Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          yijODe9JgW23c/6Bbj4feQrLzO53lZugzr8Od5D6pGg=
Subject key identifier:   92:7B:4E:92:51:13:39:DA:D8:03:2D:BD:38:1A:7A:4F:9B:8A:1B:5D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3FBC8D1CC333D9541D1737581CCF75A41E363FBC
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
Signing time:             Fri 12 Sep 2025 05:00:46 +0000
ROA not before:           Fri 12 Sep 2025 04:55:46 +0000
ROA not after:            Fri 11 Sep 2026 05:00:46 +0000
asID:                     397423
IP address blocks:        157.254.48.0/24 maxlen: 24
                          157.254.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 19:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bc:8d:1c:c3:33:d9:54:1d:17:37:58:1c:cf:75:a4:1e:36:3f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 12 04:55:46 2025 GMT
            Not After : Sep 11 05:00:46 2026 GMT
        Subject: CN=927B4E92511339DAD8032DBD381A7A4F9B8A1B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:46:37:11:33:a6:34:78:72:38:ad:a1:13:
                    43:27:16:3d:bc:cf:7d:9a:62:ca:a9:9f:49:dd:c8:
                    45:47:cc:8b:88:cd:53:05:9a:9f:34:c4:69:4f:49:
                    81:ab:24:d0:0d:66:02:a4:e1:21:cc:b9:b1:c2:bd:
                    ef:71:3d:34:19:19:c0:bf:cc:fc:23:5b:49:f1:a8:
                    f4:d1:df:c2:aa:41:52:90:de:91:80:b3:c6:ec:1a:
                    6c:11:6c:1e:92:bd:c5:cb:da:2a:f8:f2:e5:1c:0e:
                    56:09:1c:fc:70:9e:69:22:f2:ac:eb:b3:78:6d:12:
                    50:39:7a:9b:9d:99:2d:ff:07:8b:56:9f:13:17:53:
                    b1:85:b6:27:c3:f0:31:7b:83:c7:56:84:06:dd:fd:
                    81:44:21:47:cf:29:1b:f9:1e:ec:89:1e:50:ad:6d:
                    b2:dc:dd:d8:36:d1:c7:51:52:9d:52:47:1e:e2:75:
                    f2:21:8c:e8:43:fe:26:37:34:ed:25:2f:b8:7e:3f:
                    ce:89:4d:ee:b4:ba:62:2e:ff:0a:a1:c8:04:c8:11:
                    39:20:5a:b3:98:60:00:a4:1d:b9:e7:00:7d:0b:5a:
                    e2:f7:8b:89:ee:e9:9d:46:6d:e3:2e:05:6e:04:b9:
                    f5:a9:f7:57:5a:21:b9:ea:1a:7b:cf:6d:6f:b3:3c:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:4E:92:51:13:39:DA:D8:03:2D:BD:38:1A:7A:4F:9B:8A:1B:5D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.48.0/24
                  157.254.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:d5:11:a3:32:00:9c:ba:43:a6:bc:0b:d2:23:95:de:86:
         5f:e0:39:3e:8b:9e:53:58:7a:69:2a:27:d8:0f:bf:22:12:60:
         d2:e4:8e:5a:af:fa:18:a4:4c:28:79:32:c0:75:40:96:a3:b3:
         9b:74:a0:b1:e6:50:7c:86:98:9c:0c:9a:57:7f:da:b0:f3:8a:
         fa:35:df:3b:21:6c:16:e5:7e:7f:0d:7c:91:ee:18:f9:cc:1a:
         b2:db:4d:ad:46:b0:48:68:3a:a1:81:e3:49:7b:a5:58:a7:4d:
         b6:42:4f:17:94:50:f8:5b:1d:aa:29:3f:f2:f0:4d:de:94:dd:
         34:16:0d:af:96:18:f5:12:0d:c1:fd:2f:22:c3:8d:39:ac:e2:
         a1:d5:95:f4:9a:4c:00:53:01:72:5a:e9:ab:e7:15:c7:7c:af:
         fa:bf:ae:0e:28:5d:69:35:ba:86:89:51:8d:ca:40:6f:d6:26:
         d3:3c:c3:34:8c:0a:9d:c4:f6:06:98:cb:4f:f0:13:f4:2b:0c:
         f5:8c:b0:06:a7:dc:99:3f:62:f3:f0:a9:56:35:4f:ef:eb:0b:
         78:40:52:e6:3f:6a:fd:3c:0f:07:99:07:9a:8f:3e:cd:6c:62:
         12:e6:7a:8d:93:20:fa:72:0e:3c:ac:9d:9a:2a:ff:c0:68:ea:
         98:32:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:15:55 2025 by rpki-client