Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25846.roa
File:                     AS25846.roa (raw, json)
Hash identifier:          QF7QApl2TaDrKm1fTzGmuf/wiow4MIlM3MXkNYM9fdQ=
Subject key identifier:   14:BD:90:78:61:00:B5:BC:34:86:E9:93:B7:0A:96:DD:14:8C:8E:24
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0C34BE818F5AF280121DD743C50497208C0C20A5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25846.roa
Signing time:             Tue 14 Apr 2026 16:35:57 +0000
ROA not before:           Tue 14 Apr 2026 16:30:57 +0000
ROA not after:            Tue 13 Apr 2027 16:35:57 +0000
asID:                     25846
IP address blocks:        157.254.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:34:be:81:8f:5a:f2:80:12:1d:d7:43:c5:04:97:20:8c:0c:20:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 14 16:30:57 2026 GMT
            Not After : Apr 13 16:35:57 2027 GMT
        Subject: CN=14BD90786100B5BC3486E993B70A96DD148C8E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:0f:47:81:78:bf:03:43:ce:9f:79:91:3a:
                    21:13:68:d1:ab:60:55:50:3e:48:c3:2c:72:43:11:
                    23:1a:48:b6:91:0c:42:5a:93:21:4f:bc:3e:c0:b3:
                    10:64:13:6f:89:e7:ec:b7:6a:de:bd:e7:28:80:5b:
                    69:5c:f9:6f:7e:b2:bd:da:27:17:08:ab:f8:43:85:
                    8a:79:1a:b2:76:92:e3:c2:32:f4:57:79:8d:fe:59:
                    c5:38:c5:5b:15:2b:52:5f:16:fd:6f:4a:e1:bf:e7:
                    ac:81:1b:48:0e:21:c9:64:1a:1d:84:b4:ed:77:35:
                    32:21:57:92:56:c8:c4:40:9b:8f:b2:0c:bf:1b:91:
                    46:7d:f6:8c:d8:29:58:ba:ae:05:4f:d8:4a:36:0e:
                    06:1d:8a:d8:b9:3a:23:48:3f:be:18:60:96:2a:0d:
                    02:43:47:56:c7:5d:a5:66:d9:65:c9:0a:1c:28:35:
                    c8:43:6e:79:18:83:0d:cd:e2:bc:f3:11:d9:80:72:
                    65:4b:fc:28:b8:2d:42:52:13:b9:1b:11:28:5d:fa:
                    fc:08:34:d2:40:5f:35:8f:69:81:12:db:5c:1e:d9:
                    bd:68:9b:6f:87:8c:3f:db:26:6b:2a:3b:80:98:84:
                    f8:48:15:7d:09:ce:97:60:65:00:18:b1:d3:2f:5b:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:90:78:61:00:B5:BC:34:86:E9:93:B7:0A:96:DD:14:8C:8E:24
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c4:10:be:16:cf:d5:02:d3:c3:c1:fe:29:e8:32:f7:22:11:
         e7:9f:65:e6:54:f2:f3:32:cb:f5:10:58:7a:39:35:da:45:e2:
         8a:4b:a1:9a:8f:ad:c4:77:7b:42:f7:7b:e0:1b:02:4a:90:9d:
         2e:5b:71:79:2f:41:15:6b:ce:dd:16:0a:ca:db:f8:d1:d2:6b:
         fe:20:41:0c:ca:05:d2:46:eb:e9:0e:9b:3b:26:23:8f:b4:26:
         57:3d:3c:91:c2:cb:aa:95:ae:9d:b8:f7:c9:56:9e:d1:57:9b:
         f3:2b:64:44:2e:87:10:67:52:2e:f9:6e:fb:75:a8:a6:fa:98:
         af:20:6f:67:b3:f3:e4:a6:05:59:57:13:fe:57:9d:a0:49:3a:
         99:77:89:c4:b7:88:b2:01:16:fd:bc:60:72:4f:52:c0:fb:55:
         f3:54:bf:27:50:32:79:b4:ff:7f:3d:ac:95:85:e1:87:99:3b:
         28:a9:0f:71:5c:99:f4:09:54:53:2c:03:c4:03:36:5f:a2:2b:
         03:24:19:cc:14:8d:bb:91:6a:a6:06:3f:bc:78:47:99:2e:8e:
         99:e4:df:f9:93:f6:38:14:c0:6a:df:4e:ff:ee:09:bf:53:74:
         b3:56:7a:5c:39:77:a8:80:49:a4:22:8e:ba:1c:cf:57:aa:2d:
         8e:8b:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:13:21 2026 by rpki-client