Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
File:                     AS212609.roa (raw, json)
Hash identifier:          N3qV7rh6LNXxVXLT+vjrML01y+CKq9AdjnMTKZrS7/g=
Subject key identifier:   87:1A:48:F4:02:63:DC:5E:3B:9C:7B:79:DF:59:F6:5E:8A:A9:83:DC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7B1CECD37380DE780AB780AD0E5DDC6072528089
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
Signing time:             Thu 04 Jun 2026 09:36:05 +0000
ROA not before:           Thu 04 Jun 2026 09:31:05 +0000
ROA not after:            Thu 03 Jun 2027 09:36:05 +0000
asID:                     212609
IP address blocks:        157.254.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1c:ec:d3:73:80:de:78:0a:b7:80:ad:0e:5d:dc:60:72:52:80:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  4 09:31:05 2026 GMT
            Not After : Jun  3 09:36:05 2027 GMT
        Subject: CN=871A48F40263DC5E3B9C7B79DF59F65E8AA983DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:f1:13:62:58:57:ca:3f:d9:1c:44:9a:b9:
                    e1:f2:79:95:71:25:18:54:03:bc:dc:dc:d2:be:76:
                    61:fb:f0:fc:e1:0f:74:b4:20:36:75:c8:5f:13:23:
                    28:e0:87:89:ce:4d:01:1e:67:77:a3:9d:56:d5:65:
                    93:4d:ef:7b:69:05:6e:43:66:c5:f8:ef:5b:97:8c:
                    61:5f:06:c2:9a:c8:c2:7f:7e:dc:2e:3a:e6:a7:db:
                    ba:11:51:af:5d:d2:ef:6b:d9:0f:b3:92:d9:f0:17:
                    23:75:4a:e4:6b:b8:7b:d9:ab:22:19:c0:32:10:30:
                    3f:61:8f:45:cc:3b:02:c1:84:6f:5a:c0:d3:b9:dc:
                    f9:80:ee:38:32:42:07:ba:bd:62:78:59:0c:3b:8a:
                    85:cd:c7:15:37:84:be:b8:fc:e9:be:46:cd:94:4c:
                    b1:90:b7:87:23:73:32:8f:fa:3f:0b:fc:ad:0c:0d:
                    4a:bd:ca:61:db:9b:39:52:2e:4b:20:2c:d0:ad:9c:
                    e6:de:b9:e0:61:81:da:df:f1:9c:2a:5b:2a:a2:46:
                    63:ec:f6:20:7e:d2:59:1f:0c:16:13:82:fd:40:71:
                    c7:41:c7:18:57:0e:88:dd:3c:3c:82:4d:5b:24:0f:
                    1e:d9:39:9a:69:84:15:b6:10:80:58:c5:42:ad:e9:
                    8e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1A:48:F4:02:63:DC:5E:3B:9C:7B:79:DF:59:F6:5E:8A:A9:83:DC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:d2:8d:00:61:7a:eb:85:c2:d5:64:d4:8a:0d:c3:87:63:
         af:85:98:80:d9:e0:7d:05:f5:b3:3b:4f:33:74:34:59:17:61:
         62:b1:2e:56:65:56:82:0c:86:63:2e:dd:ec:59:52:c3:8d:75:
         a4:8b:bb:b7:f0:b2:aa:30:f6:94:cd:15:5b:37:f6:7c:19:4d:
         ef:24:33:b1:b0:bb:8e:90:b5:96:8c:ac:cc:cf:d7:05:a1:99:
         98:e5:08:e9:28:c4:06:c3:0a:ad:3f:26:cf:a4:82:80:f6:9a:
         59:2b:38:c3:20:c3:08:64:51:7a:28:38:fd:2f:a1:9b:f9:65:
         61:d1:de:61:b4:c9:59:cb:2e:c9:1d:d6:b4:2c:df:9d:e4:14:
         33:85:24:85:9c:cd:28:1c:45:a7:1a:45:ec:8b:7f:ad:33:30:
         26:bd:48:9a:98:27:21:17:b1:20:c3:87:27:52:62:89:78:e8:
         52:18:03:48:0d:c4:22:6b:c0:62:17:ba:d0:b7:10:d9:fc:4c:
         48:0d:82:62:f2:15:9c:26:9b:70:bd:c0:52:5d:f8:dc:59:63:
         a7:39:ca:5f:61:84:1b:db:d1:e2:9e:70:b1:6a:35:db:eb:b5:
         50:24:92:50:c8:1b:11:08:70:c2:fa:4d:8d:09:ee:d2:26:5e:
         20:11:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:50 2026 by rpki-client