Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63150.roa
File:                     AS63150.roa (raw, json)
Hash identifier:          djZwpFUiRH6wbeZD8o0KP6bUapwMP0pB2AAYArwEJLI=
Subject key identifier:   9D:65:31:81:2C:24:FD:DE:E9:3D:9E:4E:56:AE:B0:42:34:EF:D7:6B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       264C1099A3F920C01C3B74710494E6062A278D57
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63150.roa
Signing time:             Sat 08 Mar 2025 03:18:35 +0000
ROA not before:           Sat 08 Mar 2025 03:13:35 +0000
ROA not after:            Sat 07 Mar 2026 03:18:35 +0000
asID:                     63150
IP address blocks:        157.254.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4c:10:99:a3:f9:20:c0:1c:3b:74:71:04:94:e6:06:2a:27:8d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar  8 03:13:35 2025 GMT
            Not After : Mar  7 03:18:35 2026 GMT
        Subject: CN=9D6531812C24FDDEE93D9E4E56AEB04234EFD76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:2c:d9:31:62:4c:38:82:a2:c8:b0:57:7a:
                    93:c7:b6:00:78:98:93:83:3c:a5:60:31:0c:d7:01:
                    28:51:15:d3:cf:f0:fe:9e:ba:ca:77:1a:54:3d:d0:
                    a8:22:52:ed:dd:71:cd:92:d4:3f:08:2f:77:56:0a:
                    02:79:e3:59:39:90:74:ca:e0:87:e2:d0:2d:83:d0:
                    29:19:ee:97:ea:85:4e:4a:c2:81:67:9d:76:b4:63:
                    1b:76:86:a6:4d:e6:41:33:d6:73:f7:84:75:e0:14:
                    c1:9d:5e:e7:5c:3d:5d:f2:b5:e3:cf:6b:9c:f4:b3:
                    7c:78:83:62:ed:dd:98:4b:11:53:5d:63:ad:84:bf:
                    22:e9:2e:f8:0f:d5:ec:15:fb:dd:c3:05:b9:72:47:
                    63:c8:b8:1a:49:b7:a4:db:6a:c9:e7:1c:8e:a0:72:
                    ac:a8:a6:71:93:8b:11:19:7a:2a:c0:08:20:b0:86:
                    fc:46:12:0e:12:40:58:16:18:83:4d:99:4f:ca:c1:
                    58:85:c0:90:6d:6c:b2:f0:8b:97:43:c2:c0:61:40:
                    3f:e6:ab:f2:13:79:39:5b:57:b2:2f:13:96:d2:94:
                    16:e2:2c:50:85:af:b4:72:a3:25:ad:23:89:36:32:
                    27:87:dd:27:1b:77:27:05:7a:32:8f:76:0f:92:8a:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:31:81:2C:24:FD:DE:E9:3D:9E:4E:56:AE:B0:42:34:EF:D7:6B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:75:34:80:08:dc:4c:f8:6c:bf:27:3a:ac:54:6f:93:f1:10:
         a6:81:f0:78:f7:35:27:b4:17:1e:1e:07:cd:82:3a:46:3d:33:
         c9:f3:e2:be:33:c8:31:cc:33:7d:35:af:e5:b8:ca:0f:32:1d:
         51:dd:bc:47:a2:94:55:ef:f1:e4:7f:ef:9c:75:4a:0e:6b:a2:
         11:99:87:4a:54:36:a0:aa:fb:b4:b1:bb:2c:a1:2e:b2:46:c2:
         6b:0d:b7:d0:74:c9:4c:66:31:06:b2:6a:33:b2:4e:21:42:06:
         1b:7b:5b:ac:5b:f3:00:ec:f3:c1:bb:a3:2f:03:e6:5b:91:06:
         0a:80:38:26:b2:3b:15:e6:6d:f9:0c:89:1f:6a:8b:0c:8a:e4:
         2e:cf:59:ed:6f:a6:a6:0f:17:f4:b7:cb:3f:47:fd:29:be:63:
         62:86:6a:b0:26:a0:de:4e:df:11:cb:0d:d2:1e:7c:fc:27:37:
         8b:ab:a5:c8:63:21:75:a3:55:cb:4c:9f:fb:d8:05:f5:b9:71:
         52:59:25:b9:8f:12:3c:25:23:c3:33:47:65:b9:f6:17:45:b4:
         b4:36:01:79:32:a6:13:61:65:99:53:5b:7c:76:91:bc:35:4c:
         d9:c6:2f:f1:b0:e4:32:ea:41:29:d9:75:2a:39:f5:49:4e:7a:
         e4:bb:44:eb
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUJkwQmaP5IMAcO3RxBJTmBionjVcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMzA4MDMxMzM1WhcNMjYwMzA3MDMxODM1
WjAzMTEwLwYDVQQDEyg5RDY1MzE4MTJDMjRGRERFRTkzRDlFNEU1NkFFQjA0MjM0
RUZENzZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+os2TFiTDiC
osiwV3qTx7YAeJiTgzylYDEM1wEoURXTz/D+nrrKdxpUPdCoIlLt3XHNktQ/CC93
VgoCeeNZOZB0yuCH4tAtg9ApGe6X6oVOSsKBZ512tGMbdoamTeZBM9Zz94R14BTB
nV7nXD1d8rXjz2uc9LN8eINi7d2YSxFTXWOthL8i6S74D9XsFfvdwwW5ckdjyLga
Sbek22rJ5xyOoHKsqKZxk4sRGXoqwAggsIb8RhIOEkBYFhiDTZlPysFYhcCQbWyy
8IuXQ8LAYUA/5qvyE3k5W1eyLxOW0pQW4ixQha+0cqMlrSOJNjInh90nG3cnBXoy
j3YPkoogIQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJ1lMYEsJP3e6T2eTlausEI0
79drMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzYzMTUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf75MA0GCSqGSIb3DQEBCwUAA4IB
AQABdTSACNxM+Gy/JzqsVG+T8RCmgfB49zUntBceHgfNgjpGPTPJ8+K+M8gxzDN9
Na/luMoPMh1R3bxHopRV7/Hkf++cdUoOa6IRmYdKVDagqvu0sbssoS6yRsJrDbfQ
dMlMZjEGsmozsk4hQgYbe1usW/MA7PPBu6MvA+ZbkQYKgDgmsjsV5m35DIkfaosM
iuQuz1ntb6amDxf0t8s/R/0pvmNihmqwJqDeTt8Ryw3SHnz8JzeLq6XIYyF1o1XL
TJ/72AX1uXFSWSW5jxI8JSPDM0dlufYXRbS0NgF5MqYTYWWZU1t8dpG8NUzZxi/x
sOQy6kEp2XUqOfVJTnrku0Tr
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:05 2025 by rpki-client