:db:91:5d:69:15:8e:c9:ea:32:0f:39:9e:fc:
                    74:e3:a0:2d:55:0e:db:39:52:4d:a4:ac:d2:4a:5b:
                    7b:d4:6f:d3:01:5d:50:cc:b6:24:c8:f0:cb:43:6e:
                    48:14:90:be:b1:3a:85:ee:46:96:8f:e3:ac:08:e6:
                    f7:36:cd:90:a2:eb:09:fd:09:29:5b:c7:b1:3c:10:
                    1e:51:5e:d8:ce:bf:99:25:83:e0:93:44:1a:3d:c6:
                    71:ed:78:99:75:db:04:a8:88:4b:0b:97:be:36:ce:
                    16:93:fc:94:a5:69:b8:94:e4:c3:6a:e2:ea:83:2f:
                    c3:fd:fa:1e:61:00:66:0a:e3:de:a2:9e:06:6a:42:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:01:E0:D2:0C:CB:86:D7:F7:9F:6B:8B:B2:43:17:42:0C:8F:4D:FB
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:e6:9c:b5:cf:67:90:90:fa:e1:46:8d:b1:2f:8d:a5:d9:cc:
         4a:4c:e9:e8:ba:a9:43:ad:3a:c7:57:da:23:fc:24:7b:a3:cf:
         9a:55:e9:6b:a2:a4:16:25:62:22:1b:53:ea:65:17:b5:89:9f:
         2d:e0:a3:a6:91:0f:59:be:f6:ce:f0:b9:0a:c2:64:ce:fc:c0:
         a7:31:c4:a7:53:26:60:37:4c:4c:8f:31:26:72:11:56:91:b8:
         7c:57:b3:40:38:f3:32:f0:04:c9:8f:cc:60:32:7a:3f:83:c5:
         84:d2:87:0f:d3:a0:5f:47:8f:a0:f2:d5:9b:c0:69:f2:33:dd:
         f3:ef:41:3e:ab:f7:a7:48:e0:e2:bb:59:d2:27:0e:b4:3d:62:
         96:1d:bc:74:9f:d6:da:ed:57:99:21:53:7b:e0:59:45:09:71:
         ec:c0:69:92:e5:68:66:e8:76:e4:73:3e:ea:8d:7b:26:51:df:
         64:1a:30:c9:ab:73:29:d8:40:08:05:66:db:c3:d8:42:08:95:
         54:ee:e2:bb:6d:5f:ea:76:a2:75:07:2f:92:e2:ea:cb:27:b4:
         82:b9:85:34:10:36:fb:44:79:34:4f:02:f5:c6:03:15:de:b6:
         60:55:b7:65:a2:54:ce:18:c7:23:53:58:30:8a:2a:0e:f7:e2:
         fc:14:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:13 2025 by rpki-client