Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          biFK7+A7oBScqTAqjzfjHj3olCnQjNCbuaEREQTnXo0=
Subject key identifier:   F0:CC:B5:BE:4A:F6:04:60:FF:EE:18:14:46:DD:C7:09:1C:FD:7E:40
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       02BD1E16E9B1169917F1E2663C114B1B2F30BCEE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS174.roa
Signing time:             Wed 23 Apr 2025 00:00:20 +0000
ROA not before:           Tue 22 Apr 2025 23:55:20 +0000
ROA not after:            Wed 22 Apr 2026 00:00:20 +0000
asID:                     174
IP address blocks:        157.254.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:1e:16:e9:b1:16:99:17:f1:e2:66:3c:11:4b:1b:2f:30:bc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 22 23:55:20 2025 GMT
            Not After : Apr 22 00:00:20 2026 GMT
        Subject: CN=F0CCB5BE4AF60460FFEE181446DDC7091CFD7E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:6b:21:59:8e:ec:9e:e4:4e:93:d1:cd:46:
                    ca:8a:90:f6:45:b0:4f:61:c7:3f:6a:f3:38:58:88:
                    d9:eb:ca:4f:c8:c8:f0:e8:c3:c2:0e:11:a4:24:57:
                    5f:f2:36:35:c3:fc:45:5f:58:a7:97:71:7d:71:fe:
                    01:58:5e:8c:d6:76:b0:24:44:17:04:6a:1b:4d:be:
                    b0:4f:f7:65:ba:00:de:3d:7e:cd:ed:85:47:a7:58:
                    2b:d0:ca:39:8d:0f:8e:35:ef:35:93:17:4c:12:33:
                    11:78:a8:90:50:f8:8d:d3:df:eb:3e:a1:9c:bc:82:
                    e1:8e:15:96:42:20:fd:70:8a:26:c4:91:5a:5b:43:
                    48:75:06:87:b2:4a:be:62:3c:e6:ee:ef:f0:5f:3c:
                    de:68:0d:b9:bf:45:2e:36:1d:f9:1c:d9:41:15:96:
                    d6:51:c9:d7:f9:72:3f:4c:8c:46:b0:2a:ba:6d:fb:
                    bb:35:0d:f5:ae:dd:b2:5e:89:67:b3:88:3c:05:60:
                    af:e2:cc:28:cf:9b:51:c2:dc:0f:0e:79:90:89:a8:
                    8a:53:82:07:88:08:aa:16:0c:76:a1:ac:67:d0:c9:
                    e0:4d:85:cd:37:05:86:01:59:7d:9d:93:e1:d6:bb:
                    3e:59:10:d5:89:db:db:34:b4:89:91:3f:10:a7:e4:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CC:B5:BE:4A:F6:04:60:FF:EE:18:14:46:DD:C7:09:1C:FD:7E:40
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:33:f7:c6:8c:d9:4f:81:6d:3c:fc:8a:4f:a1:cd:de:98:24:
         b7:23:02:be:05:f9:3d:bb:79:bd:13:d7:01:13:63:5c:64:c7:
         ab:1b:b7:92:c9:0e:af:27:45:35:30:87:c9:0e:e0:06:43:07:
         c9:b4:7c:8f:1a:54:1e:76:c4:09:77:96:9f:b6:68:8e:49:8c:
         1f:72:51:01:8f:8f:66:2c:d8:2c:96:14:de:0f:46:02:15:2d:
         59:8f:6f:69:eb:bf:45:da:f9:b7:ee:3b:e8:3b:c8:5a:96:e6:
         af:ce:35:4f:a0:45:42:5c:ba:06:2b:8b:ef:6e:57:f1:ea:32:
         ac:eb:d2:9d:28:03:d9:82:6e:ed:2f:c5:e0:99:cf:3a:5f:17:
         8c:ee:7e:35:a1:d2:19:61:e4:ed:bc:bf:88:ee:ce:61:8b:5d:
         f6:b9:c4:06:32:53:54:d5:97:7b:c8:62:f9:e5:03:48:95:ce:
         b3:d5:74:a8:fa:3a:23:a9:0c:12:f6:d4:c5:3f:ba:21:cb:e5:
         d9:8f:99:1a:10:29:9a:88:be:ef:2b:f5:f9:45:20:28:e7:e3:
         db:2e:e3:44:8f:23:70:61:27:30:aa:02:ca:a4:87:58:16:a7:
         56:ec:e1:2e:cd:21:b7:5e:d2:2c:0c:fb:4d:e5:bc:50:2d:29:
         8b:f3:c6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:15:45 2025 by rpki-client