Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          g1EM+RBrli6L1u8xoGWnMLd3Y8jqzzacoWo71xLy+sI=
Subject key identifier:   AE:58:DB:C8:D2:FE:16:7E:5B:71:A5:88:55:59:C9:38:2C:EB:EE:85
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       579A45E68CEC5C75563310E6841DA70DBEC2EC71
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
Signing time:             Thu 03 Jul 2025 09:29:44 +0000
ROA not before:           Thu 03 Jul 2025 09:24:44 +0000
ROA not after:            Thu 02 Jul 2026 09:29:44 +0000
asID:                     396356
IP address blocks:        157.254.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9a:45:e6:8c:ec:5c:75:56:33:10:e6:84:1d:a7:0d:be:c2:ec:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 09:24:44 2025 GMT
            Not After : Jul  2 09:29:44 2026 GMT
        Subject: CN=AE58DBC8D2FE167E5B71A5885559C9382CEBEE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:fb:3e:94:26:d1:c1:42:86:84:77:49:ab:
                    74:4d:f2:a6:79:8c:4f:db:b9:ed:ca:5f:f7:41:35:
                    16:f9:64:86:8c:30:b3:ce:12:e4:b2:be:0b:8e:01:
                    5f:73:9d:52:38:b8:51:8b:92:ba:fd:71:1b:5b:c2:
                    e2:73:ae:2f:9b:5f:dd:47:d8:0c:1a:40:15:c8:e3:
                    7a:53:b5:36:7d:25:11:b1:93:66:e0:ea:10:4b:4f:
                    ac:fd:65:c0:99:49:73:10:a2:3d:6d:a7:1c:58:bb:
                    f5:af:d8:6a:f7:9d:c9:f9:a3:ff:e8:30:32:e8:2f:
                    2d:c5:e0:7b:17:4d:8e:8d:a9:1d:42:ba:40:db:0d:
                    8a:0d:5b:52:ba:20:54:43:18:b5:36:2e:4f:17:1a:
                    bf:2e:92:c6:ff:96:8c:64:48:c4:a0:29:68:9c:ea:
                    16:ee:9b:9d:f9:8c:76:cd:b5:d9:10:d6:6a:e9:a9:
                    44:e5:e3:dd:b9:fb:14:f7:da:03:36:2f:50:7d:e7:
                    fe:01:f9:e0:44:73:c5:11:df:01:ed:18:ca:2d:44:
                    0f:05:97:47:95:a8:8a:41:ad:e7:4a:53:16:2d:17:
                    6b:bc:08:57:c5:ca:e8:cd:a0:74:ab:af:88:32:a0:
                    83:f7:c0:26:6e:cd:50:bc:a5:31:3e:88:56:43:67:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:58:DB:C8:D2:FE:16:7E:5B:71:A5:88:55:59:C9:38:2C:EB:EE:85
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:16:5d:ff:1f:f8:63:86:e0:40:a6:8b:02:77:c3:79:45:c6:
         23:04:0b:fe:7c:a5:07:b2:f2:b4:4f:20:0b:44:ba:b8:0a:a5:
         13:94:e5:86:33:ff:12:a2:4a:b1:79:dc:74:53:af:03:19:29:
         82:3d:7a:bf:8e:e9:f5:27:01:36:dc:6f:4b:10:52:d3:f0:c0:
         b3:34:dc:d9:5e:28:33:b0:ea:cc:18:48:5f:a6:56:85:8b:1f:
         8d:f2:f5:a2:48:26:b9:6b:20:5f:3b:6f:59:60:b1:54:7e:e1:
         b0:ba:bc:36:fd:db:e6:31:f4:67:d4:2b:8a:b6:5c:0c:e0:2b:
         a9:8e:46:b6:be:92:a7:cd:11:0b:41:be:df:76:16:ab:4d:26:
         62:8a:8e:f9:de:ed:8b:15:4b:57:60:28:db:33:fa:c4:f7:49:
         a9:e1:91:d8:cd:ec:cc:0e:81:e0:7f:c1:0a:ec:0c:59:14:53:
         9a:f8:b1:90:0a:af:a5:43:67:9f:15:d2:8d:b7:92:f1:4d:dc:
         d0:a3:87:29:d4:b7:c5:11:40:11:96:71:ff:e1:b7:01:01:2d:
         38:48:1f:41:06:fd:3f:98:e6:49:ce:75:4c:b1:0b:7d:f5:dc:
         34:35:fb:ea:17:0b:2a:8c:f7:9b:b0:c1:42:b3:50:7b:dd:2b:
         e1:a4:ab:13
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUV5pF5ozsXHVWMxDmhB2nDb7C7HEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNzAzMDkyNDQ0WhcNMjYwNzAyMDkyOTQ0
WjAzMTEwLwYDVQQDEyhBRTU4REJDOEQyRkUxNjdFNUI3MUE1ODg1NTU5QzkzODJD
RUJFRTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWv7PpQm0cFC
hoR3Sat0TfKmeYxP27ntyl/3QTUW+WSGjDCzzhLksr4LjgFfc51SOLhRi5K6/XEb
W8Lic64vm1/dR9gMGkAVyON6U7U2fSURsZNm4OoQS0+s/WXAmUlzEKI9baccWLv1
r9hq953J+aP/6DAy6C8txeB7F02OjakdQrpA2w2KDVtSuiBUQxi1Ni5PFxq/LpLG
/5aMZEjEoClonOoW7pud+Yx2zbXZENZq6alE5ePdufsU99oDNi9Qfef+AfngRHPF
Ed8B7RjKLUQPBZdHlaiKQa3nSlMWLRdrvAhXxcrozaB0q6+IMqCD98Ambs1QvKUx
PohWQ2fpDQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFK5Y28jS/hZ+W3GliFVZyTgs
6+6FMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+rTANBgkqhkiG9w0BAQsFAAOC
AQEAJhZd/x/4Y4bgQKaLAnfDeUXGIwQL/nylB7LytE8gC0S6uAqlE5TlhjP/EqJK
sXncdFOvAxkpgj16v47p9ScBNtxvSxBS0/DAszTc2V4oM7DqzBhIX6ZWhYsfjfL1
okgmuWsgXztvWWCxVH7hsLq8Nv3b5jH0Z9QrirZcDOArqY5Gtr6Sp80RC0G+33YW
q00mYoqO+d7tixVLV2Ao2zP6xPdJqeGR2M3szA6B4H/BCuwMWRRTmvixkAqvpUNn
nxXSjbeS8U3c0KOHKdS3xRFAEZZx/+G3AQEtOEgfQQb9P5jmSc51TLELffXcNDX7
6hcLKoz3m7DBQrNQe90r4aSrEw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:06 2025 by rpki-client