Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
File:                     AS268581.roa (raw, json)
Hash identifier:          fb+y4pfWvJqfAGTJ1gSH+iEf5uRkZhIz9yOX0HKVgjk=
Subject key identifier:   A3:7F:93:E3:A9:7C:08:22:4B:37:CE:E2:BC:55:45:54:81:02:F0:EF
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       298E309C1CAF3AEB097B2D4FEB26B37F8D5CFFAE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
Signing time:             Sun 05 Apr 2026 06:35:55 +0000
ROA not before:           Sun 05 Apr 2026 06:30:55 +0000
ROA not after:            Sun 04 Apr 2027 06:35:55 +0000
asID:                     268581
IP address blocks:        157.254.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8e:30:9c:1c:af:3a:eb:09:7b:2d:4f:eb:26:b3:7f:8d:5c:ff:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  5 06:30:55 2026 GMT
            Not After : Apr  4 06:35:55 2027 GMT
        Subject: CN=A37F93E3A97C08224B37CEE2BC5545548102F0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:01:2d:94:e3:d0:6d:37:ef:db:db:89:4b:
                    64:6d:49:fc:8a:c1:43:3b:6b:28:36:8b:bc:61:f6:
                    02:50:f3:48:f1:85:63:1f:05:cb:b5:d6:6e:39:92:
                    eb:fd:89:8b:69:08:d7:80:7c:31:76:93:f3:30:4e:
                    97:07:b1:85:7c:3f:2b:95:57:4c:95:ac:4c:78:38:
                    e8:9f:49:94:ca:41:85:bf:d9:bd:5b:73:16:5b:0f:
                    da:64:09:26:e1:24:26:32:96:d3:7a:5c:11:4a:18:
                    c6:e7:fe:05:41:9c:40:d3:da:9c:4f:c9:98:1f:ad:
                    cb:82:05:5a:d9:77:ba:4c:98:4e:92:17:c8:d2:17:
                    cf:db:2b:15:2d:4c:3e:82:31:7b:44:fb:b6:05:bf:
                    8d:02:d4:09:c0:52:38:f1:2c:28:6e:47:3c:00:0b:
                    1e:c2:1a:d0:49:28:24:04:ee:35:4a:b4:c3:92:ee:
                    50:40:2f:1d:6e:af:5c:0a:11:4b:fd:a0:0c:e6:ca:
                    0e:a5:05:f0:29:8a:01:cb:73:e5:75:39:c8:6c:df:
                    51:95:35:64:5e:e8:13:f4:ec:e3:9c:a9:69:9c:0f:
                    03:05:d0:2c:9f:d1:49:e1:7d:44:04:6d:8f:a4:94:
                    83:a9:13:de:80:9d:b3:ab:88:cb:4c:5d:b8:b0:a1:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7F:93:E3:A9:7C:08:22:4B:37:CE:E2:BC:55:45:54:81:02:F0:EF
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:fd:4a:3a:63:18:17:4e:e7:40:ce:1f:d0:63:9c:2b:33:
         58:e3:1e:bf:b2:4f:95:51:fc:e6:97:13:f2:b0:69:b5:aa:0d:
         67:60:6b:ae:01:c2:d0:f3:52:94:4b:0b:32:de:1d:e2:a7:d4:
         0b:c4:a8:c6:dd:0d:c0:e5:e8:f5:0d:32:94:d6:f4:db:ea:3c:
         00:d6:ce:72:d0:87:15:85:a2:5d:c0:3e:8a:ab:91:2e:66:7c:
         5b:c0:43:ef:05:e0:5a:73:f2:d9:b7:d7:a5:6b:61:00:0d:51:
         22:f0:b7:08:57:66:93:21:9a:20:05:f4:36:5b:b5:91:63:a1:
         3e:69:ea:1e:c9:c8:9b:8f:bb:39:84:81:f2:50:3c:6d:0c:0c:
         61:cb:4d:fd:25:b0:74:ee:30:33:f9:8d:9e:19:77:03:08:cb:
         e6:41:9c:7a:1e:6b:54:69:db:eb:f8:ac:82:44:7a:0e:4e:8c:
         b1:3e:15:ea:b1:5e:9d:29:9b:c6:b4:19:ab:48:d8:ff:06:15:
         a5:b2:04:11:12:a8:5a:33:d6:9e:d8:bf:1c:3c:e3:b4:81:7e:
         4c:8f:a1:4d:65:2d:f2:50:04:04:76:82:ba:76:aa:e8:66:82:
         fa:04:62:ad:09:66:a4:24:d2:81:b3:61:fc:02:df:17:87:2c:
         fb:77:63:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:13:17 2026 by rpki-client