Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205886.roa
File:                     AS205886.roa (raw, json)
Hash identifier:          PydGhiQa9pA6uRkiF8DyFTHAw9iy3eXtme5S37gh340=
Subject key identifier:   4A:29:69:A6:75:AE:1A:0F:5E:03:7A:E6:B3:81:9E:2E:69:03:3A:32
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0314447A23C9A5BB50F5B79408CE9581A253A757
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205886.roa
Signing time:             Wed 24 Sep 2025 05:31:07 +0000
ROA not before:           Wed 24 Sep 2025 05:26:07 +0000
ROA not after:            Wed 23 Sep 2026 05:31:07 +0000
asID:                     205886
IP address blocks:        157.254.8.0/24 maxlen: 24
                          157.254.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:14:44:7a:23:c9:a5:bb:50:f5:b7:94:08:ce:95:81:a2:53:a7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 24 05:26:07 2025 GMT
            Not After : Sep 23 05:31:07 2026 GMT
        Subject: CN=4A2969A675AE1A0F5E037AE6B3819E2E69033A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:3c:92:8f:a2:c9:50:c8:b2:f9:65:94:7f:
                    7e:1a:1e:c8:8e:67:19:81:6e:2c:ba:d5:da:c4:df:
                    d0:ab:92:22:03:f4:5e:f1:1a:4f:b1:e3:39:14:89:
                    53:4e:6c:2a:90:ee:08:9a:0e:79:55:31:0f:51:e7:
                    8d:13:57:08:18:f5:a1:b2:5d:db:fb:9f:1a:ba:05:
                    74:66:a4:33:7f:bb:34:d6:94:a6:1b:b9:14:ee:7c:
                    c3:19:99:9d:83:26:91:c0:df:2c:14:ee:82:36:98:
                    7a:03:97:01:4a:a9:49:02:29:3a:ca:91:e9:d5:fb:
                    2a:90:c1:6c:bc:e9:09:2e:af:79:34:d7:ea:7a:e2:
                    ab:56:bd:61:5d:84:75:1b:b3:fd:3e:4c:d6:e8:16:
                    05:e8:75:35:a7:fc:36:32:97:02:09:e8:d9:d6:46:
                    58:b0:88:55:4b:49:94:cd:b9:23:be:51:fe:c1:18:
                    61:f0:8f:33:43:3f:7f:75:6e:b9:6e:6b:ba:e4:10:
                    2e:33:60:49:f2:28:c5:6b:58:99:56:3b:1c:e3:bf:
                    b8:2d:62:e5:30:1c:fc:f1:46:c3:7e:b7:32:66:60:
                    ab:17:9e:72:a6:d0:a8:07:38:ab:5b:26:05:86:0f:
                    74:34:57:9b:3c:4c:3a:3f:04:80:c9:9b:00:ac:81:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:29:69:A6:75:AE:1A:0F:5E:03:7A:E6:B3:81:9E:2E:69:03:3A:32
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205886.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.8.0/24
                  157.254.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:0a:80:38:af:50:9c:e2:97:d3:13:80:b0:10:d8:17:53:0c:
         a9:e8:e8:61:16:a8:4b:27:8d:1f:7a:d2:da:ee:ed:92:4b:e5:
         32:38:86:58:6b:de:8d:a1:e9:83:70:48:89:a6:71:5c:64:35:
         7b:b0:c6:0b:a9:fb:8b:19:5c:97:c6:89:96:3d:8d:b5:68:e5:
         bf:90:0a:21:4f:17:22:17:70:5c:30:b7:1a:f7:f5:f9:16:f0:
         8a:79:ca:1a:1d:79:7a:5a:fa:77:2d:d3:6a:1d:58:01:96:b2:
         d4:c1:ab:91:ce:7e:e3:12:46:a3:3b:95:08:72:82:9b:f3:0a:
         0a:8a:4d:a8:f9:c8:e2:82:1c:17:43:5b:08:1b:82:9a:5d:16:
         b0:d2:fb:4b:6f:af:c7:cb:72:60:3a:5f:66:42:fe:6d:5b:33:
         ba:ed:5e:db:94:4f:7c:9e:f4:db:3b:0e:ad:5b:ec:82:94:06:
         e1:a9:dc:45:63:e5:e1:ed:ed:a7:c0:f9:33:f7:80:dc:7a:d0:
         0a:4e:54:ec:7c:4a:08:c5:15:64:51:30:c5:45:be:be:4f:db:
         96:77:03:ec:b1:3f:1b:1b:61:77:19:b0:9e:19:8c:d2:45:78:
         0e:89:f8:e2:2e:37:8c:5b:a9:9a:b2:5a:ad:c0:af:f3:cf:77:
         f2:02:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:53:58 2025 by rpki-client