Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          KDLYW7M8a2faJMrM4UyG6Js/hut41zFsHjaiPEU/zYw=
Subject key identifier:   16:01:A9:42:BE:BF:7C:B3:31:BB:3A:2B:2D:CB:76:D4:D6:0C:EA:0E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       32C32FC154A54616B65B2B097CB301DA3C3264D1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
Signing time:             Wed 17 Sep 2025 07:29:45 +0000
ROA not before:           Wed 17 Sep 2025 07:24:45 +0000
ROA not after:            Wed 16 Sep 2026 07:29:45 +0000
asID:                     152179
IP address blocks:        192.227.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c3:2f:c1:54:a5:46:16:b6:5b:2b:09:7c:b3:01:da:3c:32:64:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 17 07:24:45 2025 GMT
            Not After : Sep 16 07:29:45 2026 GMT
        Subject: CN=1601A942BEBF7CB331BB3A2B2DCB76D4D60CEA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:ea:a2:7a:64:49:df:8a:da:15:a0:35:6d:
                    ef:74:f9:29:c5:33:38:be:2b:86:1a:f4:1e:80:aa:
                    57:cf:94:cd:1e:67:26:59:2c:11:00:d5:7e:f3:bd:
                    c0:a4:06:be:7b:44:33:34:a5:b1:08:7f:69:a5:2e:
                    fd:db:f6:d4:da:08:1a:d8:f6:fb:fd:1a:88:4a:aa:
                    2d:fe:34:28:cf:06:26:5b:ff:85:56:71:1d:4d:75:
                    c1:b0:33:06:35:e3:44:ec:30:d1:d0:9f:d2:51:8f:
                    19:2c:14:53:70:f3:16:a6:cb:8a:c1:70:8e:41:47:
                    5d:67:f2:37:d3:2f:c9:1d:18:68:ee:0f:52:4b:d3:
                    5b:63:e1:7e:3c:f4:d0:3f:7d:15:1b:a0:ad:ff:ca:
                    b5:3d:d0:98:33:43:45:f3:f7:a9:97:07:c8:4a:ac:
                    b8:3e:31:8a:d9:44:86:5f:bf:89:b6:b6:7d:aa:de:
                    84:df:15:41:9f:18:6f:46:03:ca:76:35:e9:78:f9:
                    2f:da:93:94:3d:29:1e:9f:dd:78:37:37:df:33:49:
                    72:5c:8e:64:8d:b7:12:15:8d:f4:e5:4b:ba:03:96:
                    7e:03:5a:52:f3:2f:1c:94:71:45:f2:aa:55:b1:e9:
                    fd:dd:df:ef:2c:62:fe:bd:5c:8f:33:a9:4f:bd:49:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:01:A9:42:BE:BF:7C:B3:31:BB:3A:2B:2D:CB:76:D4:D6:0C:EA:0E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.227.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:94:df:4d:90:a0:bb:8a:49:92:78:3b:3f:52:e1:c3:06:fa:
         02:a3:9c:da:58:bb:e3:a9:9d:e6:84:e8:6a:f1:2f:cc:27:eb:
         0b:03:51:75:9e:ac:a8:41:7a:78:57:d2:e4:01:5d:17:7f:ea:
         1f:4d:d1:de:d3:d4:d2:34:b1:4c:87:f2:2c:74:70:fd:39:3a:
         27:27:41:f9:58:8c:97:1c:68:6b:8d:02:84:18:4a:13:a3:60:
         c8:9a:35:45:79:26:6d:c9:4f:f1:5d:f5:be:f0:b7:3a:8d:7b:
         6e:82:1e:15:5d:16:f0:6a:30:0f:0f:15:22:11:e6:1d:4b:2c:
         ae:4e:18:4d:96:e1:38:1e:ff:39:28:a2:07:02:31:19:7b:43:
         3a:94:df:4d:a8:a6:2b:e4:f6:33:44:16:bb:e5:33:24:c8:42:
         ff:cb:3f:c8:aa:4f:b2:0f:a1:3e:f5:49:5c:e1:40:97:d6:f3:
         6d:6e:12:e0:92:37:6a:a9:1f:fc:66:fb:22:0f:36:22:2b:ae:
         1e:ae:64:fb:0c:d1:fb:b6:24:ee:f1:51:fa:93:79:17:00:68:
         d9:0e:46:8c:e6:16:2a:71:d5:34:e5:80:e8:d4:af:41:20:b0:
         7f:02:2c:75:b8:ca:c9:e1:0a:f5:55:72:12:8c:23:c5:69:5c:
         a3:7d:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:11 2025 by rpki-client