Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa
File:                     AS202662.roa (raw, json)
Hash identifier:          H+2HfrIVyfv6QXaeiBhw4IWDkNONpq76rKSxyM0UhtQ=
Subject key identifier:   E9:7C:93:A7:05:50:83:87:0E:4D:E7:34:E6:82:31:0A:2F:D5:F4:D0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3EE65461A081371DB524103D4E4121319DC2B8B6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa
Signing time:             Tue 23 Jun 2026 10:36:09 +0000
ROA not before:           Tue 23 Jun 2026 10:31:09 +0000
ROA not after:            Tue 22 Jun 2027 10:36:09 +0000
asID:                     202662
IP address blocks:        157.254.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e6:54:61:a0:81:37:1d:b5:24:10:3d:4e:41:21:31:9d:c2:b8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 23 10:31:09 2026 GMT
            Not After : Jun 22 10:36:09 2027 GMT
        Subject: CN=E97C93A7055083870E4DE734E682310A2FD5F4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:98:e8:56:96:cc:dc:0b:84:2a:ae:3b:b0:
                    86:bd:10:d6:41:09:4b:9b:88:86:be:00:f2:1e:81:
                    26:9e:df:96:a8:2e:6e:97:03:a9:cd:06:a2:8a:6f:
                    4c:2a:03:4c:b2:48:8b:3f:3c:de:7a:3a:3d:c9:b0:
                    0c:39:87:86:7e:c2:6f:5a:fd:81:7e:f0:99:96:4e:
                    aa:45:74:a5:8e:cd:26:b4:f9:bb:b0:60:82:67:04:
                    f2:8c:68:a4:f0:03:5f:7a:21:7e:32:77:85:32:e5:
                    2d:9d:55:dd:66:77:59:94:d3:5d:77:16:6e:3b:f5:
                    ea:c1:e7:4e:20:e0:37:32:da:6f:19:ff:e5:8f:fe:
                    92:2d:64:d1:06:fa:b7:2f:7d:71:e6:49:25:fe:6f:
                    3d:66:6d:2b:8d:27:a6:5b:b8:6d:e1:d0:c7:75:34:
                    5c:54:fc:f4:d3:c7:00:f6:8a:1b:f6:34:a8:7f:b0:
                    1b:fe:f5:bd:92:40:3b:93:c1:90:63:15:5d:35:8c:
                    f6:4d:e4:82:16:5a:2b:8b:9a:e2:84:43:fa:9c:ab:
                    84:b6:77:34:5c:34:f7:b7:c9:b2:3e:1d:52:a2:4c:
                    99:0f:20:aa:89:75:cd:3e:27:82:23:ad:dc:41:af:
                    4e:b9:19:3e:27:4d:bf:9b:ff:97:93:05:8c:b0:ed:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:93:A7:05:50:83:87:0E:4D:E7:34:E6:82:31:0A:2F:D5:F4:D0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:09:fe:ac:0c:ae:b9:04:8e:f6:c9:93:d3:a9:57:70:9c:36:
         b1:49:11:7b:bf:ef:f0:fa:61:47:48:57:df:f5:f6:4e:f0:c3:
         91:70:72:cc:12:65:3a:bf:fa:41:a2:7d:8a:15:99:b2:aa:01:
         d2:91:ed:2e:3c:42:6f:d7:c3:e2:db:73:6d:5c:6e:49:96:cf:
         a4:ac:69:cf:e3:42:b2:9c:47:59:8b:b3:b8:f0:0b:ba:d8:ef:
         c0:cd:0b:61:14:23:61:96:f7:fd:af:14:ea:25:7d:8b:5a:c6:
         5e:f9:de:c9:ec:f8:76:bc:d6:10:88:f3:db:11:f8:6a:f6:70:
         a1:41:71:86:16:ab:0a:2c:71:23:10:4a:96:d3:3f:49:b7:95:
         05:2c:4a:60:ac:c4:14:51:d0:c4:de:1e:ea:7a:58:ad:b2:50:
         2f:82:aa:9d:5d:57:c7:d9:b3:a5:d5:ae:0b:6c:e2:f4:6a:3c:
         ef:b0:a3:ae:a4:6b:01:bc:03:7b:5a:49:c0:60:27:32:02:ff:
         56:82:06:7d:98:67:45:f0:f6:56:c9:c8:d1:9f:73:f5:3a:60:
         92:46:28:41:98:26:10:26:f0:17:0c:52:c6:4f:8a:25:af:ce:
         d2:e0:37:9d:c7:de:9c:ba:b0:27:d1:d6:75:95:f4:31:fe:ed:
         b8:7c:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:29:00 2026 by rpki-client