Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401645.roa
File:                     AS401645.roa (raw, json)
Hash identifier:          Ayd+5S1+3w3s5JNh5A9xX0p+mx8yZHP9300wJyq2VSo=
Subject key identifier:   28:48:3B:BB:D3:B1:52:44:7A:24:42:04:6A:EA:2D:6A:63:8F:8D:5F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6B01ECFAE4F79E52F759CB3CD3E8D3BF0AAD9662
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401645.roa
Signing time:             Thu 16 Jul 2026 13:36:09 +0000
ROA not before:           Thu 16 Jul 2026 13:31:09 +0000
ROA not after:            Thu 15 Jul 2027 13:36:09 +0000
asID:                     401645
IP address blocks:        157.254.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:01:ec:fa:e4:f7:9e:52:f7:59:cb:3c:d3:e8:d3:bf:0a:ad:96:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 16 13:31:09 2026 GMT
            Not After : Jul 15 13:36:09 2027 GMT
        Subject: CN=28483BBBD3B152447A2442046AEA2D6A638F8D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:5d:61:38:c2:54:6e:29:32:74:e8:e4:87:
                    b1:69:d0:47:68:32:c3:7f:1c:17:99:a9:72:65:05:
                    ef:a2:d8:30:fa:6e:ed:5e:d3:ea:7b:c3:f1:95:97:
                    ea:57:b6:9f:32:1c:0e:77:ed:2c:e4:d1:e1:e0:a8:
                    0d:ad:0a:45:fa:1c:6d:a9:cf:3f:85:ed:17:98:a7:
                    5f:a3:e5:63:0b:fc:d1:e8:2a:62:6e:16:fb:45:3f:
                    1e:f6:3f:4e:02:e2:92:08:9c:dd:83:c2:54:7b:ee:
                    15:0b:06:67:cd:da:62:c6:55:1f:b8:89:cf:ef:26:
                    16:5e:b0:46:cd:80:7d:3c:11:5d:3a:d8:71:50:68:
                    d6:76:c7:85:e3:04:26:e5:81:29:a3:85:f8:61:06:
                    1d:44:2c:3c:4c:47:60:de:17:ef:7a:f1:38:0a:1f:
                    f1:5b:ce:ea:80:6b:25:8b:03:95:62:1a:38:27:12:
                    d5:5c:68:90:39:74:6e:74:47:c1:97:fb:09:6b:4d:
                    2c:d3:d3:d2:78:00:8a:3d:5c:df:0f:cb:98:dd:05:
                    6f:a8:73:31:87:ab:1e:0a:e3:db:53:43:e6:e8:99:
                    a5:8e:86:7b:ac:51:18:5f:1d:e4:79:8f:a9:0e:21:
                    de:2e:72:f1:a6:ee:4b:9b:bc:d3:96:a3:3b:63:f3:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:48:3B:BB:D3:B1:52:44:7A:24:42:04:6A:EA:2D:6A:63:8F:8D:5F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401645.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:c0:3e:e1:82:90:93:2d:a5:34:09:07:ea:80:0f:c0:cf:
         59:d4:c9:e6:64:7f:36:49:71:77:86:64:20:38:35:45:d0:f8:
         f3:30:90:14:d8:96:fc:12:cc:bf:db:9c:b6:8d:c0:82:a5:64:
         09:4b:67:02:8d:c8:a6:b4:46:9f:53:bb:10:1e:32:1a:af:08:
         68:df:ac:39:42:03:ed:f2:1d:5e:ab:9f:cf:48:6a:ce:35:2e:
         19:9f:28:39:dc:89:5c:fd:ac:2a:b2:46:88:a9:dd:fb:da:69:
         dd:37:6e:5c:56:ac:c1:a8:42:d2:57:82:ad:42:9b:a1:ca:7a:
         a6:e6:3a:b1:60:6f:c7:e0:ae:89:bf:ce:ff:4b:cf:ee:69:99:
         f0:e3:13:a7:f2:d2:9a:58:cc:77:f6:df:e1:bb:56:ba:a8:72:
         63:9c:b5:42:99:9a:b3:c5:e1:ec:50:5a:3f:fd:b9:a8:5f:2b:
         13:16:4a:7a:4b:9a:d1:6b:93:64:8b:33:39:c7:77:fd:e4:f8:
         72:b6:23:83:9f:00:0d:29:57:fd:1e:10:68:90:44:51:1c:d9:
         1f:e6:6a:cf:98:32:28:dd:66:45:2d:08:56:85:07:ef:a7:b0:
         81:4d:ad:66:8e:5b:e9:e1:9a:dc:18:04:69:11:9e:01:a6:14:
         10:39:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:29:05 2026 by rpki-client