Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa
File:                     AS3356.roa (raw, json)
Hash identifier:          dHe1nvtkgpKBy6hD65XI1QVFL/6hql7gxB8Vdgw2nT0=
Subject key identifier:   93:00:7D:E9:24:CB:F1:88:02:03:68:B2:CE:D1:4B:E1:9C:66:F6:E0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4FDE01639ED95CCA6B76F5D6ABC35811CB816115
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa
Signing time:             Tue 03 Nov 2026 14:36:22 +0000
ROA not before:           Tue 03 Nov 2026 14:31:22 +0000
ROA not after:            Tue 02 Nov 2027 14:36:22 +0000
asID:                     3356
IP address blocks:        157.254.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 12:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:de:01:63:9e:d9:5c:ca:6b:76:f5:d6:ab:c3:58:11:cb:81:61:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov  3 14:31:22 2026 GMT
            Not After : Nov  2 14:36:22 2027 GMT
        Subject: CN=93007DE924CBF188020368B2CED14BE19C66F6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:d2:ee:ee:07:ac:e3:22:65:fa:8d:fb:07:
                    f7:41:8e:ab:c1:6f:c0:4a:35:b1:99:07:78:51:3a:
                    4c:63:0b:ba:54:db:27:49:28:0c:f2:de:ed:4c:45:
                    a8:63:15:11:47:6a:3d:f7:66:08:d6:52:20:ec:94:
                    68:5d:38:ff:2a:65:b4:d2:cd:fa:d8:49:0e:e0:c5:
                    04:c6:8d:e6:b5:87:f1:0a:a3:a9:02:6b:23:2a:43:
                    43:3e:30:92:7b:ea:4f:43:31:ee:2f:1a:a4:71:47:
                    92:72:af:72:26:ee:d8:7d:ec:d7:ee:79:6d:5c:5e:
                    69:18:23:d0:60:c5:24:bc:dc:54:04:b0:2a:fd:7c:
                    d1:a8:e4:35:af:45:e3:57:cb:3e:e2:7d:50:cd:3d:
                    15:29:2a:5c:10:f8:f2:4e:0c:77:87:a9:f2:57:20:
                    28:3e:bb:5f:94:19:51:3b:d5:41:8f:41:fb:cb:66:
                    0b:ff:00:b5:2f:01:65:1c:b3:31:1d:f1:73:e4:dc:
                    83:f6:60:11:6e:39:69:29:29:f0:b6:99:87:43:18:
                    88:70:0e:b1:55:db:25:79:56:d7:29:c7:1a:87:bf:
                    56:4e:08:60:9d:0c:ef:df:d8:a6:28:98:63:c1:c2:
                    ec:bd:aa:c2:9d:a3:24:1f:93:31:67:58:f5:54:62:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:7D:E9:24:CB:F1:88:02:03:68:B2:CE:D1:4B:E1:9C:66:F6:E0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:cb:8f:c9:a1:7d:a4:2a:3d:67:24:96:78:9b:c5:80:19:
         e7:ba:b4:2a:ad:07:84:3d:ff:d1:11:02:af:3d:54:a8:a1:40:
         08:d9:90:c1:b1:05:9a:ce:d4:a7:cb:34:24:be:ee:9c:91:f8:
         d8:98:a4:5b:2f:98:76:dd:c8:56:1d:8a:f0:5b:2a:d1:04:b6:
         dc:76:0e:ad:2d:c2:49:6b:f4:d7:6d:d1:47:95:76:2e:60:f2:
         c4:49:8f:ba:24:46:b8:f2:23:4d:99:09:09:b5:37:7f:d6:7b:
         16:0a:7c:70:e4:aa:8a:7e:bc:7c:58:6f:52:b1:70:6a:9f:a5:
         eb:e1:ba:c1:3b:ba:fa:3f:f6:e0:c2:94:96:5b:e7:c3:15:88:
         f0:db:10:43:5b:6a:5d:aa:5e:65:95:f8:29:de:e5:a7:80:b7:
         85:35:1b:66:58:b9:ed:42:f1:af:f7:d7:44:9e:b6:c8:18:da:
         8d:f4:ae:e1:26:a9:2f:6b:c7:1a:72:5c:7c:01:84:c0:b2:68:
         b9:ff:94:46:80:d3:da:18:b2:33:78:4d:75:86:d8:ce:95:8b:
         80:aa:43:a9:b4:f4:13:af:1d:5c:40:22:34:1c:17:a6:3a:18:
         33:57:e7:38:7b:a4:e9:8d:43:5c:5a:c6:59:63:83:e8:9e:22:
         66:b7:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:32:34 2026 by rpki-client