Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          uiLd7TrGUVZI0nq1wNO/a2mZzlNaSrTBr/NS32iPwIY=
Subject key identifier:   AD:8F:4C:98:8D:05:4B:5B:2D:2D:D0:20:F4:68:E8:5A:3F:38:7C:A0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       47066DE800FD5C7C6DC88C46CF89A561874F3777
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
Signing time:             Sun 12 Oct 2025 04:56:12 +0000
ROA not before:           Sun 12 Oct 2025 04:51:12 +0000
ROA not after:            Sun 11 Oct 2026 04:56:12 +0000
asID:                     397423
IP address blocks:        157.254.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:06:6d:e8:00:fd:5c:7c:6d:c8:8c:46:cf:89:a5:61:87:4f:37:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 12 04:51:12 2025 GMT
            Not After : Oct 11 04:56:12 2026 GMT
        Subject: CN=AD8F4C988D054B5B2D2DD020F468E85A3F387CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:a1:fd:a3:ac:85:b5:5b:bb:02:bb:f1:f8:
                    a8:64:56:0f:cf:ea:d6:8a:b0:c2:ee:60:dd:fd:ad:
                    60:cc:d6:76:d6:7c:cf:fc:3a:cd:fa:93:55:ed:7d:
                    58:45:7e:6b:2a:66:58:4e:9a:03:9c:dc:6f:ac:f4:
                    a3:8e:6e:23:55:19:92:81:78:57:3b:7e:ef:46:5d:
                    25:af:48:ba:77:8c:75:a2:a9:06:d0:9e:7c:15:d4:
                    44:b9:05:a0:86:e6:4c:fd:fd:64:31:17:1f:55:c1:
                    96:56:a7:c0:4c:b2:66:98:a6:27:3c:50:6b:1f:7b:
                    79:4a:6d:15:f1:90:b3:06:86:62:f0:17:77:47:2a:
                    bd:6e:bf:dc:3e:e4:46:42:48:19:28:7e:64:6b:02:
                    fa:aa:ec:08:f3:bc:da:23:50:54:12:80:31:b3:f8:
                    03:c2:eb:f8:a1:2b:89:e5:ad:c3:87:b0:0c:b2:11:
                    c1:47:2e:5a:b0:b4:7f:4b:ec:db:bf:c8:96:d8:35:
                    f9:f4:cf:ba:0f:0c:c5:64:ff:99:96:f9:ea:69:33:
                    1b:45:b2:75:81:a3:76:dd:04:b2:a9:4e:c2:50:ca:
                    a4:39:1b:62:b7:fa:f7:6f:db:3e:c4:fd:28:f6:2b:
                    ca:b4:02:24:7b:df:aa:41:2b:fb:b6:90:c0:66:48:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:4C:98:8D:05:4B:5B:2D:2D:D0:20:F4:68:E8:5A:3F:38:7C:A0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:18:be:87:b9:f1:92:19:9e:e9:93:f0:24:ed:24:2a:03:cc:
         f4:b7:4f:eb:29:e2:50:31:c0:00:67:f3:88:42:25:cf:34:8f:
         31:d5:c4:a1:ec:4a:ba:e5:8b:11:6f:3e:b8:32:7e:ef:97:14:
         f9:c4:83:e7:37:d9:ae:0f:95:66:0b:0d:85:19:b0:01:e9:16:
         0e:e5:6d:2e:f6:fd:ba:c5:95:69:1b:5f:94:14:50:6f:61:17:
         83:a6:15:db:04:28:96:09:a0:d3:e6:db:0d:20:45:78:c6:72:
         3d:ff:fa:24:a9:d3:80:96:01:ed:31:d1:3c:44:92:b7:09:d8:
         65:7b:3b:e8:0b:e9:eb:33:2a:bc:9d:92:8c:02:df:8c:8e:b5:
         84:d2:2a:12:79:26:9a:2e:3e:d7:23:64:71:bb:71:24:d3:46:
         be:fb:fd:2b:9c:17:b7:25:75:22:3f:58:8a:76:fb:f1:05:f1:
         f3:3c:9d:dc:d6:fb:fb:db:6c:8b:d3:df:5e:d7:99:7b:32:27:
         8e:79:3e:9f:bb:19:49:69:5c:ca:ef:77:7e:5e:3a:ee:a3:99:
         b9:d6:01:08:14:c7:09:4c:bb:b9:3b:fd:9d:c0:31:37:e9:8f:
         de:57:92:f6:2f:2a:6b:5d:f6:96:d7:d4:6b:f5:5f:02:92:99:
         8e:e0:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:12:11 2025 by rpki-client