Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          k0oA4j6GhNnyqP9gnu8t8D7yQFBiN9p5CZNjri+CCPg=
Subject key identifier:   68:DF:42:3B:84:8C:11:C9:E2:3F:DF:84:FE:77:86:1F:C4:10:3F:64
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       08847145FC9302A7D23D24E6581CE99651324A4B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54252.roa
Signing time:             Tue 05 Mar 2024 14:40:35 +0000
ROA not before:           Tue 05 Mar 2024 14:35:35 +0000
ROA not after:            Tue 04 Mar 2025 14:40:35 +0000
asID:                     54252
IP address blocks:        157.254.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:84:71:45:fc:93:02:a7:d2:3d:24:e6:58:1c:e9:96:51:32:4a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar  5 14:35:35 2024 GMT
            Not After : Mar  4 14:40:35 2025 GMT
        Subject: CN=68DF423B848C11C9E23FDF84FE77861FC4103F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:ba:33:2a:99:2f:02:b6:94:f1:26:a6:49:
                    50:f4:23:eb:9b:6f:f4:05:91:a3:0a:1b:68:df:0e:
                    69:9f:d3:bd:19:6a:e9:86:ca:15:65:a1:67:9a:bb:
                    0d:b6:52:59:a4:85:d8:49:27:6a:b3:37:30:16:fb:
                    91:26:d8:22:de:22:bd:f5:9d:a4:4d:a5:8a:55:11:
                    f8:42:3e:a5:6a:1f:15:5f:b2:27:15:2d:19:41:e5:
                    14:c3:66:bc:75:25:ee:cd:99:82:96:bc:66:29:1d:
                    9c:f8:ba:d0:c2:d9:09:03:18:7d:f6:7f:10:a6:04:
                    c7:13:09:81:0d:1a:94:f0:6e:2f:4e:73:21:2d:03:
                    81:de:19:e0:eb:08:b6:37:4f:32:48:0f:c6:8b:6c:
                    b4:6e:e2:2a:8f:f6:a5:80:e0:15:82:ef:c6:3e:d9:
                    16:10:45:df:08:26:eb:0b:66:c4:61:0a:4f:f7:c7:
                    5b:4f:1f:86:e1:34:56:1a:bb:2d:e4:fa:12:f8:7f:
                    a9:13:e1:8b:72:ca:9d:70:8e:63:8a:95:1e:43:e4:
                    0d:e4:7e:11:09:7e:f9:2a:d2:1c:e9:31:53:f6:32:
                    6b:33:43:82:cf:2a:1b:2f:fe:e0:84:6b:1f:89:69:
                    0b:7d:ba:41:33:2c:42:27:31:b1:9a:17:ee:09:7f:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:42:3B:84:8C:11:C9:E2:3F:DF:84:FE:77:86:1F:C4:10:3F:64
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:68:c5:6c:f5:5a:5b:ba:23:b8:cd:d7:f3:cf:4d:ac:61:0c:
         6f:58:07:71:5e:ae:f9:81:b6:65:be:b1:1e:d0:c9:4d:f4:21:
         42:4d:5b:df:f8:11:eb:72:cf:e2:b2:e5:84:8a:09:4e:74:8f:
         d0:e7:72:db:0f:a4:57:c8:cd:c3:ab:6a:3e:30:58:9e:00:90:
         3e:2c:9f:92:46:eb:07:e9:1a:5f:af:69:a7:d3:a8:4d:cb:1c:
         4a:da:18:b4:d8:ee:30:6d:db:97:4a:c2:e1:f2:09:83:1c:7f:
         6e:05:e7:d9:2e:a4:76:26:39:f8:c1:2e:22:40:a2:1b:6e:9a:
         76:2f:8e:58:e1:88:b0:01:ba:f3:5f:d6:fd:c9:eb:a0:27:63:
         71:88:e9:16:8f:0e:ef:dc:c4:7f:da:0a:01:16:cc:66:76:89:
         8e:f8:70:aa:53:dd:d4:36:34:0a:d3:5b:c5:84:e9:26:38:37:
         64:80:0e:18:60:d9:56:04:ba:97:a5:7d:1b:4e:23:20:7a:39:
         3c:33:43:86:6d:6e:03:f7:bb:2d:32:3e:e0:95:d2:73:d9:10:
         53:41:55:8f:2c:e3:bf:d5:2f:a7:04:c7:9f:89:2d:84:f1:b7:
         28:7d:b0:2b:9a:fe:b6:c8:59:1c:9a:08:82:59:30:dc:78:22:
         44:12:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org