Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152565.roa
File:                     AS152565.roa (raw, json)
Hash identifier:          HXYtaUJ8NotrBizxzqaKi0eZAOfBBNkGuDcnaOQNosY=
Subject key identifier:   6F:2A:FC:38:E6:F9:9B:5B:69:FC:5F:FC:33:BA:D6:68:94:16:D4:BE
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0220B6DC87D96E0731063CB1C7E7182C64B7C857
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152565.roa
Signing time:             Wed 13 Aug 2025 08:27:40 +0000
ROA not before:           Wed 13 Aug 2025 08:22:40 +0000
ROA not after:            Wed 12 Aug 2026 08:27:40 +0000
asID:                     152565
IP address blocks:        157.254.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:b6:dc:87:d9:6e:07:31:06:3c:b1:c7:e7:18:2c:64:b7:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 13 08:22:40 2025 GMT
            Not After : Aug 12 08:27:40 2026 GMT
        Subject: CN=6F2AFC38E6F99B5B69FC5FFC33BAD6689416D4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:63:3a:8a:ba:42:5f:5b:89:b1:be:0e:cb:
                    03:7e:a4:de:27:da:a3:a0:47:9c:cf:43:02:4a:13:
                    2b:ee:3e:7c:a1:5b:e2:10:ae:62:c2:3d:84:c5:70:
                    48:d5:0d:3a:20:97:35:9f:10:41:cb:74:65:af:ab:
                    5c:f2:ce:90:88:b8:48:63:8c:77:d7:ec:fd:11:4f:
                    46:5e:60:20:fc:ea:5c:43:e0:a1:4f:06:6c:ce:b9:
                    80:15:b3:4a:e5:f6:5b:3e:7c:0c:21:33:15:16:a9:
                    3c:13:e2:56:4d:f7:f1:2e:2f:df:59:f4:29:30:63:
                    90:5b:db:23:96:e0:f8:36:d5:e6:cf:bf:98:9a:1c:
                    75:02:cc:47:9d:b5:b3:4d:c3:e6:4e:c5:e7:07:f6:
                    14:3e:26:27:eb:46:28:28:32:41:0b:e5:49:24:4b:
                    53:c6:87:4a:5e:f8:4f:e5:73:6c:19:b9:69:72:00:
                    5c:de:6d:59:85:c7:d3:7c:cf:03:1b:ff:f1:63:81:
                    30:aa:5a:72:c8:54:f7:48:64:8b:e8:9d:84:aa:6b:
                    17:16:30:da:ac:6d:6c:a1:7e:6e:6f:d0:06:cf:9d:
                    76:61:84:87:f6:93:45:8f:6f:07:f5:79:a8:d2:c1:
                    76:9b:49:01:ec:6f:5f:60:91:ec:2b:ec:2e:7a:a2:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2A:FC:38:E6:F9:9B:5B:69:FC:5F:FC:33:BA:D6:68:94:16:D4:BE
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152565.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:bc:5d:72:80:00:02:d3:ac:c3:8b:99:6a:d1:33:99:7c:44:
         85:21:c9:89:22:d5:c3:52:0f:d6:99:f3:bc:9a:0b:e0:54:2f:
         c5:ab:64:ff:27:ea:4b:5d:81:6d:32:5e:13:f9:f2:a0:91:68:
         6c:13:28:d7:4a:21:39:59:7e:d0:78:3d:83:7e:74:67:85:4c:
         27:10:64:79:a6:58:60:a2:73:06:b3:e6:ef:62:8f:82:8a:1c:
         6b:27:0d:19:1b:20:f0:9e:bc:2e:b1:21:d0:37:3a:92:de:7d:
         32:66:ee:d5:eb:9e:a6:bb:71:98:74:17:ac:25:20:4c:0b:28:
         fb:33:5d:9d:82:08:3c:1b:45:48:76:dd:70:0e:1f:79:47:9d:
         94:bc:ea:ff:b6:1e:cc:16:fc:20:db:74:1b:29:3e:40:98:dc:
         73:b2:85:8f:7c:6d:1f:f3:1a:64:e7:f7:2a:40:af:af:d6:c0:
         09:8b:05:ff:1d:ba:22:5c:02:a3:c9:11:07:49:94:7d:e5:f1:
         9e:c8:ed:cb:4a:91:93:f1:f3:c7:39:af:8d:a8:75:59:8d:0a:
         ba:8e:56:e0:2c:6a:6d:ac:83:a2:13:42:e6:45:59:5c:ad:c3:
         8b:fc:31:f5:85:5c:0f:78:3b:ec:98:7a:69:93:f0:4f:4d:e3:
         72:19:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:49 2025 by rpki-client