Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS4637.roa
File:                     AS4637.roa (raw, json)
Hash identifier:          P0lp2zhq0kwQgQeT4Rb+lHgVo+OGqk7edPsJ3CC+5Co=
Subject key identifier:   8E:0D:80:05:D9:ED:E1:C8:CA:54:B2:EA:14:26:0C:F2:88:3B:9E:28
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0EBA2E23001937E77BC79018C9D843F2CCDE612E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS4637.roa
Signing time:             Tue 09 Jun 2026 22:36:05 +0000
ROA not before:           Tue 09 Jun 2026 22:31:05 +0000
ROA not after:            Tue 08 Jun 2027 22:36:05 +0000
asID:                     4637
IP address blocks:        157.254.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ba:2e:23:00:19:37:e7:7b:c7:90:18:c9:d8:43:f2:cc:de:61:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  9 22:31:05 2026 GMT
            Not After : Jun  8 22:36:05 2027 GMT
        Subject: CN=8E0D8005D9EDE1C8CA54B2EA14260CF2883B9E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:31:6c:91:32:be:78:dd:f7:c5:86:2a:d8:
                    2b:38:09:6a:87:5d:ea:9c:03:2d:12:fb:f7:61:bc:
                    64:7f:19:af:1e:e3:b4:d0:af:28:9b:39:ef:66:00:
                    2c:6e:19:f3:3b:c2:9c:38:a6:79:40:99:03:6f:59:
                    e0:02:29:4a:a4:dd:0e:65:7a:94:4f:3c:14:6a:b8:
                    3c:37:0e:85:57:46:b1:f5:c3:3c:6e:64:d5:d2:74:
                    da:86:98:b3:05:3c:e1:7c:8d:2e:ed:b8:56:4a:b3:
                    62:0b:d8:aa:8b:10:05:aa:37:96:e3:e4:8e:cf:02:
                    a3:11:44:40:90:b9:19:4e:9e:79:57:d8:22:b1:58:
                    e3:17:e0:78:06:3c:49:7f:a3:d7:94:de:fc:7b:56:
                    e4:84:af:1a:25:dd:5f:87:79:98:a8:3c:f4:0c:ce:
                    f6:35:18:ee:be:c8:10:b6:21:7a:a6:d2:c6:5c:47:
                    77:8d:d9:00:72:c3:a7:56:a7:ba:76:39:84:ca:1f:
                    31:b4:b7:6a:f4:40:e8:a3:d2:05:87:42:e4:ef:39:
                    f4:01:1a:85:12:59:2d:95:a3:0a:55:23:34:86:6d:
                    9d:5d:50:a9:b3:26:3c:e4:1c:00:bc:d7:78:1a:e8:
                    1a:a2:3e:09:8b:c4:21:65:df:75:ed:70:1e:03:7c:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:80:05:D9:ED:E1:C8:CA:54:B2:EA:14:26:0C:F2:88:3B:9E:28
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS4637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:82:da:05:c8:57:cc:03:3c:b9:e6:c9:ba:7f:d4:fd:7e:10:
         52:f0:ff:af:95:c5:19:b8:6b:56:49:0d:2c:af:dd:ab:bb:f2:
         2d:29:95:bc:81:fd:26:04:45:e6:36:ff:ac:38:0d:d8:a7:3f:
         84:39:4b:93:78:bc:13:22:ae:c9:5f:46:fc:33:56:06:cd:bb:
         4b:53:0e:4b:22:f5:39:8a:94:53:23:3f:14:52:ad:b5:05:12:
         d1:ca:e0:7a:87:b0:88:48:73:5d:cb:15:e4:13:c1:2f:10:cf:
         6b:57:af:78:f8:2d:a4:21:24:88:72:62:bd:d4:58:c0:4a:b6:
         77:d2:98:20:6b:2c:9e:fb:db:bf:46:8a:50:7e:0f:42:34:3c:
         72:6e:1d:be:97:ab:a9:9f:4e:5e:6c:c0:61:d0:ac:fe:4c:8a:
         a1:14:c5:c5:ed:4e:84:85:00:67:36:d7:23:29:7d:ac:e4:2d:
         44:76:ca:3b:a9:60:a6:a8:07:4c:6b:bd:10:6a:a3:e9:be:b6:
         79:31:af:01:5f:32:b3:46:d4:e5:08:ee:0b:78:df:a9:69:06:
         18:f1:c5:31:02:48:e9:46:55:0b:a9:fd:49:70:94:3e:86:e3:
         0e:9b:74:36:10:1b:68:3f:d9:24:aa:3a:6c:ff:d2:09:d6:27:
         ed:a3:a5:7e
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUDrouIwAZN+d7x5AYydhD8szeYS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjA5MjIzMTA1WhcNMjcwNjA4MjIzNjA1
WjAzMTEwLwYDVQQDEyg4RTBEODAwNUQ5RURFMUM4Q0E1NEIyRUExNDI2MENGMjg4
M0I5RTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilsxbJEyvnjd
98WGKtgrOAlqh13qnAMtEvv3YbxkfxmvHuO00K8omznvZgAsbhnzO8KcOKZ5QJkD
b1ngAilKpN0OZXqUTzwUarg8Nw6FV0ax9cM8bmTV0nTahpizBTzhfI0u7bhWSrNi
C9iqixAFqjeW4+SOzwKjEURAkLkZTp55V9gisVjjF+B4BjxJf6PXlN78e1bkhK8a
Jd1fh3mYqDz0DM72NRjuvsgQtiF6ptLGXEd3jdkAcsOnVqe6djmEyh8xtLdq9EDo
o9IFh0Lk7zn0ARqFElktlaMKVSM0hm2dXVCpsyY85BwAvNd4Gugaoj4Ji8QhZd91
7XAeA3wqowIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFI4NgAXZ7eHIylSy6hQmDPKI
O54oMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzQ2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/g4wDQYJKoZIhvcNAQELBQADggEB
AEKC2gXIV8wDPLnmybp/1P1+EFLw/6+VxRm4a1ZJDSyv3au78i0plbyB/SYEReY2
/6w4DdinP4Q5S5N4vBMirslfRvwzVgbNu0tTDksi9TmKlFMjPxRSrbUFEtHK4HqH
sIhIc13LFeQTwS8Qz2tXr3j4LaQhJIhyYr3UWMBKtnfSmCBrLJ77279GilB+D0I0
PHJuHb6Xq6mfTl5swGHQrP5MiqEUxcXtToSFAGc21yMpfazkLUR2yjupYKaoB0xr
vRBqo+m+tnkxrwFfMrNG1OUI7gt436lpBhjxxTECSOlGVQup/UlwlD6G4w6bdDYQ
G2g/2SSqOmz/0gnWJ+2jpX4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:23:01 2026 by rpki-client