Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa
File:                     AS200325.roa (raw, json)
Hash identifier:          zkknnTXB6llcCwsNzoZE8EwCpKtoZ5ux7C0deelbo0w=
Subject key identifier:   E8:3F:E1:3B:5C:CC:F8:2F:5C:1B:32:7B:BA:3A:68:61:09:69:BE:CD
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       1730E0EAEA2079D98E3A19F79A7289538AFC1B0D
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa
Signing time:             Mon 06 Jul 2026 23:29:13 +0000
ROA not before:           Mon 06 Jul 2026 23:24:13 +0000
ROA not after:            Mon 05 Jul 2027 23:29:13 +0000
asID:                     200325
IP address blocks:        157.53.226.0/24 maxlen: 24
                          2607:f740:e00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 09:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:30:e0:ea:ea:20:79:d9:8e:3a:19:f7:9a:72:89:53:8a:fc:1b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jul  6 23:24:13 2026 GMT
            Not After : Jul  5 23:29:13 2027 GMT
        Subject: CN=E83FE13B5CCCF82F5C1B327BBA3A68610969BECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:8b:36:6b:d2:1e:fa:7c:70:31:21:84:d5:
                    65:86:2e:b1:55:b0:b8:96:51:39:18:ec:0a:d1:26:
                    50:71:d2:fc:f6:88:33:9f:3b:ba:cc:3a:1b:d9:51:
                    d0:15:70:9f:ae:c3:f8:a9:05:65:94:15:e2:6d:61:
                    34:28:63:2f:db:a1:e4:4a:db:80:65:2f:dc:b6:d2:
                    af:bc:94:da:49:64:82:da:26:94:c2:92:bc:c9:ff:
                    d4:4d:f2:20:d1:1b:4a:dd:91:e7:47:66:b6:78:2a:
                    a2:e6:28:c8:b6:bd:b0:84:f6:e9:29:0b:02:b9:9c:
                    bf:12:d7:f0:2d:3b:14:de:69:07:eb:30:90:bc:32:
                    c3:5f:4f:22:4f:93:70:b9:cd:63:39:f9:5f:02:59:
                    74:fa:8b:62:ed:6c:0c:eb:c2:85:6a:d5:c8:2d:0b:
                    8e:97:14:57:b4:e7:f1:3b:e4:d4:32:46:8a:af:8c:
                    70:82:f9:b2:dc:e4:69:ad:c7:95:8d:16:dd:a4:1d:
                    47:4c:c6:47:fd:a4:f9:05:8f:b9:57:10:62:44:f7:
                    68:05:b4:6e:0a:cd:3b:62:46:a7:f3:0f:61:2e:65:
                    e6:a6:e2:05:9a:9e:0f:cf:b8:95:ef:64:84:a2:4d:
                    94:65:fb:a8:01:4a:62:3c:d2:ad:58:73:8d:a1:75:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:E1:3B:5C:CC:F8:2F:5C:1B:32:7B:BA:3A:68:61:09:69:BE:CD
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.226.0/24
                IPv6:
                  2607:f740:e00c::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:36:47:36:70:f2:56:aa:6a:33:a6:ec:e2:98:73:89:ff:df:
         99:a7:7d:a2:ce:89:ee:65:92:71:1e:e7:26:0d:8f:24:12:1a:
         5c:65:1f:09:b7:77:d1:5b:45:e5:0f:bb:47:d8:dd:52:c3:b1:
         be:f6:01:36:e8:70:b8:59:44:30:d3:57:16:03:66:b9:32:85:
         c7:05:a7:d0:9b:44:dd:1e:db:39:86:a6:9e:a4:60:b3:ac:b0:
         44:89:1b:ea:cc:a3:72:82:a2:f9:72:65:45:c9:99:81:8e:31:
         5e:e0:03:e0:50:7e:3b:67:d0:43:13:53:3e:73:09:93:f6:c0:
         95:2e:9d:fb:d5:b9:c0:52:97:8d:07:de:d1:ce:14:30:a4:f3:
         22:e0:e3:48:86:d1:b7:d2:26:20:3e:20:9d:87:30:95:26:74:
         25:00:4e:55:c6:7d:36:8b:c8:e1:4e:9f:d8:3d:7e:d0:a8:19:
         43:73:c6:98:12:92:ef:d9:81:34:e7:8a:12:5b:58:60:b5:d1:
         7e:8d:ec:09:ea:01:e4:3f:3a:a9:f3:e6:c8:70:96:91:f3:0f:
         7f:dc:47:26:9f:50:a7:05:aa:75:89:1a:53:85:87:4e:2b:3c:
         59:e9:68:bb:67:19:d6:23:e0:40:a3:c0:3d:7f:5e:44:e3:eb:
         6e:77:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:43:58 2026 by rpki-client