Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa
File:                     AS214025.roa (raw, json)
Hash identifier:          6Gb6XWHMAYa0bcK1FnlYR6CdKG8y2O2JqNPEVeWvnNE=
Subject key identifier:   57:DC:E5:FE:4D:20:89:CC:DB:D4:22:A6:0D:9A:09:1A:BB:1A:ED:0C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       44416FAF8FE496F0804113C0F5C6BCDFB47312DF
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa
Signing time:             Wed 15 Apr 2026 01:14:56 +0000
ROA not before:           Wed 15 Apr 2026 01:09:56 +0000
ROA not after:            Wed 14 Apr 2027 01:14:56 +0000
asID:                     214025
IP address blocks:        157.254.152.0/24 maxlen: 24
                          157.254.155.0/24 maxlen: 24
                          157.254.175.0/24 maxlen: 24
                          157.254.208.0/24 maxlen: 24
                          157.254.214.0/24 maxlen: 24
                          192.231.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:41:6f:af:8f:e4:96:f0:80:41:13:c0:f5:c6:bc:df:b4:73:12:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 15 01:09:56 2026 GMT
            Not After : Apr 14 01:14:56 2027 GMT
        Subject: CN=57DCE5FE4D2089CCDBD422A60D9A091ABB1AED0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:23:d0:cb:fb:b8:fb:15:d8:de:b2:d0:06:
                    f6:e5:54:c8:bc:f4:9a:8c:7d:f5:f0:3a:02:e1:9f:
                    95:d2:b1:3e:1e:ee:17:3e:9e:06:fe:4c:93:08:a0:
                    56:a8:56:0f:79:14:5e:63:30:26:5d:74:e9:43:ce:
                    48:76:18:d9:e0:e1:b4:99:8e:5f:ef:cd:f0:e8:3e:
                    96:74:b9:43:57:09:f5:8c:ac:b6:a2:49:d8:81:50:
                    18:7f:40:51:5f:ae:e1:7b:b7:cb:f9:59:07:64:9a:
                    04:e4:27:a1:2d:61:56:2b:55:06:15:02:99:99:ea:
                    f3:87:28:bd:90:9a:95:4c:4b:bf:58:0e:69:c4:96:
                    3e:98:2e:02:08:72:8f:0e:ee:a7:e7:36:b0:ff:ad:
                    6b:93:b8:b3:5f:87:ca:1b:f1:1b:b3:9a:6d:23:d4:
                    91:c8:62:ab:bc:f8:c1:4d:8a:20:22:d0:e4:b7:89:
                    ca:71:55:3b:45:b8:e1:c8:29:02:1e:0f:e6:9b:9b:
                    4d:7f:f8:ab:b9:cd:7c:97:30:30:90:70:1c:9f:0a:
                    36:30:14:c7:e9:92:7f:f1:44:04:2b:81:b2:40:e5:
                    e7:ee:36:8a:64:cc:95:04:d4:49:a0:07:70:75:cb:
                    82:68:81:d7:2b:7f:e2:b2:7a:cf:fe:09:2e:33:f8:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:E5:FE:4D:20:89:CC:DB:D4:22:A6:0D:9A:09:1A:BB:1A:ED:0C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24
                  157.254.155.0/24
                  157.254.175.0/24
                  157.254.208.0/24
                  157.254.214.0/24
                  192.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a2:17:6f:7a:44:3f:d2:6d:fa:55:e0:32:94:4e:4c:ea:2b:
         ac:45:f0:3d:09:6e:d2:ff:ad:4a:a5:c7:83:ec:bd:5d:9e:bf:
         07:59:70:2d:80:c3:21:18:70:58:2c:7e:fe:6e:22:67:44:93:
         1d:60:4d:7b:73:78:03:59:14:00:b9:00:bc:93:da:b5:35:19:
         54:75:27:df:61:46:1b:4e:8e:19:3d:8c:47:e1:34:87:5e:3f:
         c0:9a:69:82:c6:20:c0:14:d4:a8:b7:22:df:45:01:e8:44:c5:
         1b:79:98:57:63:b2:70:f8:40:f9:c7:71:53:68:c8:d9:dc:3d:
         08:25:61:e1:ff:89:33:fc:a2:91:a1:9b:ee:ff:ef:d0:ba:53:
         3a:79:fa:f4:8f:af:1c:93:14:45:97:06:16:73:a2:a6:f4:77:
         37:ba:be:f6:9b:54:02:bb:6e:9b:d9:05:fb:a6:fe:b3:34:91:
         48:eb:ce:05:49:c9:53:6f:42:f5:08:8c:68:0b:72:bb:41:fa:
         f2:11:fd:01:66:ab:e4:c6:8b:fb:cd:99:74:de:d6:f8:c3:54:
         cf:3c:5d:bb:d7:dc:22:ac:d7:27:7c:fe:a6:34:3b:19:9a:34:
         8a:08:56:56:fe:e9:c1:71:89:06:ba:8d:10:94:47:61:39:81:
         d4:6c:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:13:18 2026 by rpki-client