Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60949.roa
File:                     AS60949.roa (raw, json)
Hash identifier:          q25H+LZU4wWk9NpzShlIqBBUlbm571AKUXzfuuaFJGM=
Subject key identifier:   9D:4F:00:2B:34:5B:CF:E9:35:CE:2D:F8:AD:D8:FC:15:C8:8B:D7:4B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4AE4BE1CA6D24CE940F9F3DEC823A540E26C7434
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60949.roa
Signing time:             Sat 13 Sep 2025 20:29:45 +0000
ROA not before:           Sat 13 Sep 2025 20:24:45 +0000
ROA not after:            Sat 12 Sep 2026 20:29:45 +0000
asID:                     60949
IP address blocks:        157.254.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e4:be:1c:a6:d2:4c:e9:40:f9:f3:de:c8:23:a5:40:e2:6c:74:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 13 20:24:45 2025 GMT
            Not After : Sep 12 20:29:45 2026 GMT
        Subject: CN=9D4F002B345BCFE935CE2DF8ADD8FC15C88BD74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:b7:02:21:34:2e:cb:0c:72:df:6d:75:92:
                    5d:de:29:c2:8f:49:00:f6:5f:02:6f:8e:6a:a6:9b:
                    cd:fc:33:81:9d:2f:7d:f8:50:78:0a:6f:d9:35:1a:
                    ab:f2:88:42:5c:43:79:01:d5:2e:2d:f2:d7:61:d6:
                    ec:a4:fc:32:ef:7b:a0:14:e3:9e:7c:25:74:b1:77:
                    63:f9:94:3a:33:b1:46:1f:d5:63:58:bf:5f:84:27:
                    8d:44:71:c5:a2:58:b0:c0:81:86:80:e9:37:81:8e:
                    09:17:e1:23:f3:cd:2e:0b:d0:c4:c2:36:91:79:0e:
                    10:31:b9:31:3f:8e:77:4e:f2:ba:97:0e:e2:95:3a:
                    22:2b:7c:9c:b3:90:7f:0e:1a:7e:b0:68:82:24:18:
                    ea:2c:df:46:eb:b6:5f:a3:38:cf:04:b7:12:1e:d6:
                    b8:89:70:16:b8:9d:1a:e5:93:76:2a:12:1a:7e:26:
                    08:12:ab:ad:26:db:77:91:9a:b7:b7:e6:c3:f0:b4:
                    e9:af:e7:1f:e6:fa:7e:87:6c:9c:55:3c:44:52:53:
                    8f:40:51:72:28:f2:ab:bc:37:11:75:0e:43:3e:e4:
                    7f:76:fc:b4:75:e6:74:e0:4d:1e:fe:4d:de:36:5f:
                    e2:a3:4f:28:5f:39:a6:cf:dd:41:21:b0:8c:8c:b5:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4F:00:2B:34:5B:CF:E9:35:CE:2D:F8:AD:D8:FC:15:C8:8B:D7:4B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60949.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:d6:00:02:cd:d3:5c:fb:be:d3:0a:fa:f4:bf:24:ad:36:
         ea:b0:f4:97:15:e1:04:3d:26:42:9d:3c:76:57:9c:2a:26:13:
         91:11:20:6b:f8:3d:6f:2a:c4:d8:40:b8:c2:8f:e5:17:bb:30:
         36:17:8f:1e:b1:37:75:31:6d:65:e2:56:57:2e:e8:3e:c0:16:
         ee:5d:cc:6a:c0:81:1d:e8:12:8c:5c:60:19:3a:56:7d:05:ae:
         68:05:42:58:be:5d:1f:af:c1:b5:da:5c:2b:24:dd:0c:7c:48:
         49:8f:03:95:bf:6a:8a:fb:ab:8a:ee:9f:ec:ff:b6:54:2d:47:
         51:8e:71:24:32:4e:92:de:fd:23:05:84:60:fb:c5:21:ff:95:
         5b:b6:81:44:e1:19:e3:58:89:53:d9:23:11:27:20:a9:67:1a:
         f9:e6:72:f3:fc:b6:de:92:9b:52:64:c8:3f:2f:e5:b6:00:65:
         fd:a4:a3:26:bb:56:79:20:2d:5a:e7:d7:2b:fe:5e:ce:f3:60:
         cc:76:63:18:4d:58:e3:56:75:90:b9:5f:89:ae:6a:65:bb:42:
         33:cd:94:23:e0:cf:98:de:fa:27:6d:12:0e:c6:e6:b8:58:e4:
         64:59:67:e9:e8:f4:2a:d3:89:ab:b5:48:a5:84:82:06:fb:99:
         17:9a:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:50:20 2025 by rpki-client