Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS4637.roa
File:                     AS4637.roa (raw, json)
Hash identifier:          cK9u99kZ/FUDcRJ0ryJFyoxsAZ9ASKg39GVsln32j94=
Subject key identifier:   DD:1C:72:75:0A:5E:5E:B3:F0:BD:47:14:B4:B2:63:D4:C0:5B:54:B1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       60C4C38832A50998A47AE438F6F3D10A60B25BB8
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS4637.roa
Signing time:             Tue 08 Jul 2025 22:13:43 +0000
ROA not before:           Tue 08 Jul 2025 22:08:43 +0000
ROA not after:            Tue 07 Jul 2026 22:13:43 +0000
asID:                     4637
IP address blocks:        157.254.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c4:c3:88:32:a5:09:98:a4:7a:e4:38:f6:f3:d1:0a:60:b2:5b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  8 22:08:43 2025 GMT
            Not After : Jul  7 22:13:43 2026 GMT
        Subject: CN=DD1C72750A5E5EB3F0BD4714B4B263D4C05B54B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:02:67:b9:01:92:80:52:c9:24:c8:dc:1f:
                    dd:4f:22:fb:7c:ae:05:16:0a:f0:4b:99:8d:91:68:
                    c8:f5:85:5b:6b:84:59:48:83:d6:29:ce:e6:fd:49:
                    a1:4f:46:47:e8:21:a2:6e:d6:f9:fa:2e:4c:16:2d:
                    12:c9:c4:1a:4a:eb:a7:da:ff:e8:0e:b3:ec:7d:cd:
                    2c:b6:bb:af:8f:3d:d4:37:0e:64:76:e8:fd:5a:5f:
                    72:42:9c:4f:e4:c7:ee:55:0c:58:1b:20:b8:3e:4d:
                    e5:9f:5a:1c:46:01:33:e9:57:54:25:52:42:cb:ad:
                    4b:5b:46:8f:21:16:55:b1:b3:83:16:8a:44:ad:a7:
                    d1:cd:67:e3:02:c9:f1:c2:31:06:52:32:76:7f:e9:
                    c5:e3:6d:66:24:54:a5:01:18:3c:87:dc:44:9e:49:
                    10:22:1c:e2:0a:c9:af:c6:c5:ad:b6:ce:a3:fb:65:
                    32:b3:fc:55:b5:93:5a:d7:f3:6e:bc:32:c1:9c:7c:
                    f5:23:2f:b1:63:aa:c3:53:b2:85:97:e9:83:99:8b:
                    60:6c:7d:ce:7b:8c:e4:a3:80:da:be:21:79:d1:78:
                    4e:2c:1c:c5:88:2c:63:c6:74:6c:e9:0b:ed:63:13:
                    c4:6e:88:b8:52:ec:3b:aa:ae:2d:59:2e:17:ad:53:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1C:72:75:0A:5E:5E:B3:F0:BD:47:14:B4:B2:63:D4:C0:5B:54:B1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS4637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:3b:7f:95:d0:d4:2c:28:50:65:83:c1:ee:29:d6:ff:07:
         c7:6b:e7:a3:00:2b:f5:52:5b:84:a1:a0:9f:0f:aa:c6:2d:40:
         08:1b:42:0d:fa:34:0d:9f:3d:6c:4a:c1:fc:2d:de:f2:5b:c4:
         9e:d9:d5:c0:fa:18:07:c0:97:9b:6e:78:b5:4d:67:9b:4a:11:
         87:12:c9:ce:e4:c1:70:99:0d:b8:aa:46:38:38:f5:d0:d9:c5:
         a3:f4:2b:b9:11:d2:ce:bd:f4:3b:8c:1a:36:9d:ad:2b:31:6f:
         a5:e7:72:94:0c:1f:b3:27:af:d2:7a:99:86:ce:07:b8:4b:92:
         3a:27:d6:39:4a:74:40:0d:b8:46:80:56:40:0c:87:65:92:6b:
         bc:95:43:53:c7:81:af:02:cb:1e:48:30:43:72:35:b1:0c:0e:
         f0:87:91:f6:f5:72:c6:67:b3:f7:68:79:d3:22:6b:29:94:f3:
         90:6e:3f:ab:87:6c:86:38:79:83:28:fd:a4:4e:a3:ba:1b:bf:
         00:9a:86:de:98:5d:66:ed:62:cd:bd:fc:3a:49:d8:42:4c:ee:
         1c:4d:b5:09:a0:5c:29:5f:45:06:bd:5e:bc:8e:4b:64:77:63:
         3c:16:66:b2:04:a0:64:c5:a3:65:52:bd:00:d4:eb:76:d4:32:
         f0:37:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:42:28 2025 by rpki-client