Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
File:                     AS996.roa (raw, json)
Hash identifier:          8QijeJ3pON0inmrqc1cwzHDr/zLLQFaL9YW7StDxnQE=
Subject key identifier:   31:CC:C7:3C:06:BA:B6:51:CC:E8:DC:0F:27:EE:56:14:12:B4:F9:8C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4E813EAE563D6F3A8D3593C9D0F9E8C9B401BABB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
Signing time:             Wed 15 Apr 2026 12:35:57 +0000
ROA not before:           Wed 15 Apr 2026 12:30:57 +0000
ROA not after:            Wed 14 Apr 2027 12:35:57 +0000
asID:                     996
IP address blocks:        157.254.34.0/23 maxlen: 24
                          157.254.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:81:3e:ae:56:3d:6f:3a:8d:35:93:c9:d0:f9:e8:c9:b4:01:ba:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 15 12:30:57 2026 GMT
            Not After : Apr 14 12:35:57 2027 GMT
        Subject: CN=31CCC73C06BAB651CCE8DC0F27EE561412B4F98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:26:fa:94:1c:ef:25:ee:25:99:8b:93:68:
                    34:7f:07:f7:f2:ed:38:5d:aa:29:fc:d1:91:a1:c0:
                    ef:c1:c2:f7:22:38:ef:62:df:de:bc:28:39:29:1f:
                    14:17:1d:bb:e5:b5:41:93:fe:58:aa:ac:9e:82:93:
                    c6:eb:d7:18:2c:f8:90:7d:6d:4b:9b:2b:a1:1f:cf:
                    eb:17:21:ce:25:79:49:59:7d:e3:11:31:81:f3:6e:
                    c0:3a:5c:d2:60:89:d8:ee:94:89:f3:36:8c:e0:2e:
                    8d:3b:cd:d4:64:7d:f2:26:19:4d:a0:0c:b3:0a:20:
                    d1:1a:0a:f6:a6:d3:d1:75:9c:fa:86:b2:d3:81:54:
                    d7:c3:af:56:a8:66:56:31:6c:d1:ec:ea:4b:3b:88:
                    b8:69:24:9a:31:38:4e:d6:2c:85:6d:26:56:6f:74:
                    4f:53:9f:34:ff:09:1b:22:7e:7c:ec:52:6a:64:15:
                    80:52:54:4d:6c:9f:1c:5e:8d:9d:a6:06:b7:99:9b:
                    ed:bb:50:c2:0a:59:68:ba:50:b2:9a:28:b4:27:5f:
                    d4:cd:99:bc:4a:e0:76:4a:5f:72:fe:72:84:13:02:
                    d2:e4:dc:60:1f:c7:10:28:8b:ba:1d:63:7d:f7:66:
                    0a:90:f2:11:ae:d1:23:b3:74:df:12:1b:8a:ab:20:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:C7:3C:06:BA:B6:51:CC:E8:DC:0F:27:EE:56:14:12:B4:F9:8C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.34.0/23
                  157.254.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:87:c7:e0:99:3c:c1:e7:fb:07:9c:8d:5e:49:ac:2f:f2:c0:
         f2:1f:57:93:32:b1:37:6e:5c:15:80:05:44:91:83:e0:ff:36:
         6d:0c:0d:fa:58:6c:63:00:8f:86:49:9e:97:98:69:5c:f7:bf:
         75:54:b4:7b:59:27:42:24:96:24:5d:c6:aa:b6:4f:1c:b4:09:
         37:ee:e4:17:ee:bd:3f:41:2f:f0:72:92:c2:76:b4:ed:07:8d:
         e7:2d:45:0c:48:14:9a:49:73:36:72:84:ef:77:54:96:f4:b1:
         87:be:6b:8b:f4:71:28:be:37:8d:79:ab:65:1b:34:e7:66:27:
         b4:c5:34:2b:2c:18:fb:3f:c2:87:2f:ab:e1:53:9a:55:85:ac:
         2f:7e:a8:17:8a:7d:e1:2f:70:6e:16:20:ad:06:7d:ff:d7:48:
         e7:38:e4:a9:4e:7b:89:71:3f:8f:89:54:8f:01:af:33:92:4d:
         50:69:a5:d9:e6:71:63:20:2e:3c:ec:5d:40:02:47:11:b5:c0:
         96:b3:0f:e7:06:b8:9d:a3:52:6a:2e:19:c4:c2:7e:a2:9c:c2:
         66:65:68:8a:92:d4:f2:7e:af:70:aa:ef:94:9d:01:e1:3d:e2:
         31:ed:86:d8:93:07:40:6e:3b:91:be:b2:3d:6e:84:15:e3:b5:
         b0:96:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:13:21 2026 by rpki-client