Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401645.roa
File:                     AS401645.roa (raw, json)
Hash identifier:          p/yFtMuNDawaN18gOWb+/63/uKbsyLquDGmhFptO4Yk=
Subject key identifier:   77:B1:DB:83:AE:BC:F5:D0:80:BB:D7:93:E3:43:4D:C0:45:8B:D0:7A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0DD893D1C0B08CEA046C7C9BFA09B9A7EE2A7408
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401645.roa
Signing time:             Thu 14 Aug 2025 12:53:17 +0000
ROA not before:           Thu 14 Aug 2025 12:48:17 +0000
ROA not after:            Thu 13 Aug 2026 12:53:17 +0000
asID:                     401645
IP address blocks:        157.254.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d8:93:d1:c0:b0:8c:ea:04:6c:7c:9b:fa:09:b9:a7:ee:2a:74:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 14 12:48:17 2025 GMT
            Not After : Aug 13 12:53:17 2026 GMT
        Subject: CN=77B1DB83AEBCF5D080BBD793E3434DC0458BD07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:57:ce:46:8c:28:ff:2b:d8:82:24:90:0a:
                    24:86:60:6d:7c:3f:47:17:7e:4a:d7:d7:69:8b:20:
                    b7:21:eb:e9:28:f6:ae:2b:68:6b:fe:cf:cc:2a:10:
                    7e:3c:d5:f5:16:18:29:fd:a7:2d:5b:ff:04:ac:9c:
                    92:69:5c:54:b8:47:46:00:b5:62:33:97:23:9b:f2:
                    02:c3:12:da:ff:b9:86:23:8e:3a:d2:c0:5c:50:10:
                    f8:94:26:ae:2a:59:05:e8:6a:e9:07:1f:8d:59:91:
                    e4:dc:14:3c:bd:a2:77:02:ca:21:96:87:58:cd:87:
                    60:79:8d:9f:28:3f:d7:ea:0d:85:9b:fb:6d:61:fd:
                    73:f1:f8:6c:b7:77:3b:aa:bb:85:60:1d:d7:92:af:
                    eb:97:d5:96:f2:c7:87:d3:1f:98:49:3b:9e:b5:ca:
                    48:06:50:5c:9c:fd:01:8f:3a:4a:5a:16:b8:34:b2:
                    06:e9:34:df:6e:ab:a4:b8:ca:6b:1c:4a:a7:04:59:
                    b1:b2:53:00:15:f0:f4:a1:53:b3:b9:d9:13:51:d1:
                    ce:e8:a6:1e:72:55:b5:e6:19:a9:31:fc:93:65:e1:
                    f7:31:3e:fd:c0:7e:a8:fb:ad:b0:59:9f:41:39:e4:
                    97:f6:d4:cd:d3:83:a6:42:c2:1a:89:7d:93:00:1a:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:DB:83:AE:BC:F5:D0:80:BB:D7:93:E3:43:4D:C0:45:8B:D0:7A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401645.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:ec:23:61:a2:75:f8:60:a1:60:96:c3:2f:c5:7e:5f:9a:
         af:01:35:75:fa:5e:e4:69:79:a9:6a:22:96:f7:a6:58:7a:a7:
         a7:53:df:6b:54:c6:7d:22:c6:b4:3e:ac:cd:33:69:10:46:3f:
         3d:ea:ad:65:d1:b7:09:b0:51:b0:c2:d3:8a:3c:25:92:5f:d9:
         11:53:84:32:f4:09:29:c9:ee:d3:0d:46:a0:32:5b:31:3d:17:
         ad:63:c6:f1:a9:51:ec:11:ad:93:86:ca:4c:e8:09:9b:30:eb:
         f6:1a:81:cc:73:08:e3:1d:72:8f:66:93:56:ba:9d:d8:fe:49:
         68:fb:e5:7c:ea:f3:9e:28:05:73:60:6d:e1:8b:ca:eb:e7:12:
         c3:b0:ba:31:d0:78:f7:f3:58:18:d6:78:5c:a7:7e:7b:db:fd:
         28:80:2d:ce:26:32:87:12:04:88:fc:03:db:02:d0:b6:cc:a4:
         2f:71:59:62:46:29:d0:fc:fd:51:b1:7d:a8:02:21:6a:52:90:
         26:52:d2:75:dc:4c:35:01:fc:5d:f7:65:c9:5f:a1:9a:2c:cd:
         52:20:9e:72:4f:6e:b4:e1:80:c5:da:d8:2c:e3:91:dc:53:74:
         b9:77:e7:fd:c0:3f:50:96:e7:10:3d:05:37:cd:18:74:a5:09:
         0b:ca:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:48:20 2025 by rpki-client