Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60949.roa
File:                     AS60949.roa (raw, json)
Hash identifier:          KnkF+luzCL4zqgO4o5w6VsYqNel9U4N10dBRkGOBaaA=
Subject key identifier:   26:E8:4C:25:A2:6F:2D:2F:E2:85:0D:9B:BA:6B:21:1A:56:F6:2F:85
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       69502B8089AF13CAC49F1FF7E6CF962DDD9258CE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60949.roa
Signing time:             Sat 11 Nov 2023 19:20:31 +0000
ROA not before:           Sat 11 Nov 2023 19:15:31 +0000
ROA not after:            Sat 09 Nov 2024 19:20:31 +0000
asID:                     60949
IP address blocks:        157.254.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:2b:80:89:af:13:ca:c4:9f:1f:f7:e6:cf:96:2d:dd:92:58:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 11 19:15:31 2023 GMT
            Not After : Nov  9 19:20:31 2024 GMT
        Subject: CN=26E84C25A26F2D2FE2850D9BBA6B211A56F62F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:42:69:24:8d:b6:c0:58:71:d6:7d:12:13:
                    e7:12:04:ba:82:7a:d4:01:60:5f:81:b4:ef:94:4d:
                    ca:d8:18:17:9a:5e:cb:89:fa:33:a6:c6:83:01:3c:
                    36:ac:f7:db:b6:df:8f:cb:21:cf:7c:09:bf:07:ec:
                    e2:0b:fe:4a:a7:23:f0:7d:80:a0:d0:39:7f:e1:77:
                    31:63:71:54:09:14:ae:12:33:68:da:dd:eb:74:a8:
                    08:7f:b2:85:44:82:ae:58:30:cb:13:aa:ed:5b:f5:
                    6e:26:a9:22:12:45:94:6e:46:ec:0e:13:e2:2e:fa:
                    4b:ef:f7:16:0e:a8:97:0c:4c:db:b2:af:9e:66:1a:
                    ca:aa:81:cb:8a:14:ff:85:7f:67:3d:3f:56:32:3e:
                    ef:aa:66:f3:15:b4:bf:4c:52:d7:90:3d:d3:1d:3b:
                    62:d5:c2:7e:65:09:69:bc:6c:f2:59:95:a1:67:e7:
                    3f:bf:a9:5d:0b:5e:f6:19:fd:bc:de:29:86:f4:a4:
                    a4:b7:30:07:55:6d:11:9c:8d:d1:55:c0:0a:27:8e:
                    bc:69:a8:84:85:30:54:25:30:d2:9e:29:a4:7a:d5:
                    be:8d:62:fd:a8:d3:6a:33:22:7a:f7:4b:6d:a9:ff:
                    e6:4e:1b:2e:ac:68:05:4e:9c:cc:e7:dc:8f:ff:8b:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E8:4C:25:A2:6F:2D:2F:E2:85:0D:9B:BA:6B:21:1A:56:F6:2F:85
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60949.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:e2:07:bc:6c:54:14:bc:ae:33:d7:34:2e:89:27:2a:4e:
         79:fb:d6:55:95:9e:6f:10:0a:27:1d:50:8a:b7:61:83:ae:83:
         2e:69:7e:fd:39:ad:3f:77:97:1a:11:31:c7:28:73:9f:56:28:
         dd:50:b6:07:f3:dd:19:4c:d3:27:ad:1b:70:dd:6f:af:97:e8:
         2b:f1:29:37:87:60:52:32:cb:67:b7:86:a8:a8:76:30:9e:50:
         a5:d5:0a:0a:2b:52:cf:e3:45:77:37:9a:70:4b:fd:84:4d:d6:
         54:07:ad:e2:dd:21:f3:8f:f9:07:d7:6b:11:ef:8d:bb:ac:f2:
         6b:80:31:92:0c:d6:63:2a:73:ae:12:97:e7:a7:77:4b:ec:d9:
         cc:c3:eb:3e:97:25:db:81:a6:00:88:62:58:2a:f9:76:00:16:
         bc:d0:db:f3:eb:11:0e:aa:3e:9c:e1:fd:e8:b7:a9:66:47:0c:
         c9:c4:47:5d:55:f1:f5:c7:9b:8a:8b:fa:0c:55:ff:38:2c:e5:
         2e:73:ea:83:48:bd:8a:b7:80:f6:4b:35:01:40:7f:f4:88:50:
         93:6d:94:53:14:40:45:9e:43:85:b9:d4:15:92:40:f4:e0:92:
         9a:94:b0:4f:05:8c:df:90:e8:10:db:0b:4e:79:a1:0d:8b:43:
         df:75:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org