Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60781.roa
File:                     AS60781.roa (raw, json)
Hash identifier:          AVqyGTQaeVVC+gV4+Qhx+/MvwypZQssmLd+fIPK7qdw=
Subject key identifier:   8B:1C:F2:98:B2:F0:C7:FE:98:A1:DE:95:BD:7A:C8:5A:46:AD:40:3F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       325CC6F68896E7ABC2B57A8500B125CC9B32A58A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60781.roa
Signing time:             Mon 06 Jan 2025 21:28:23 +0000
ROA not before:           Mon 06 Jan 2025 21:23:23 +0000
ROA not after:            Mon 05 Jan 2026 21:28:23 +0000
asID:                     60781
IP address blocks:        157.254.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5c:c6:f6:88:96:e7:ab:c2:b5:7a:85:00:b1:25:cc:9b:32:a5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan  6 21:23:23 2025 GMT
            Not After : Jan  5 21:28:23 2026 GMT
        Subject: CN=8B1CF298B2F0C7FE98A1DE95BD7AC85A46AD403F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:07:2c:57:bb:94:a3:f8:6f:d5:6f:a5:85:
                    63:b3:e5:78:04:2a:ea:3a:71:7f:85:b1:37:73:37:
                    d5:43:c0:47:80:a7:35:51:bb:26:d3:55:e3:44:4b:
                    82:7c:58:fe:97:70:d2:24:09:ab:e4:20:03:8d:e1:
                    70:31:46:67:84:d9:6a:5d:29:89:c7:83:9f:3f:b4:
                    73:e6:4f:b1:15:ec:32:42:07:c4:76:f4:93:4f:b6:
                    64:d0:ab:fa:96:2e:7d:dc:21:50:60:90:a4:00:2c:
                    f8:04:f4:9d:98:53:2e:31:7a:42:30:6b:e2:06:b6:
                    1d:d1:fb:12:18:35:b9:6b:26:37:5c:1f:ea:4f:90:
                    e9:bf:1a:6c:a1:95:c6:8e:e5:19:b7:06:70:ed:31:
                    9a:a6:d1:96:dd:2e:88:16:cc:59:8d:f7:12:d1:6a:
                    30:78:b8:74:f6:1c:58:07:5f:1c:ce:80:fe:d4:f6:
                    4e:f0:f9:f6:07:09:db:9e:51:f1:e0:51:07:0d:98:
                    a0:ec:c2:5b:27:c4:35:d7:d6:88:84:40:97:56:2a:
                    49:bd:83:c3:61:8b:ae:4b:c1:1a:a9:f6:3c:81:02:
                    2a:67:c9:3a:60:80:19:f7:13:1b:df:f9:1b:d5:68:
                    2f:1b:29:75:b1:cb:21:f0:55:11:f3:02:cf:06:a6:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1C:F2:98:B2:F0:C7:FE:98:A1:DE:95:BD:7A:C8:5A:46:AD:40:3F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:1e:a5:9b:38:15:85:4a:66:77:e8:ba:15:e3:07:0e:3e:
         8c:e4:30:63:66:1b:bc:3c:6e:1b:f5:05:fe:43:be:b5:54:22:
         40:14:41:d1:45:0d:a8:09:64:3a:f1:36:9a:c6:4f:cd:32:31:
         45:9d:18:bf:7f:e8:f8:5d:94:cb:95:63:94:1d:15:69:8b:9a:
         fa:9e:74:61:ed:96:5c:b9:78:7a:4f:7b:49:64:73:45:24:5b:
         60:9a:0e:cb:51:21:26:8e:20:25:3e:14:47:59:0e:bd:a1:ad:
         fd:3c:89:11:96:78:66:c6:60:e0:e5:2b:e0:27:e3:f4:5f:d0:
         8b:c7:68:c8:f8:25:6b:fa:71:80:0d:01:49:ba:24:05:1c:25:
         93:3a:1e:6b:eb:73:2e:aa:5c:22:3d:3e:91:dd:e6:cd:91:8b:
         bf:d0:b2:52:6d:a4:fd:36:57:ee:3d:ac:87:a0:b2:ac:04:52:
         1b:5c:a9:32:1f:f7:0d:38:cc:6a:f4:61:75:85:de:94:8b:54:
         33:31:6a:77:e0:e9:0b:5c:e5:97:60:ba:6b:3c:cc:70:ec:92:
         c2:88:a7:08:8a:a5:b5:b4:ea:30:fd:c1:2d:1e:66:ff:5d:26:
         52:07:f6:ef:b6:8b:1c:01:a3:eb:ba:16:dd:0d:8a:c5:30:e5:
         d4:09:01:fd
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUMlzG9oiW56vCtXqFALElzJsypYowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTA2MjEyMzIzWhcNMjYwMTA1MjEyODIz
WjAzMTEwLwYDVQQDEyg4QjFDRjI5OEIyRjBDN0ZFOThBMURFOTVCRDdBQzg1QTQ2
QUQ0MDNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKUHLFe7lKP4
b9VvpYVjs+V4BCrqOnF/hbE3czfVQ8BHgKc1Ubsm01XjREuCfFj+l3DSJAmr5CAD
jeFwMUZnhNlqXSmJx4OfP7Rz5k+xFewyQgfEdvSTT7Zk0Kv6li593CFQYJCkACz4
BPSdmFMuMXpCMGviBrYd0fsSGDW5ayY3XB/qT5DpvxpsoZXGjuUZtwZw7TGaptGW
3S6IFsxZjfcS0WoweLh09hxYB18czoD+1PZO8Pn2BwnbnlHx4FEHDZig7MJbJ8Q1
19aIhECXVipJvYPDYYuuS8EaqfY8gQIqZ8k6YIAZ9xMb3/kb1WgvGyl1scsh8FUR
8wLPBqYmMQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIsc8piy8Mf+mKHelb16yFpG
rUA/MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzYwNzgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf6cMA0GCSqGSIb3DQEBCwUAA4IB
AQCeBx6lmzgVhUpmd+i6FeMHDj6M5DBjZhu8PG4b9QX+Q761VCJAFEHRRQ2oCWQ6
8Taaxk/NMjFFnRi/f+j4XZTLlWOUHRVpi5r6nnRh7ZZcuXh6T3tJZHNFJFtgmg7L
USEmjiAlPhRHWQ69oa39PIkRlnhmxmDg5SvgJ+P0X9CLx2jI+CVr+nGADQFJuiQF
HCWTOh5r63MuqlwiPT6R3ebNkYu/0LJSbaT9NlfuPayHoLKsBFIbXKkyH/cNOMxq
9GF1hd6Ui1QzMWp34OkLXOWXYLprPMxw7JLCiKcIiqW1tOow/cEtHmb/XSZSB/bv
toscAaPruhbdDYrFMOXUCQH9
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:05 2025 by rpki-client