Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa
File:                     AS25198.roa (raw, json)
Hash identifier:          5sVxheARX3zGPRzUTX/RLpXs+OOnybs7Kjpj3c4hbxw=
Subject key identifier:   FA:38:21:CF:C0:99:F6:AD:6E:6E:26:40:5B:48:49:DE:8D:EE:4C:04
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1C0B595948730779264DA44011DE32A835AE91D4
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa
Signing time:             Thu 25 Sep 2025 13:59:24 +0000
ROA not before:           Thu 25 Sep 2025 13:54:24 +0000
ROA not after:            Thu 24 Sep 2026 13:59:24 +0000
asID:                     25198
IP address blocks:        157.254.50.0/24 maxlen: 24
                          157.254.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0b:59:59:48:73:07:79:26:4d:a4:40:11:de:32:a8:35:ae:91:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 25 13:54:24 2025 GMT
            Not After : Sep 24 13:59:24 2026 GMT
        Subject: CN=FA3821CFC099F6AD6E6E26405B4849DE8DEE4C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:15:16:45:84:86:88:4c:d6:2d:e5:d4:b9:
                    3e:2a:69:ff:91:b1:53:a3:b0:39:79:b3:70:cc:a4:
                    06:91:6e:22:95:10:9a:22:d4:bc:71:6f:74:9f:bc:
                    2e:f1:a7:14:9f:31:16:90:04:b9:6d:bd:57:cf:07:
                    f8:82:49:ee:c4:51:2e:22:d4:22:a5:20:ab:ff:42:
                    1a:d7:d7:f4:f2:51:14:fe:ad:58:82:01:46:fe:69:
                    41:4d:94:54:d3:4e:50:bc:28:77:cd:39:8c:24:e2:
                    36:e5:66:d5:4f:20:86:65:c1:bc:a1:9a:50:00:af:
                    22:c9:b6:fc:76:4b:9f:86:2c:b4:4a:83:e3:64:d6:
                    60:a4:45:cc:7a:fb:51:fa:32:b3:6e:9b:4d:88:4e:
                    04:a9:8f:08:4d:b6:79:98:de:df:05:38:d5:df:9d:
                    7c:92:d2:63:98:d1:be:5d:08:90:cd:7f:b7:34:dc:
                    ef:29:96:f3:44:ba:6f:6f:69:d8:e5:a0:e9:e7:9c:
                    98:15:02:62:19:c6:da:c2:91:fe:59:2e:f4:95:86:
                    c7:13:70:75:5e:e6:77:a6:84:0f:28:3e:09:08:0f:
                    c9:7b:5f:c8:ff:1a:18:10:9d:70:31:01:c3:d4:ce:
                    d0:ca:53:d2:7e:7f:8a:2d:2c:05:a6:dd:85:b8:60:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:21:CF:C0:99:F6:AD:6E:6E:26:40:5B:48:49:DE:8D:EE:4C:04
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.50.0/24
                  157.254.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:50:bd:aa:f8:43:5b:80:90:b3:79:24:ba:48:9b:dc:4e:
         d7:9a:b1:d1:15:95:02:3c:f9:ae:8c:93:c0:34:50:b5:00:f4:
         15:2f:eb:e0:f5:d1:7a:bb:a2:ee:40:dd:58:14:c5:f6:9e:c9:
         d2:f1:19:80:17:ae:47:5a:7e:47:f6:76:1c:0a:63:98:88:f8:
         81:87:2b:23:fe:8d:8f:26:c3:6a:89:8c:09:37:23:f3:a4:a7:
         bf:2a:60:ba:d1:95:a9:bf:1b:3f:fb:19:78:80:4a:4b:f9:75:
         83:c4:fe:07:c7:a2:a9:ff:68:d6:ae:a8:55:36:6f:1d:44:d6:
         7c:7b:1f:2b:fb:91:16:69:d1:94:1e:3e:fd:6b:43:c8:31:ed:
         73:41:3a:f1:95:ce:03:c6:34:01:90:26:19:b7:b3:01:7f:d5:
         0b:71:e0:d4:e6:85:2e:d6:30:20:58:64:7e:bb:31:95:e1:29:
         59:33:f1:b7:5b:43:9e:88:02:86:de:9e:0d:17:23:6d:b3:fa:
         22:69:75:1d:9e:7d:1e:dc:66:31:d6:2e:af:3c:25:3a:de:2d:
         d2:b8:06:b8:64:d0:79:1e:19:7a:62:ea:28:8c:19:4b:09:74:
         1c:65:d5:a5:2b:c0:df:1d:52:9f:a3:ef:c7:de:b2:f0:6e:6f:
         40:e8:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:48 2025 by rpki-client