Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402349.roa
File:                     AS402349.roa (raw, json)
Hash identifier:          l/lKA9t7URDUusot5088vET7OCuEM/6oF/ArwqRHQiI=
Subject key identifier:   E8:EE:87:EF:F7:49:96:4F:EB:73:98:C4:CC:DD:E5:BE:F6:58:C0:C8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       23A1C8A51F6AC0DFA2830CAFBB643602E0DD0A58
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402349.roa
Signing time:             Fri 05 Jun 2026 13:13:58 +0000
ROA not before:           Fri 05 Jun 2026 13:08:58 +0000
ROA not after:            Fri 04 Jun 2027 13:13:58 +0000
asID:                     402349
IP address blocks:        157.254.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a1:c8:a5:1f:6a:c0:df:a2:83:0c:af:bb:64:36:02:e0:dd:0a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  5 13:08:58 2026 GMT
            Not After : Jun  4 13:13:58 2027 GMT
        Subject: CN=E8EE87EFF749964FEB7398C4CCDDE5BEF658C0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:7f:13:41:6d:2b:d8:96:10:8a:ea:99:f8:
                    8f:b4:0d:85:40:c9:52:0a:5c:4e:d4:68:7e:83:d6:
                    97:57:71:02:da:55:3c:55:db:4f:a4:3a:e2:ee:0f:
                    9d:31:eb:4b:f7:78:d1:e4:41:a6:ba:92:56:84:81:
                    c1:a7:e7:4e:58:4d:c3:5a:d6:6c:f7:8d:fa:5c:85:
                    a2:0b:ca:3c:b0:3b:3c:67:ee:11:e8:0a:13:80:fc:
                    13:c1:62:98:8e:69:02:a5:20:53:d9:f2:d8:ad:17:
                    a6:20:7b:06:09:0d:bc:aa:2a:cf:44:5e:c5:08:29:
                    3f:57:01:ce:28:8a:d7:78:af:6b:b4:b7:81:e8:dc:
                    59:7e:e1:eb:ce:73:9b:f1:c3:45:23:cd:26:70:fe:
                    2a:35:8e:b0:1b:3f:27:3e:72:fa:ca:69:0c:e8:35:
                    03:e2:c0:6e:2d:32:d2:b1:c3:70:19:fd:4f:bc:9e:
                    83:77:3c:26:e3:d7:1e:1a:eb:04:ad:1d:5a:60:75:
                    41:d6:ba:e8:6a:90:33:e1:fd:6c:e6:5d:d4:8e:55:
                    22:60:ea:18:d6:d5:fb:e5:06:de:24:9f:15:60:63:
                    8e:4b:49:ed:58:af:f9:3d:c7:45:a8:83:31:18:41:
                    bf:8e:af:27:a2:ab:c3:97:ca:3d:ca:fb:4f:c4:63:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:87:EF:F7:49:96:4F:EB:73:98:C4:CC:DD:E5:BE:F6:58:C0:C8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402349.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:54:a7:fe:9d:4a:2e:08:e1:1b:70:8d:95:75:aa:81:3c:c1:
         1c:1a:96:2d:82:ec:52:7d:01:18:07:84:e6:a7:c5:32:7b:a2:
         a8:41:c5:32:5d:41:64:32:95:17:be:da:6c:8d:08:0c:f4:af:
         ba:f5:cd:68:27:9a:1e:9e:f5:a7:93:7d:c4:e1:6a:bd:ba:75:
         2a:aa:82:f2:6a:09:1d:93:14:7b:59:69:89:b9:3b:27:72:98:
         af:26:df:a3:77:5c:ad:98:d5:84:c3:0b:ed:47:45:ff:13:7b:
         33:32:2c:50:46:e4:59:52:3c:4e:52:ea:77:b0:4a:c8:4d:7a:
         d7:bd:29:f6:ee:6a:0f:64:5f:b1:70:8f:d0:8e:d7:a0:bb:22:
         30:1f:e8:39:68:4c:56:e8:71:be:0e:07:5d:95:40:79:90:07:
         b8:23:fb:1c:39:11:78:14:4e:6d:af:da:9a:86:fa:1e:36:05:
         e6:fe:94:67:85:37:16:ae:d3:39:3f:f8:d8:fa:d1:3d:1c:a0:
         40:cc:76:10:35:d3:0b:60:72:22:a0:5a:7a:2e:7c:44:10:b8:
         3c:ca:2e:5e:7e:18:8d:9d:a4:2e:04:40:7c:2d:44:ae:72:91:
         8d:18:5b:7f:a5:05:0c:d7:3b:58:e4:fb:6d:98:c6:be:6f:7b:
         b7:be:86:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:26:53 2026 by rpki-client