Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40501.roa
File:                     AS40501.roa (raw, json)
Hash identifier:          XPM9tT1TwH6O61ImHcZxvY29/Vu93NU41w3ZO5IwwMM=
Subject key identifier:   7D:B1:4F:4A:07:C2:43:3B:0F:B9:D2:3E:02:F9:5D:1C:71:C6:BB:B8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       44C68F2ECF97CD76B32CBE9A3C8DE0025F7F4B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40501.roa
Signing time:             Mon 07 Jul 2025 20:29:44 +0000
ROA not before:           Mon 07 Jul 2025 20:24:44 +0000
ROA not after:            Mon 06 Jul 2026 20:29:44 +0000
asID:                     40501
IP address blocks:        157.254.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 15:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c6:8f:2e:cf:97:cd:76:b3:2c:be:9a:3c:8d:e0:02:5f:7f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  7 20:24:44 2025 GMT
            Not After : Jul  6 20:29:44 2026 GMT
        Subject: CN=7DB14F4A07C2433B0FB9D23E02F95D1C71C6BBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:2c:82:04:bf:d9:5d:10:b8:41:97:67:bb:
                    29:b6:6a:28:4f:24:01:bd:26:bd:2a:c6:f2:5c:4e:
                    50:d6:90:22:54:fd:ee:70:f1:b7:73:d6:cc:76:73:
                    14:c5:0c:5b:d1:c9:02:c2:c9:7a:b5:2f:9e:3c:4a:
                    b0:e0:99:2f:98:31:1d:3d:1f:1a:2e:92:7e:6a:ba:
                    31:83:5e:e7:bc:0b:67:f6:1e:51:8a:bb:81:cc:3c:
                    5b:88:25:38:a2:a0:ef:7c:fc:42:84:c7:2f:1d:d9:
                    3a:c6:09:e6:d3:6f:fa:30:9b:81:6a:54:b7:6b:5b:
                    f7:27:48:f4:6d:9d:d7:82:65:67:c6:62:38:bd:43:
                    85:44:e5:f8:c6:f7:c7:7c:74:05:f3:15:be:1b:6a:
                    c1:81:6f:01:9e:ba:a1:a7:e7:83:57:5c:25:0b:50:
                    1c:c0:0d:43:92:b7:d6:66:92:85:bf:ab:7e:47:05:
                    c0:fe:4b:c8:20:8b:89:1c:bc:ad:04:2b:71:94:17:
                    c6:e6:28:17:67:bf:e3:bb:b6:f9:58:10:2d:56:8f:
                    47:96:40:70:7c:e6:3d:8c:56:59:82:2d:bc:96:97:
                    b5:40:bd:50:06:94:6f:5e:4c:e9:09:3b:8a:24:0b:
                    9a:6f:f0:ce:f4:c7:d2:b8:6c:75:6b:8c:a8:39:c7:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B1:4F:4A:07:C2:43:3B:0F:B9:D2:3E:02:F9:5D:1C:71:C6:BB:B8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40501.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:57:06:34:ad:e3:e1:a6:03:e3:e4:6a:29:5f:98:aa:11:1c:
         17:ea:7e:b1:cf:2b:4c:a2:ad:0b:e2:5a:a7:e3:b7:9a:dc:80:
         d3:b6:0f:4c:e3:c2:c8:da:42:a0:a9:e2:98:69:dd:00:43:7c:
         8e:1c:0b:f7:83:61:4c:23:7b:f3:5a:5c:4f:3c:72:52:27:7f:
         fb:75:41:2f:7e:2e:a3:f5:ff:06:52:e0:71:4c:47:a0:ee:a4:
         a2:61:f5:79:ee:af:16:0d:ba:b0:1a:1b:a4:6e:72:68:93:e9:
         b8:1c:48:f9:2a:15:b3:14:dd:62:21:f3:68:64:d8:bf:51:ba:
         72:aa:34:15:1b:08:1b:c3:34:d5:be:3d:1e:54:bc:53:e3:93:
         20:82:c5:41:a8:55:64:1d:4a:e2:98:d1:fe:b1:b9:c7:96:de:
         c1:d5:c5:88:0d:b4:de:92:ee:f2:31:43:e6:45:18:13:bf:00:
         39:2b:e9:e7:e4:db:2a:af:2c:06:d8:09:7c:a7:01:6b:74:59:
         c9:9b:59:9c:33:96:c5:5e:a5:fa:2d:45:fc:a9:91:88:00:6e:
         05:08:6c:c2:d4:79:ac:89:52:aa:1b:82:cd:77:7d:21:b9:5d:
         13:19:85:f3:ad:50:52:cd:23:a1:ea:99:19:f5:e4:21:49:c2:
         6e:cd:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:01:03 2025 by rpki-client