Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
File:                     AS268581.roa (raw, json)
Hash identifier:          88191g5fApxXBisepg698H45H25Vru48fJHZ6uP+UxQ=
Subject key identifier:   EE:7A:E9:4D:12:CA:28:89:EF:26:99:CF:7D:05:FD:A4:1E:7A:A6:B3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3DC34B9611A00FEB4279D1DF397588F43F569CED
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
Signing time:             Sun 04 May 2025 06:33:46 +0000
ROA not before:           Sun 04 May 2025 06:28:46 +0000
ROA not after:            Sun 03 May 2026 06:33:46 +0000
asID:                     268581
IP address blocks:        157.254.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c3:4b:96:11:a0:0f:eb:42:79:d1:df:39:75:88:f4:3f:56:9c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  4 06:28:46 2025 GMT
            Not After : May  3 06:33:46 2026 GMT
        Subject: CN=EE7AE94D12CA2889EF2699CF7D05FDA41E7AA6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:71:56:d7:4c:6d:a3:2d:9a:45:78:36:ba:
                    0f:ac:56:5a:09:3a:c5:96:94:f9:67:88:cf:1e:6c:
                    b5:a6:80:89:52:93:0c:1a:68:d4:11:b8:6c:36:b1:
                    d3:e8:20:68:ac:ad:35:8e:a4:23:b6:b4:e5:29:dc:
                    b3:ed:a6:84:10:fc:bc:b4:96:c9:f2:d3:07:73:7a:
                    13:3c:ba:40:a7:91:f5:df:3e:d3:db:50:74:59:0c:
                    08:34:16:89:f7:47:11:d6:97:7d:27:1a:9c:af:d8:
                    e9:f0:0b:80:c2:f7:c8:1e:1a:3a:64:54:87:5a:d7:
                    80:ec:13:45:9e:79:18:8a:f5:27:08:14:d6:ff:1f:
                    eb:25:19:ce:15:42:71:cb:4e:9f:c9:86:8f:8e:a5:
                    f9:97:8a:4e:b4:ab:6c:96:ad:01:c7:3a:ef:4b:0c:
                    87:7a:cb:1e:06:5f:f2:ba:11:f6:50:21:a2:46:52:
                    d8:1c:c6:40:95:ed:5a:25:25:97:3d:66:84:c9:43:
                    8b:53:f4:68:f6:bb:8c:b3:ae:bf:47:bb:69:5e:06:
                    de:51:f8:dc:54:68:78:4a:0f:90:6c:03:5a:af:b0:
                    76:a7:f3:0b:8f:7c:13:eb:90:25:76:58:e1:59:7e:
                    df:d5:52:10:78:2d:37:c4:99:5d:75:26:b0:bf:89:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:E9:4D:12:CA:28:89:EF:26:99:CF:7D:05:FD:A4:1E:7A:A6:B3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:3f:38:1c:4a:c2:44:74:d0:63:c9:07:65:16:8f:1d:bc:ce:
         24:9b:a9:c9:23:74:64:87:b3:e8:a4:cf:90:64:d1:77:6a:fb:
         04:1f:33:dc:47:26:91:e6:ed:23:41:1c:09:9a:55:38:3e:0f:
         70:c2:97:22:a4:f3:c8:cf:fe:1a:62:1b:a7:0d:22:61:bd:53:
         bc:b5:85:84:49:41:0a:58:22:ce:e1:02:bb:58:a5:a8:54:33:
         78:3b:d7:71:91:75:eb:f6:94:f4:18:5c:21:93:bd:34:51:13:
         22:9a:5c:7c:42:2a:15:f0:f8:18:0d:ea:b6:d7:42:3d:14:2a:
         32:d2:f6:2a:64:98:44:a6:b2:e1:6b:73:80:9b:b5:3c:1c:0a:
         07:4b:a1:61:d5:68:71:97:f7:b4:2f:b5:e5:dc:c3:c0:69:f3:
         7e:f0:0e:c3:ee:18:c0:f1:46:8a:0a:9f:96:1b:49:35:67:84:
         22:1b:aa:95:f0:e7:5f:25:ab:f0:de:f3:c2:3f:57:f0:58:56:
         08:23:97:37:67:96:b7:5f:62:b8:fd:a4:67:73:8b:89:68:f2:
         69:e5:9a:d2:18:fa:4d:16:0f:e5:00:33:0f:4a:91:a2:7a:05:
         76:78:bd:17:7a:b7:d9:4d:be:4c:b9:a7:23:1e:ef:78:d7:0c:
         55:1f:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:46:02 2025 by rpki-client