Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa
File:                     AS399486.roa (raw, json)
Hash identifier:          jqY9OvzUk4i7gS6NE4r1h5b+++wRs4DNnZQafIoRD2s=
Subject key identifier:   A5:E3:B7:48:3D:94:1B:C8:5A:E5:01:89:41:31:C8:7F:46:71:BA:9B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       278987C9AF01F04EB51D0FCF5674D1CF13D0D040
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa
Signing time:             Thu 03 Jul 2025 09:29:44 +0000
ROA not before:           Thu 03 Jul 2025 09:24:44 +0000
ROA not after:            Thu 02 Jul 2026 09:29:44 +0000
asID:                     399486
IP address blocks:        157.254.164.0/23 maxlen: 24
                          157.254.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:89:87:c9:af:01:f0:4e:b5:1d:0f:cf:56:74:d1:cf:13:d0:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 09:24:44 2025 GMT
            Not After : Jul  2 09:29:44 2026 GMT
        Subject: CN=A5E3B7483D941BC85AE501894131C87F4671BA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:b0:35:ac:42:81:06:4d:de:7a:a2:75:ff:
                    fb:a4:ee:6d:09:ab:b6:a6:f9:d4:6d:03:1c:49:72:
                    7f:a6:a9:bf:15:98:12:22:a9:60:89:c4:1a:ad:94:
                    22:4a:56:f7:cc:ef:64:cb:e8:51:ad:08:ae:94:a9:
                    33:cb:97:c4:13:5e:9a:76:24:da:33:df:70:e3:6d:
                    de:cb:4e:4d:1c:7f:c3:b8:67:26:06:5a:0d:2a:d5:
                    43:33:c6:fa:4a:ad:c4:0a:35:ce:b8:fc:3b:05:e0:
                    7a:6c:03:3e:a9:77:ad:4f:fb:7e:fc:89:38:67:02:
                    52:ac:cf:4e:2c:67:34:b4:fd:c3:17:16:61:04:23:
                    ab:a7:88:2f:32:19:d5:60:37:19:d5:48:06:e3:c9:
                    20:eb:88:fe:cf:bb:b8:5b:21:11:f6:43:73:d7:8d:
                    69:59:7b:bb:a7:6b:3f:bc:38:45:5e:37:4f:94:41:
                    14:de:76:8e:f0:c7:de:4f:60:36:e6:3c:33:d9:44:
                    b8:df:d6:6b:ed:6e:c1:ce:a3:d0:ed:30:b4:3d:95:
                    c3:4f:41:c8:34:27:49:83:80:36:0c:4a:67:89:b9:
                    37:4a:e9:e4:ba:a7:b1:86:49:fa:71:dd:7c:34:16:
                    81:83:73:1f:9a:af:bc:b6:fd:b4:1a:56:a8:cd:03:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E3:B7:48:3D:94:1B:C8:5A:E5:01:89:41:31:C8:7F:46:71:BA:9B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.164.0/23
                  157.254.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:3f:47:f1:34:36:45:42:84:f7:a9:ac:a7:21:19:e5:7d:
         e6:93:a1:4f:96:58:ed:d3:ef:bb:29:8d:f7:6a:5e:89:31:8b:
         2c:61:ef:91:df:f6:59:0f:ad:31:07:f6:09:1e:67:90:3e:f7:
         e5:fd:f7:18:8a:2b:19:23:18:36:1f:3b:fe:8c:81:dc:e2:5c:
         df:78:c5:5b:43:af:85:3e:1a:b1:ec:48:7f:4c:21:3c:45:a0:
         27:87:44:f2:20:0e:16:f5:25:12:21:ea:48:64:89:49:ae:f9:
         8e:b8:8d:6a:4c:bb:51:f7:3a:fa:60:dd:45:8b:44:58:db:74:
         04:80:ef:63:02:6e:21:7c:38:db:b5:6d:59:bf:1f:ad:98:0a:
         be:1e:4d:35:6e:ec:f7:ee:0a:d7:ce:00:52:96:08:d4:fc:98:
         77:5d:9c:37:5e:7e:dc:99:ba:b4:7d:e1:2f:9a:02:7b:82:ed:
         80:73:3b:bc:e8:f4:82:63:80:7f:ce:df:76:15:c0:cb:c0:6c:
         c0:e3:ab:42:01:17:3e:1c:6d:6e:54:26:c4:e4:df:21:c0:55:
         9f:95:00:ed:28:ad:76:79:78:a1:f6:de:70:22:54:d8:b7:06:
         17:f2:4d:80:96:c7:0f:a6:fb:3d:67:c6:f6:49:2c:48:33:6f:
         59:29:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:30 2025 by rpki-client