Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205886.roa
File:                     AS205886.roa (raw, json)
Hash identifier:          h+xyAWAmuNvLzbS4bMZad29aOcMQPg4za4bS777L7nY=
Subject key identifier:   28:B2:39:BB:59:BA:84:9E:CB:3C:E8:98:E9:35:54:5C:BD:D4:CA:18
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       550377F14FA6FE8B04D028FA2BA70BC3B3835B2B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205886.roa
Signing time:             Tue 19 Aug 2025 11:36:34 +0000
ROA not before:           Tue 19 Aug 2025 11:31:34 +0000
ROA not after:            Tue 18 Aug 2026 11:36:34 +0000
asID:                     205886
IP address blocks:        157.254.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:03:77:f1:4f:a6:fe:8b:04:d0:28:fa:2b:a7:0b:c3:b3:83:5b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 19 11:31:34 2025 GMT
            Not After : Aug 18 11:36:34 2026 GMT
        Subject: CN=28B239BB59BA849ECB3CE898E935545CBDD4CA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:b0:e2:5d:40:5a:07:ab:f8:64:80:d1:59:
                    4e:a2:50:3b:e3:42:26:90:be:d0:61:12:47:cf:26:
                    aa:98:e5:1b:a1:ec:e4:d5:20:a0:53:1b:19:b0:ee:
                    ce:5f:fa:0f:e3:67:e0:a7:dc:c1:49:7f:5c:9b:e1:
                    73:74:0d:0f:a9:d2:be:bd:fc:ef:e7:19:da:15:4b:
                    00:25:0f:60:e1:5a:b1:b9:b1:e7:60:54:b5:7c:61:
                    8f:2b:26:f8:1c:4c:0b:c6:39:3f:d0:2b:12:7c:c7:
                    14:2c:60:d7:7b:76:8c:b4:32:53:2d:9a:8f:f7:0a:
                    02:b3:f4:1d:d8:48:e3:6f:2a:50:89:1f:fe:5e:28:
                    47:d9:31:33:04:fe:d8:48:76:d7:eb:fa:ed:62:c3:
                    2d:af:f9:c4:fd:d5:92:e4:e0:fb:ba:9a:f3:76:3c:
                    ae:71:6a:fd:e7:ff:d7:3d:e9:69:37:1d:69:63:db:
                    88:99:fb:3f:ed:2f:20:79:68:5b:26:bd:fc:cd:aa:
                    8b:c2:00:9f:8e:d1:8a:c0:83:f2:48:00:8c:60:a6:
                    7c:cd:d0:cc:15:a1:31:58:72:06:ce:39:88:38:31:
                    a8:d0:c4:5d:79:4d:0d:b4:23:af:d9:62:12:ec:b6:
                    ff:f0:37:5d:15:34:62:cf:34:48:97:fa:70:a2:e9:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B2:39:BB:59:BA:84:9E:CB:3C:E8:98:E9:35:54:5C:BD:D4:CA:18
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205886.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:6b:b7:23:98:c3:38:8a:cb:4f:ca:bf:35:17:a8:ea:e8:
         72:58:d7:c6:34:fb:eb:65:90:77:98:58:9a:84:3c:a6:0e:db:
         a4:48:fd:70:f2:44:0a:9e:44:3f:3c:bd:4c:e0:26:bd:26:ed:
         1a:08:b3:9f:aa:31:23:a6:2a:4c:ab:fe:c2:1a:df:0b:e0:7c:
         65:3a:8d:0e:54:aa:ee:e8:52:cb:ec:4e:62:8f:e4:f4:2e:08:
         c0:f8:f1:c4:48:68:a0:5c:dc:0b:b6:03:8c:12:7b:7d:8b:d1:
         35:ba:79:5c:4b:a3:66:06:b9:66:e5:6b:d4:ac:68:30:a1:88:
         cb:9b:cc:a0:cb:5f:b9:7d:03:13:95:3c:63:67:00:7f:85:ca:
         44:c1:b5:7d:08:ec:92:4f:10:7d:84:84:b8:18:b5:b7:c4:78:
         70:a3:02:9a:d9:76:b2:e9:b9:ae:07:b1:71:c4:d9:14:10:54:
         7d:0a:62:7c:71:1a:bb:f7:83:3d:39:18:e7:a7:cf:7e:d5:87:
         ad:69:73:e7:27:90:a0:97:7d:5d:a4:f1:e3:07:8d:7b:a5:95:
         be:f4:05:c6:f2:18:31:76:d9:9b:0a:e9:ac:af:23:ee:bf:9e:
         5b:3d:82:4d:41:77:a1:4a:e7:d5:7e:a6:04:e2:7e:27:60:a7:
         ec:80:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:21:44 2025 by rpki-client