Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3280.roa
File:                     AS3280.roa (raw, json)
Hash identifier:          qYB2/kaRkydKnxRe7uJ8iQHwT458c+WcpSy8jFypZWk=
Subject key identifier:   E6:D6:27:A0:BD:B8:93:11:03:91:AF:5F:C9:9F:45:0F:D0:A0:02:02
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       339EAFF30C6A3025165BE41E636E053A3BC70275
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3280.roa
Signing time:             Thu 16 Oct 2025 18:41:47 +0000
ROA not before:           Thu 16 Oct 2025 18:36:47 +0000
ROA not after:            Thu 15 Oct 2026 18:41:47 +0000
asID:                     3280
IP address blocks:        157.254.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9e:af:f3:0c:6a:30:25:16:5b:e4:1e:63:6e:05:3a:3b:c7:02:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 16 18:36:47 2025 GMT
            Not After : Oct 15 18:41:47 2026 GMT
        Subject: CN=E6D627A0BDB893110391AF5FC99F450FD0A00202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:0f:12:f9:3e:3d:86:e1:48:76:69:6c:4d:
                    11:fe:cf:4d:c9:f9:d6:e5:05:cb:76:9f:62:30:28:
                    fb:31:9d:bf:a6:dc:aa:4f:04:0b:6b:01:d9:b0:59:
                    af:55:d4:4f:29:db:c2:00:ad:60:8d:9c:04:66:a8:
                    80:b7:0b:b4:8e:3e:13:73:61:c4:cd:57:6b:1e:25:
                    9a:d4:c4:a3:a9:8e:3f:d2:f7:67:c0:71:48:d0:3e:
                    5a:d9:40:09:4c:f9:ac:e4:b2:4f:bd:7b:18:6a:ee:
                    c7:e3:bd:88:6b:1d:ec:67:08:01:14:7d:6d:02:f4:
                    2d:4e:c8:5c:92:95:13:e0:8e:11:fd:b1:6d:de:53:
                    2b:da:d4:57:23:cd:bd:3c:28:b9:fd:a8:dc:ff:9d:
                    18:c8:ad:d1:95:a3:d8:1f:1d:70:61:f9:74:11:46:
                    4f:66:43:e7:8d:4f:ae:8a:b5:bb:61:00:5b:49:5f:
                    eb:e3:e7:82:46:f2:01:20:68:d6:f3:6e:70:17:76:
                    b0:59:e3:1b:a7:ad:44:8b:77:fa:45:24:28:28:76:
                    cc:ae:34:09:59:f1:67:11:0c:e4:0f:d2:03:71:53:
                    3a:ac:ad:76:9b:77:e1:c0:7f:44:ea:9e:35:a9:ba:
                    ab:12:26:08:a1:39:d2:bf:5f:19:71:18:f8:39:95:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:27:A0:BD:B8:93:11:03:91:AF:5F:C9:9F:45:0F:D0:A0:02:02
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3280.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:39:78:9b:20:20:75:d8:5d:88:21:c4:b3:b1:a6:6a:31:
         1e:3d:ed:50:92:25:64:05:bb:7b:8f:81:b1:e5:4d:00:1c:eb:
         ea:0d:3b:4f:2b:a8:c9:4a:c1:e0:58:cd:eb:bf:c6:18:f6:a3:
         70:9a:52:77:5d:f8:97:76:2b:34:fb:1f:42:97:73:d4:b5:73:
         d3:5e:93:e1:0b:15:b0:02:84:c9:43:74:ef:d9:a1:52:a3:8e:
         20:3f:45:2f:00:47:9c:96:e1:5f:08:5a:43:23:9b:04:a3:ef:
         27:96:c5:b7:95:fb:78:4c:9a:6e:4f:81:73:68:ce:dc:1d:4f:
         8a:0a:40:bf:62:85:c0:0e:0f:da:f5:ae:75:54:12:6c:95:37:
         22:a2:1b:8f:1c:cc:a6:78:81:ef:c2:20:ba:c4:b6:bd:50:fc:
         e6:61:f5:b3:36:be:e5:5a:ed:64:d5:f3:36:c5:e6:07:4f:ed:
         72:43:df:93:65:74:e7:b0:88:f4:ff:37:2e:32:71:d7:83:c5:
         17:cb:e4:b3:42:f9:bd:80:e8:ea:29:94:8f:a0:2e:95:c5:7b:
         28:92:fd:12:02:2d:75:53:f7:0e:d5:39:76:d0:c8:91:b9:ff:
         5e:df:da:3c:dd:60:9b:d1:35:fc:1d:45:76:ac:67:b3:19:dc:
         5b:25:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:42 2025 by rpki-client