Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63902.roa
File:                     AS63902.roa (raw, json)
Hash identifier:          IjjDF4h7gQtwGu+XfGgf7y1Q9g9bpDapr3uVl3F4G5A=
Subject key identifier:   28:6B:05:31:3F:92:3C:25:72:9C:83:B9:A8:87:16:B2:A9:4A:A9:6C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6437708FD34E0FDF1AD4177C9BC5FEA4DB2E9FA9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63902.roa
Signing time:             Thu 26 Jun 2025 00:29:44 +0000
ROA not before:           Thu 26 Jun 2025 00:24:44 +0000
ROA not after:            Thu 25 Jun 2026 00:29:44 +0000
asID:                     63902
IP address blocks:        157.254.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:37:70:8f:d3:4e:0f:df:1a:d4:17:7c:9b:c5:fe:a4:db:2e:9f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 26 00:24:44 2025 GMT
            Not After : Jun 25 00:29:44 2026 GMT
        Subject: CN=286B05313F923C25729C83B9A88716B2A94AA96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:c9:af:8e:a5:0c:b2:cd:bb:41:1a:ae:b3:
                    62:a3:68:ac:1e:71:c2:6f:9d:4a:2a:d4:25:d3:81:
                    31:88:d2:2d:dd:93:76:9a:fb:a4:88:d2:47:f7:79:
                    fc:69:dd:48:c3:02:0f:3a:1d:da:63:a0:3b:fe:90:
                    8c:9c:b7:2c:71:9a:fa:a6:6f:69:c6:c8:99:9f:65:
                    6d:fb:dd:29:35:67:dd:d8:25:97:02:a3:80:a4:e5:
                    0b:0d:2d:30:b9:ed:c2:a1:03:88:ed:76:fd:d8:52:
                    d0:70:cb:10:46:43:a8:7a:7a:a7:b3:f0:60:ef:46:
                    d6:62:cf:42:64:4e:cb:54:d7:7e:6c:3c:af:b8:9a:
                    bc:18:01:4c:f1:e7:a3:f0:8d:c8:07:de:7d:a2:d7:
                    9e:0e:6d:79:a5:06:b0:74:25:37:87:ac:89:63:2f:
                    5d:a7:cc:cb:0c:26:55:11:10:d6:1a:a6:09:ce:0f:
                    24:54:24:52:dc:6e:a6:f2:90:84:10:d6:77:6a:dd:
                    92:67:0c:17:56:6f:27:fb:ff:db:d4:f2:87:03:3d:
                    a3:ab:ce:be:77:18:8f:e5:bc:58:e4:ae:e3:13:12:
                    cf:27:b9:03:bc:ab:4c:aa:95:f8:32:55:e5:84:32:
                    17:b4:b4:37:87:ef:a4:2d:d2:80:07:dd:cc:88:ae:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:05:31:3F:92:3C:25:72:9C:83:B9:A8:87:16:B2:A9:4A:A9:6C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63902.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:35:e1:7f:78:33:8d:d4:2c:bd:03:b6:bc:30:61:db:aa:c7:
         3f:90:c2:22:b9:df:ca:68:6d:3e:cb:fc:30:78:44:42:e8:cc:
         15:5a:c6:d2:34:30:63:7c:db:8b:3b:08:08:b2:e8:39:c5:27:
         f8:21:03:d5:99:79:65:dd:9d:ca:f2:49:78:6a:a2:93:06:37:
         08:c7:17:f8:fd:ff:09:62:75:b4:1a:5b:29:1e:58:fd:5b:87:
         da:77:08:bb:4e:1c:67:be:55:05:60:bb:1e:59:e3:f8:df:17:
         2a:4e:0d:20:56:70:ce:1a:dc:0a:d9:cc:e0:d5:c0:43:3d:16:
         c2:de:35:2d:07:08:3c:da:56:3c:d1:1b:54:63:03:aa:c8:e0:
         2d:e3:f1:5b:40:17:79:5a:f9:32:a4:ac:6b:7e:24:5a:af:3a:
         db:38:44:67:19:e6:db:7e:6e:1b:3f:bf:40:e0:d5:be:0a:62:
         51:5d:ae:85:4e:9a:b1:ea:6f:9b:46:1c:b9:d5:03:d8:97:06:
         81:d1:d9:f7:32:91:24:1a:f5:31:fc:08:9d:2d:25:83:5b:f6:
         69:e5:7c:d7:b9:6e:48:af:7f:7a:b7:06:82:4a:f5:a1:fb:fd:
         a5:90:96:3b:22:3d:09:cf:f6:ef:ae:bf:ae:7d:1f:16:17:15:
         b3:d2:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:38:30 2025 by rpki-client