Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
File:                     AS996.roa (raw, json)
Hash identifier:          KFU/5n/NsWqSOuuP1n2uDFWhftGJWjBGAIAlP/eoQlk=
Subject key identifier:   11:61:56:90:7C:89:5F:B0:6E:72:69:64:1F:83:8C:17:1D:DF:98:39
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       416BDC3F732BFE31DBD73FFFD9685A12CCCBDB26
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
Signing time:             Mon 06 Jul 2026 18:13:38 +0000
ROA not before:           Mon 06 Jul 2026 18:08:38 +0000
ROA not after:            Mon 05 Jul 2027 18:13:38 +0000
asID:                     996
IP address blocks:        157.254.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6b:dc:3f:73:2b:fe:31:db:d7:3f:ff:d9:68:5a:12:cc:cb:db:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  6 18:08:38 2026 GMT
            Not After : Jul  5 18:13:38 2027 GMT
        Subject: CN=116156907C895FB06E7269641F838C171DDF9839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:14:b6:64:80:4e:f8:4f:9f:d2:76:1d:ef:
                    ba:17:2a:fb:cc:dd:36:f5:20:02:63:bf:85:7f:86:
                    ca:05:2c:9c:da:0e:72:f7:b4:7d:ee:17:9f:ba:8b:
                    bd:4c:3d:80:4a:58:2a:be:47:cb:1b:4a:b5:05:cb:
                    e2:1c:93:41:b2:e0:a5:c5:cd:f7:11:f1:b6:1e:76:
                    38:7f:05:f9:44:32:9b:71:7d:94:52:93:c0:10:8a:
                    b2:74:4b:3c:40:50:c8:80:ea:ac:50:ee:b0:dc:be:
                    73:d5:ca:e8:96:42:43:c1:30:f8:86:0a:01:b9:ac:
                    d8:dd:a3:54:0c:f5:cc:7a:be:66:4a:a0:91:52:93:
                    31:01:de:8c:51:14:dc:cd:5c:96:63:90:4f:73:39:
                    5b:11:7f:9a:4c:f8:09:cc:00:3d:65:6e:f5:f5:ae:
                    d7:d7:33:df:19:31:c1:4a:88:54:94:72:3c:96:d3:
                    ad:83:40:77:b6:61:64:0b:1b:81:36:a5:ef:6a:a4:
                    e6:c1:fa:ca:fc:ce:19:10:36:2d:3c:46:d9:e2:46:
                    dc:b6:2a:db:31:20:86:05:58:2f:ac:50:20:df:a6:
                    32:fe:00:9b:dd:67:48:4a:01:01:f6:4c:31:ab:29:
                    aa:fc:5f:f8:06:ba:10:1f:0f:80:d9:98:c8:0d:99:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:61:56:90:7C:89:5F:B0:6E:72:69:64:1F:83:8C:17:1D:DF:98:39
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:1b:c5:c8:7c:ca:36:5b:82:bd:a6:aa:85:e2:c7:86:5e:
         69:69:38:86:85:de:b3:3d:a5:d3:e0:67:73:41:0a:3d:e1:5b:
         50:e2:7b:a6:d3:48:24:74:42:fa:23:d2:d4:08:22:7b:11:06:
         4e:ad:93:48:c0:1c:73:40:05:12:db:80:62:35:48:a2:11:b5:
         b8:fb:f5:f5:71:05:37:d8:a7:52:4e:78:60:99:bb:3f:a2:c7:
         f9:64:73:ad:3b:f3:f1:99:15:1e:c9:c4:6b:a7:67:1d:a4:5a:
         76:f0:02:29:31:fa:f0:85:6a:90:e4:9e:cd:bf:c7:05:86:56:
         c4:a4:81:84:d3:26:06:41:35:6a:e6:d0:71:06:a6:66:da:da:
         3a:bb:79:51:66:d9:d9:f5:e1:5e:fc:30:3a:d3:45:a2:b4:45:
         e4:3b:97:cb:11:4b:93:5b:92:c1:fb:b8:24:af:ee:76:b3:ae:
         b1:23:d1:16:44:b0:32:c5:0c:21:79:15:e0:4f:27:07:07:59:
         89:ab:f6:6a:bb:e5:e0:ea:f3:d2:a4:fa:d6:6d:d5:50:8f:44:
         5a:f7:a2:16:35:c5:aa:d0:34:76:ae:c8:c3:98:48:69:61:85:
         ed:6b:a7:cb:2f:db:01:4e:5f:46:4b:04:b0:61:de:7e:bd:8b:
         64:0d:01:fd
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIUQWvcP3Mr/jHb1z//2WhaEszL2yYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNzA2MTgwODM4WhcNMjcwNzA1MTgxMzM4
WjAzMTEwLwYDVQQDEygxMTYxNTY5MDdDODk1RkIwNkU3MjY5NjQxRjgzOEMxNzFE
REY5ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD4UtmSATvhP
n9J2He+6Fyr7zN029SACY7+Ff4bKBSyc2g5y97R97hefuou9TD2ASlgqvkfLG0q1
BcviHJNBsuClxc33EfG2HnY4fwX5RDKbcX2UUpPAEIqydEs8QFDIgOqsUO6w3L5z
1crolkJDwTD4hgoBuazY3aNUDPXMer5mSqCRUpMxAd6MURTczVyWY5BPczlbEX+a
TPgJzAA9ZW719a7X1zPfGTHBSohUlHI8ltOtg0B3tmFkCxuBNqXvaqTmwfrK/M4Z
EDYtPEbZ4kbctirbMSCGBVgvrFAg36Yy/gCb3WdISgEB9kwxqymq/F/4BroQHw+A
2ZjIDZnh7QIDAQABo4ICfDCCAngwHQYDVR0OBBYEFBFhVpB8iV+wbnJpZB+DjBcd
35g5MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzk5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ3+IjANBgkqhkiG9w0BAQsFAAOCAQEA
Ascbxch8yjZbgr2mqoXix4ZeaWk4hoXesz2l0+Bnc0EKPeFbUOJ7ptNIJHRC+iPS
1AgiexEGTq2TSMAcc0AFEtuAYjVIohG1uPv19XEFN9inUk54YJm7P6LH+WRzrTvz
8ZkVHsnEa6dnHaRadvACKTH68IVqkOSezb/HBYZWxKSBhNMmBkE1aubQcQamZtra
Ort5UWbZ2fXhXvwwOtNForRF5DuXyxFLk1uSwfu4JK/udrOusSPRFkSwMsUMIXkV
4E8nBwdZiav2arvl4Orz0qT61m3VUI9EWveiFjXFqtA0dq7Iw5hIaWGF7Wunyy/b
AU5fRksEsGHefr2LZA0B/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:29:44 2026 by rpki-client