Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          KVmmch1cNx5tUJJAgAgS2joQW0tQp2U3lsdBSW+xSDQ=
Subject key identifier:   42:EF:7E:D7:9A:C7:B7:92:29:9C:A1:03:12:7B:77:67:60:AC:4C:09
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       21AE69A38869ADE9781915D922FF76825627FD12
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS13335.roa
Signing time:             Thu 26 Feb 2026 18:10:40 +0000
ROA not before:           Thu 26 Feb 2026 18:05:40 +0000
ROA not after:            Thu 25 Feb 2027 18:10:40 +0000
asID:                     13335
IP address blocks:        157.254.152.0/24 maxlen: 24
                          157.254.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ae:69:a3:88:69:ad:e9:78:19:15:d9:22:ff:76:82:56:27:fd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb 26 18:05:40 2026 GMT
            Not After : Feb 25 18:10:40 2027 GMT
        Subject: CN=42EF7ED79AC7B792299CA103127B776760AC4C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:ee:a4:78:c5:4d:7d:c1:ec:ad:be:96:a4:
                    18:b8:66:d7:67:49:34:42:13:2c:5e:48:dc:4c:4e:
                    ad:78:30:c1:ff:8f:17:45:55:30:1f:a0:62:e0:cd:
                    89:dc:c1:19:59:1b:74:74:0e:0f:ca:80:d8:e3:c7:
                    80:d2:fd:e6:90:d1:05:f2:78:40:bb:97:1f:04:0f:
                    34:83:58:97:fe:f4:7b:47:74:72:22:08:2c:a2:e1:
                    66:1e:90:e2:34:73:87:95:91:38:8e:ee:7b:29:46:
                    75:96:c0:db:e4:bb:c6:0a:15:8b:11:ff:fe:d5:ad:
                    0d:09:9d:6e:ad:72:7c:ad:0d:2a:b8:a1:77:23:20:
                    d6:8a:7e:c4:0c:23:09:fc:3a:d1:f5:2f:83:e4:89:
                    1d:74:27:4d:78:74:39:2a:ae:a7:42:95:d2:68:19:
                    b1:51:d5:c3:59:11:c5:7f:ca:e4:4a:0e:c6:d0:14:
                    64:0f:59:67:fc:81:95:d9:0b:01:72:c1:db:a9:10:
                    2f:f5:43:c8:49:dc:66:02:9b:71:46:8e:21:d6:48:
                    ca:8d:37:f5:e0:e9:4a:d0:eb:c4:e8:f0:93:75:1a:
                    1c:79:47:87:61:e8:b2:60:5a:9d:7f:72:9a:a6:af:
                    c0:e1:00:d8:4f:92:54:5c:f5:a0:8f:f7:1c:7a:0b:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:7E:D7:9A:C7:B7:92:29:9C:A1:03:12:7B:77:67:60:AC:4C:09
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24
                  157.254.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:99:11:24:6e:17:4c:7e:b6:e0:de:00:e5:05:0e:17:f2:d1:
         d3:89:a0:ed:aa:43:fe:4a:76:f7:f4:3d:b2:b9:1f:e6:04:95:
         ab:8d:4e:fc:aa:01:c9:43:4e:08:e7:a1:1b:69:c9:15:e8:64:
         4e:7a:b1:6c:12:79:15:48:57:ec:79:db:f5:5b:4d:0d:e4:14:
         b7:27:0c:25:35:42:8f:4b:9c:b5:5b:43:53:f7:fd:8e:96:f5:
         cb:09:3b:bd:92:86:3f:9f:96:a5:a8:98:de:c4:b3:53:f2:9d:
         e1:53:44:d6:36:e3:2e:a4:97:7f:ab:37:71:34:14:a9:42:59:
         8a:ea:f4:5a:96:23:2e:5a:0f:f9:95:1c:67:a6:fa:74:1a:d5:
         e9:48:8f:90:2e:82:36:0c:56:e2:5b:cb:78:4f:82:21:7a:30:
         77:78:90:64:c4:48:82:ad:1f:b8:56:2c:1d:4e:9d:23:2b:88:
         64:a8:93:36:8d:4e:2e:3b:05:c5:a1:74:4c:7b:a8:0a:f8:e5:
         e4:fd:b8:6b:83:30:c0:b5:e0:a0:ba:32:ad:37:14:93:70:eb:
         78:ff:f7:05:85:70:ee:d0:f9:76:8b:a0:1e:db:9d:e7:b0:ef:
         73:b9:4f:48:e8:ad:03:3b:72:e6:87:6a:57:76:72:de:4f:98:
         b7:27:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:33:43 2026 by rpki-client