Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
File:                     AS268581.roa (raw, json)
Hash identifier:          cJvLnOqxviIgYrYye2i1bMpqn9RP5xRCAi35agrkvyc=
Subject key identifier:   7B:02:B5:46:1C:57:E9:DD:70:97:05:C1:FA:E5:A6:67:17:8E:C5:07
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       28554DE0E2F8940439C0406404346784BB1658BA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
Signing time:             Thu 29 Feb 2024 15:10:05 +0000
ROA not before:           Thu 29 Feb 2024 15:05:05 +0000
ROA not after:            Thu 27 Feb 2025 15:10:05 +0000
asID:                     268581
IP address blocks:        157.254.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 06:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:55:4d:e0:e2:f8:94:04:39:c0:40:64:04:34:67:84:bb:16:58:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb 29 15:05:05 2024 GMT
            Not After : Feb 27 15:10:05 2025 GMT
        Subject: CN=7B02B5461C57E9DD709705C1FAE5A667178EC507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:07:d3:ed:03:64:a2:41:d0:dc:32:00:4b:
                    29:89:71:ae:b0:48:d4:84:93:d3:cc:4b:95:da:a8:
                    4e:d7:d5:22:bf:78:33:30:70:c4:72:38:91:26:51:
                    cc:df:dd:06:7c:92:d4:9b:b7:63:d7:77:3a:b4:b7:
                    70:97:cd:57:6d:b4:fb:9c:87:81:5a:a4:2d:e0:d2:
                    45:b6:ae:8e:1f:eb:2c:f7:0e:74:21:e2:d1:90:a9:
                    7a:1f:99:13:3a:c4:a1:f4:ae:98:90:ac:5f:bf:e4:
                    b2:71:7a:04:a3:74:d1:33:03:59:ae:dc:9d:bc:e2:
                    7f:bb:3a:01:ca:c9:70:83:e0:6a:e8:0d:fc:e5:74:
                    dc:70:8b:d9:b0:85:de:ca:8d:d7:d6:b4:f9:13:c5:
                    58:72:d3:f8:1b:35:1a:ef:4a:b5:08:15:a5:da:5e:
                    d9:1e:84:43:4b:80:37:56:55:ce:94:be:e9:2b:70:
                    29:44:a8:fc:95:91:52:38:cc:21:73:4e:a2:ff:1c:
                    0e:d4:d7:01:b7:67:c3:8e:96:50:91:c1:35:17:eb:
                    23:b2:e2:1a:1e:3e:ef:57:39:7b:c7:f0:79:d1:ef:
                    52:a3:83:f4:6d:e2:5f:32:44:27:95:9d:e4:39:92:
                    b0:9a:0a:8c:e4:43:8b:62:c0:8b:b6:b7:2e:c5:86:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:02:B5:46:1C:57:E9:DD:70:97:05:C1:FA:E5:A6:67:17:8E:C5:07
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:c2:21:ae:b4:bb:73:e9:0b:20:57:27:57:cb:30:46:e2:
         65:48:36:5a:09:e0:9a:80:25:45:95:79:3e:6c:d3:c3:46:33:
         63:d6:8e:3f:d5:5a:2d:ba:57:84:08:39:c1:51:95:3f:e9:c5:
         6a:f2:ca:7a:25:5d:91:73:16:b9:b8:1d:41:4a:5a:df:e6:f6:
         26:89:28:94:b8:a2:0e:77:b3:a6:c9:66:0c:06:ac:c4:de:0a:
         cd:88:3f:2d:54:d7:4f:51:8d:03:78:ab:0c:d9:d2:b0:54:00:
         2e:75:5d:58:24:7b:c8:ad:08:c5:41:b7:9e:f6:d5:70:31:6e:
         e2:fa:81:95:16:45:fe:ac:6a:9f:37:06:84:d5:7c:88:fa:0e:
         89:0b:62:36:b9:9d:99:a5:eb:9a:9d:7e:3d:f8:d6:86:bc:20:
         46:ab:a9:de:c0:d0:f1:49:ba:f3:0e:c2:61:26:61:65:bd:b2:
         9d:69:5c:a0:87:01:d8:6d:5d:2d:c5:cc:03:56:53:a4:7f:89:
         0f:c1:db:7d:f2:6a:d3:6f:33:cb:7b:6d:4f:67:1e:9c:49:ab:
         2f:e4:eb:ff:e1:b2:be:c2:16:b0:9b:79:1d:e2:84:54:46:3a:
         ca:c1:ae:93:9e:0c:e2:1e:36:a2:99:13:c5:73:41:5b:cc:47:
         ea:72:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:01 2024 by rpki-client on console-ams.rpki-client.org