Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS30254.roa
File:                     AS30254.roa (raw, json)
Hash identifier:          NMq3T25lW3BIVwBfjMOU4KpJ7+w2t3ttfP5KJpWUZzc=
Subject key identifier:   60:5C:24:21:8A:B5:CE:BB:DA:8D:50:A2:AA:7B:42:AA:55:C8:53:D7
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       53D2878BDE4EDBF114E0E60AB4F9B33B60C82372
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS30254.roa
Signing time:             Thu 16 Jan 2025 06:52:54 +0000
ROA not before:           Thu 16 Jan 2025 06:47:54 +0000
ROA not after:            Thu 15 Jan 2026 06:52:54 +0000
asID:                     30254
IP address blocks:        157.254.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d2:87:8b:de:4e:db:f1:14:e0:e6:0a:b4:f9:b3:3b:60:c8:23:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 16 06:47:54 2025 GMT
            Not After : Jan 15 06:52:54 2026 GMT
        Subject: CN=605C24218AB5CEBBDA8D50A2AA7B42AA55C853D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:f5:a0:bf:5c:31:84:18:07:24:6f:6f:20:
                    2c:a9:98:cc:2c:17:fd:6e:6a:a6:ba:2d:da:39:d0:
                    c7:d6:93:0e:e1:ac:5d:b6:00:e2:71:2a:13:66:14:
                    f3:fc:f9:67:b9:be:b4:da:ec:b3:95:6d:e2:94:09:
                    23:23:04:99:89:ac:51:62:cf:d5:a4:80:04:05:5c:
                    d3:3a:15:6e:b5:c6:28:21:a8:36:c5:92:7f:df:2e:
                    76:67:0f:69:e9:35:b6:b4:9d:64:cc:97:c6:a5:18:
                    48:ca:e3:00:e9:75:1d:9d:89:c3:de:5a:f5:07:e4:
                    1e:11:48:98:86:49:3a:6e:d0:db:1b:33:7a:cd:fb:
                    1a:9b:ca:d1:20:35:16:0f:57:d2:e1:86:17:6b:80:
                    d4:54:bc:43:3f:e8:e6:93:0f:f5:54:60:30:e7:f0:
                    04:e7:f5:47:83:75:8f:83:48:33:78:3f:43:c1:08:
                    b7:e6:fc:2c:47:da:f7:ee:7f:1f:7f:08:0b:bc:87:
                    4a:a8:98:b3:ff:dd:5d:e6:99:0d:d2:97:0c:96:73:
                    6f:63:e5:de:82:5e:21:f9:56:a5:95:9d:f1:3c:5f:
                    d1:dc:69:63:ff:33:72:1a:d2:34:96:5b:c6:6e:e0:
                    53:52:27:15:ff:ed:2f:61:1d:41:24:e0:03:e1:6a:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5C:24:21:8A:B5:CE:BB:DA:8D:50:A2:AA:7B:42:AA:55:C8:53:D7
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS30254.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:18:78:06:38:14:83:a0:00:ca:30:e5:c8:f0:96:f0:31:
         62:c2:80:51:17:38:b5:e8:92:4f:20:18:96:67:ea:41:99:b6:
         75:33:53:a2:7a:79:4c:c7:da:5c:38:20:e2:c2:71:bf:36:87:
         52:75:09:3a:fc:67:81:78:bf:95:69:59:cb:cb:52:66:d7:5a:
         32:1d:4b:17:f7:05:33:a3:77:e5:16:17:6f:62:2f:08:37:a1:
         a2:1f:c6:ea:12:cf:c2:38:a1:af:45:1d:2d:f8:7d:d0:34:db:
         70:d2:06:92:ad:53:2a:81:29:23:a6:c4:ef:00:4d:a9:22:ae:
         44:52:25:39:99:8c:87:c4:d5:3d:59:16:d2:24:85:09:a0:e0:
         33:64:7c:de:47:30:dd:f8:c4:3b:ee:97:eb:ef:cf:9a:7c:2c:
         48:32:d2:b0:18:af:46:d2:00:5f:7c:49:09:7d:28:9c:3b:69:
         f5:32:e7:34:50:d2:82:7d:1c:2f:7a:b8:59:89:8b:ea:a2:44:
         4d:cf:f5:f7:c4:42:9d:41:ba:6a:aa:45:76:6e:dc:3c:32:00:
         a5:97:90:75:50:25:de:ce:bc:43:45:f0:7f:9b:ab:6a:ff:29:
         ed:7c:7a:b8:11:7e:d0:bc:13:85:27:1f:e9:5f:6a:10:41:93:
         06:85:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:48:53 2025 by rpki-client