Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          FH3p5c5Bh5eXGMiY0JNd7FFTcODBXW2T7ASPrmjIYZ4=
Subject key identifier:   B7:99:AE:ED:88:AF:2A:3C:3E:9F:E4:0B:F0:6B:21:D4:77:65:0B:6C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       219C96BC81ECEBEB4D75EE54545668B781620C41
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10753.roa
Signing time:             Wed 22 Jul 2026 13:44:17 +0000
ROA not before:           Wed 22 Jul 2026 13:39:17 +0000
ROA not after:            Wed 21 Jul 2027 13:44:17 +0000
asID:                     10753
IP address blocks:        157.254.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9c:96:bc:81:ec:eb:eb:4d:75:ee:54:54:56:68:b7:81:62:0c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 22 13:39:17 2026 GMT
            Not After : Jul 21 13:44:17 2027 GMT
        Subject: CN=B799AEED88AF2A3C3E9FE40BF06B21D477650B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:46:f0:d2:5d:2f:3d:2f:a4:db:a0:b5:5b:
                    f3:2e:fa:83:3b:24:77:b9:b9:ea:7f:97:71:82:87:
                    58:94:75:2e:33:e5:89:b2:ea:76:01:13:6a:12:b5:
                    91:f9:ac:a2:e3:97:81:06:fe:12:49:2d:61:a0:20:
                    c1:60:2d:6a:b5:74:4e:8c:17:9b:2d:05:ef:e1:ae:
                    63:44:00:9e:1b:98:d2:1e:cd:6e:0f:14:f5:4a:ff:
                    3e:d7:2a:65:eb:00:14:6a:60:c7:51:1f:c2:9c:9d:
                    03:a3:3e:ae:0d:58:5f:be:df:92:e0:a0:21:38:18:
                    05:09:2d:20:5e:90:4d:bc:32:94:40:45:f9:09:82:
                    82:c5:a8:eb:b4:2a:f0:0d:a2:f7:9a:e3:c9:71:3d:
                    09:d7:99:9a:39:7c:da:9c:34:c4:a5:db:e7:07:9b:
                    7f:3d:50:a6:f1:29:31:d5:98:c5:35:5e:31:da:ce:
                    86:91:30:df:a6:ca:6f:dd:59:5a:f4:e6:ce:54:de:
                    e3:90:9b:81:fe:52:57:32:86:76:11:c9:08:73:94:
                    14:e4:09:69:5c:1c:86:ad:01:70:36:83:d4:08:17:
                    a0:10:1e:9e:73:03:29:22:af:2d:ff:f3:6d:ab:d2:
                    85:97:2f:ef:94:9b:f8:d3:75:16:07:ab:19:f1:07:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:99:AE:ED:88:AF:2A:3C:3E:9F:E4:0B:F0:6B:21:D4:77:65:0B:6C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:f8:7c:02:1f:be:d5:df:b9:76:4d:2d:35:a7:64:25:0b:ac:
         bc:0f:49:4c:0f:bc:3a:ab:f6:1e:52:69:c0:97:43:29:fe:46:
         cf:18:ab:15:72:36:db:8f:6d:30:2d:f4:75:6a:ad:f1:4a:ba:
         90:2a:fc:2d:22:1a:77:5f:07:29:34:3b:c3:5f:9c:c3:b9:8a:
         1d:a9:7c:39:ed:65:07:63:5c:95:d3:f6:a6:bb:ed:2d:0b:73:
         9c:c1:fa:b7:94:a9:4e:10:d2:94:f2:49:37:c5:37:3e:b9:ea:
         7a:84:74:d9:6b:1c:c4:44:3e:ba:a5:ed:69:36:e1:06:23:be:
         72:7a:a5:00:2c:93:17:4f:88:c8:f1:21:94:f6:17:4f:d7:07:
         7e:61:7f:5c:8d:2b:05:7d:35:93:26:ee:ed:13:e9:2b:ec:0d:
         47:fe:c1:8a:0a:a8:df:c5:01:c0:33:0d:64:6e:67:4a:0e:a3:
         3e:45:d5:db:93:0b:1f:a6:16:68:71:cd:c5:14:63:4c:d1:27:
         df:39:fd:2c:a7:ee:09:1e:3d:87:97:dc:a9:b1:9b:c2:f3:62:
         b8:e3:7b:41:2e:54:83:e2:83:9b:fb:65:d4:79:b7:cd:2c:f8:
         97:73:1d:fd:96:d5:26:f0:e7:9c:9c:8f:cc:cb:41:44:78:01:
         a3:4f:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:29:07 2026 by rpki-client