Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400758.roa
File:                     AS400758.roa (raw, json)
Hash identifier:          KPz1Tq4M7K3Dc+zvw+vYv0Fi+zNZapOImqbuIOoCSrQ=
Subject key identifier:   C2:96:9D:12:0D:37:3D:B4:4B:6D:4E:D0:67:C9:CE:C2:78:69:F7:F5
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       72CF2527064B5CE53D4FD342199B4C6F73AEADC5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400758.roa
Signing time:             Thu 03 Jul 2025 09:29:44 +0000
ROA not before:           Thu 03 Jul 2025 09:24:44 +0000
ROA not after:            Thu 02 Jul 2026 09:29:44 +0000
asID:                     400758
IP address blocks:        157.254.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cf:25:27:06:4b:5c:e5:3d:4f:d3:42:19:9b:4c:6f:73:ae:ad:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 09:24:44 2025 GMT
            Not After : Jul  2 09:29:44 2026 GMT
        Subject: CN=C2969D120D373DB44B6D4ED067C9CEC27869F7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:f6:e9:4a:2f:bf:91:5f:82:f9:cf:a0:f7:
                    9e:51:67:dc:b2:f0:a1:6e:5e:dc:c1:68:89:be:eb:
                    78:03:28:87:3a:ff:22:d0:34:8a:56:f8:9d:e6:d0:
                    f0:94:28:2e:0e:78:30:d2:33:b6:61:8b:42:a1:e7:
                    87:7b:3d:d1:62:29:e8:dc:64:34:5e:36:56:24:af:
                    b6:c8:12:93:23:f9:03:36:29:3b:d7:15:45:b3:c2:
                    07:63:c2:51:7d:2c:a5:13:81:fc:83:ad:e9:f5:df:
                    02:1f:d6:c2:03:5b:2c:d4:bf:89:4f:e9:ba:ec:81:
                    cc:17:2b:0d:9d:5d:22:d5:d7:7b:23:90:b6:f9:54:
                    a2:69:bd:35:00:96:b1:38:a1:a8:0f:83:0d:21:c6:
                    64:53:05:c7:05:48:50:52:a6:ae:98:06:2b:d8:ce:
                    ef:57:8d:e2:84:7c:46:a9:d5:26:63:30:61:b7:d6:
                    2d:99:2a:08:02:e1:1b:ff:91:72:1c:f4:ed:79:71:
                    a3:ae:a7:fc:01:8a:6e:ac:c7:d5:6b:99:e0:ad:69:
                    d2:1b:7f:44:38:8b:35:06:73:15:f2:15:31:a4:14:
                    92:90:c1:47:15:36:28:1a:af:13:aa:ef:9c:48:9c:
                    4c:38:a1:ee:90:bb:dc:3a:d6:ca:8e:d0:3f:3e:a6:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:9D:12:0D:37:3D:B4:4B:6D:4E:D0:67:C9:CE:C2:78:69:F7:F5
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400758.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:4c:47:a5:98:8f:97:3e:31:78:a4:3a:c5:ab:0e:93:ae:
         98:83:b9:c0:5c:33:87:f5:c4:77:c1:ec:b2:aa:be:70:2d:df:
         bc:08:ee:81:f5:9f:63:e9:22:f1:b0:7d:fd:a9:d3:cc:ff:64:
         9e:99:72:5c:6a:d7:b7:56:28:77:fe:e5:8d:9f:78:0c:c6:e2:
         6a:09:16:52:93:76:b1:bd:a5:d6:0a:e5:34:bc:55:ba:b3:c4:
         19:12:d6:d5:62:df:8d:f1:1b:7b:ba:6d:2c:b0:ce:f1:79:de:
         5f:3d:10:22:ea:02:27:bf:09:36:2c:3a:82:58:e7:7d:e4:ea:
         93:57:fb:70:58:32:8d:9a:84:ab:1d:05:5c:10:bf:90:38:37:
         95:ab:58:76:55:8d:26:4a:93:52:c1:40:70:70:55:f1:76:b0:
         9a:61:2a:8b:82:59:e8:ac:6b:25:43:36:28:e4:2a:14:30:35:
         73:9c:61:c2:8c:38:ae:c6:19:45:0b:b5:0f:85:21:b5:4b:8a:
         40:0d:39:a7:d9:5e:48:95:51:f3:e0:b6:e5:34:76:ce:b6:f0:
         71:26:ba:7d:40:48:bf:04:62:fa:91:ea:6a:9f:9d:83:82:f0:
         d0:d1:40:5b:2f:0c:34:26:61:68:29:4d:45:d9:ca:e8:24:5b:
         69:3b:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:12:30 2025 by rpki-client