Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54339.roa
File:                     AS54339.roa (raw, json)
Hash identifier:          FRGLfwcBpcH7aby2F45FYhTqJNK1WNUOheAm3AK8k9w=
Subject key identifier:   8B:C9:34:47:23:A1:89:43:1D:74:80:7F:F0:C8:FB:77:3C:D1:A8:AA
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       448F21EB2838FF375C895AC0130933D133ECED2E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54339.roa
Signing time:             Sat 29 Mar 2025 05:31:24 +0000
ROA not before:           Sat 29 Mar 2025 05:26:24 +0000
ROA not after:            Sat 28 Mar 2026 05:31:24 +0000
asID:                     54339
IP address blocks:        157.254.28.0/24 maxlen: 24
                          157.254.31.0/24 maxlen: 24
                          157.254.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:21:eb:28:38:ff:37:5c:89:5a:c0:13:09:33:d1:33:ec:ed:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 29 05:26:24 2025 GMT
            Not After : Mar 28 05:31:24 2026 GMT
        Subject: CN=8BC9344723A189431D74807FF0C8FB773CD1A8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:ae:23:96:37:10:87:fd:27:e3:c7:fa:c1:
                    68:fc:7a:8d:cb:ba:4e:53:ee:49:2d:c9:6d:17:1f:
                    de:b2:e3:11:0e:6f:35:f7:4a:fd:e0:db:91:7f:46:
                    15:a8:3f:21:15:74:31:12:a6:d3:c0:76:9f:9c:3a:
                    4d:49:10:2d:1c:c5:e6:c1:64:bb:24:f7:76:94:aa:
                    fe:24:20:45:34:19:e9:69:69:cf:ab:d9:b5:79:af:
                    98:28:82:22:c8:0a:26:4c:2f:f3:4f:92:6a:bc:7e:
                    0e:15:36:ba:93:c7:73:f5:26:c4:35:40:3c:5c:53:
                    2f:a5:a1:6b:85:3c:5f:dd:ea:c3:97:29:97:f4:0b:
                    1d:cf:34:8c:82:61:ea:11:ea:6a:3a:73:30:51:49:
                    b9:94:a1:e8:8d:f5:a3:9d:25:04:39:d7:6b:77:d9:
                    fc:51:18:c0:c1:39:3e:92:53:bb:97:23:7b:cf:62:
                    51:f7:fc:c7:db:b4:79:4d:a9:c4:a4:72:e5:fb:40:
                    8a:fe:c0:64:1b:99:de:c9:68:22:db:13:93:2e:22:
                    d5:c7:56:2f:d3:6e:41:f2:25:3c:29:64:a5:be:0d:
                    0e:77:7b:6c:2d:e6:18:be:72:a3:7b:97:ad:c0:e4:
                    fa:49:98:28:f5:bc:a1:e2:73:a1:ee:88:29:c3:2f:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C9:34:47:23:A1:89:43:1D:74:80:7F:F0:C8:FB:77:3C:D1:A8:AA
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.28.0/24
                  157.254.31.0/24
                  157.254.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:ac:54:83:6f:da:37:40:04:1d:0f:f1:54:e3:42:97:88:
         3f:e8:c1:18:48:b1:d6:a2:aa:c8:27:38:f8:de:ad:78:b9:f5:
         e2:44:fc:35:5a:61:d3:4f:47:c8:68:d6:80:7e:0f:6b:6c:5f:
         f4:66:c5:4d:a9:0e:20:49:ba:92:b2:ef:b7:e4:cd:87:63:06:
         2f:bd:5d:4a:ef:7e:12:62:e5:e2:d4:96:30:b1:63:8a:85:64:
         95:58:eb:99:7a:5c:78:c2:21:29:ca:cb:f2:ef:47:6b:95:99:
         43:c9:aa:64:65:a0:0c:78:8d:c6:9e:db:77:72:83:b4:e2:46:
         67:94:82:b8:a6:97:fc:a6:19:01:d8:54:a7:c1:bb:94:54:3b:
         7c:53:f5:51:18:f9:17:42:b8:84:96:14:fc:1b:bd:94:6a:56:
         ff:90:2e:e1:f1:3a:21:b2:8e:c6:41:a3:75:32:07:d4:10:8a:
         66:0f:f1:18:16:03:33:72:b9:19:42:12:9f:cc:07:1f:14:6d:
         4e:b2:57:e2:85:3b:0c:d8:ec:2f:a3:a2:6d:95:43:8d:cb:3f:
         52:ec:41:74:5a:b2:70:10:ad:28:a1:86:ea:42:d9:5a:50:f5:
         9c:d0:c1:57:f9:5c:8b:b8:a1:81:fc:9b:cb:03:54:c0:47:92:
         9a:91:fa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:37 2025 by rpki-client