Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          9e9bbPrGAyJWAJTR9Fw+QzoYTIaTbAIyA66oPEyAPD8=
Subject key identifier:   CF:16:18:47:06:BD:20:C3:B8:DC:07:3D:1F:CD:C3:CC:CC:B1:D9:DD
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       55BCFBF99C463C7071BA3DEBF583385DA97E21FB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54252.roa
Signing time:             Tue 04 Feb 2025 15:28:26 +0000
ROA not before:           Tue 04 Feb 2025 15:23:26 +0000
ROA not after:            Tue 03 Feb 2026 15:28:26 +0000
asID:                     54252
IP address blocks:        157.254.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:fb:f9:9c:46:3c:70:71:ba:3d:eb:f5:83:38:5d:a9:7e:21:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb  4 15:23:26 2025 GMT
            Not After : Feb  3 15:28:26 2026 GMT
        Subject: CN=CF16184706BD20C3B8DC073D1FCDC3CCCCB1D9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:1a:46:6b:4f:80:08:d8:78:82:99:94:ba:
                    21:a5:07:79:37:cb:13:44:57:93:d7:82:fa:54:d1:
                    63:6b:55:67:1b:95:ff:d2:be:8b:47:91:8b:a6:d3:
                    5b:a0:8b:f8:a8:8f:c8:3f:28:fb:36:cc:ec:54:13:
                    bb:a2:b2:93:bf:69:b4:8b:f2:96:27:bc:b0:63:74:
                    44:4e:25:15:eb:33:58:98:4d:c8:2d:9f:f7:99:9f:
                    dc:1e:36:4c:86:a9:c5:db:43:13:7d:fd:3d:92:e5:
                    32:83:7b:69:6c:ec:2d:86:c2:25:3b:4e:d8:ad:62:
                    d6:28:96:0e:d0:2e:be:ea:11:1d:cd:49:b0:bd:26:
                    49:b3:b3:cf:5d:c0:03:da:75:aa:e3:d3:38:b2:8c:
                    34:01:41:71:72:1a:fc:3e:66:5d:4d:2b:90:1d:9a:
                    90:f2:1e:2c:b2:91:8b:2b:34:84:7a:63:99:e7:a7:
                    dd:f1:87:24:d3:dd:55:74:8f:c9:8b:c9:24:df:31:
                    48:bd:4b:aa:cc:c3:dc:33:68:e5:c4:c6:3e:da:cb:
                    bc:5d:85:16:e0:20:76:fc:04:dd:ef:0d:02:c9:2d:
                    ca:e1:eb:25:0f:90:83:b9:a2:f4:3c:b3:8e:47:41:
                    ad:2d:9c:95:f9:d0:8d:17:e7:f6:54:4d:c4:dd:4b:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:16:18:47:06:BD:20:C3:B8:DC:07:3D:1F:CD:C3:CC:CC:B1:D9:DD
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:70:94:d2:22:30:97:13:05:e0:3f:fe:8f:77:fb:1c:a4:9a:
         6f:ae:13:d6:96:5d:f4:10:53:2f:4f:b7:85:d0:8d:44:af:76:
         71:4a:91:83:76:3a:f7:7d:c5:c7:bb:9d:fa:d4:e1:3c:a3:4f:
         62:29:f4:6d:97:23:83:56:7d:7c:b7:ae:0d:4c:5a:00:25:e0:
         49:53:e8:ce:21:45:e9:10:36:9c:05:19:b3:2d:a7:d8:d6:a4:
         6c:82:77:59:7d:92:c7:04:bf:8e:7e:74:e2:90:a8:87:fd:cf:
         1d:5e:6b:7b:e4:13:ec:26:81:cf:22:1b:c5:18:99:2e:91:30:
         ce:86:bb:e0:bf:93:99:ba:8c:f9:8e:d6:cb:d6:32:85:bc:05:
         df:03:9c:23:ea:e4:a8:28:02:da:b7:d5:13:61:ab:8c:71:28:
         0c:f0:20:e3:46:69:fb:fb:f0:f3:d6:eb:b1:4b:97:e4:e4:cc:
         c3:3f:e8:8b:36:5d:3d:ea:3c:44:54:fe:88:1d:1c:e5:3c:0a:
         44:f2:cb:8f:6a:fe:2b:5a:3e:27:66:dc:ca:50:07:81:e3:83:
         ba:67:e9:03:2d:5b:45:b2:03:a7:b9:c0:46:44:4e:60:df:c5:
         6e:21:3d:9f:43:09:df:05:24:96:da:b1:b4:05:a1:39:a8:86:
         cc:e3:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:06:59 2025 by rpki-client