Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS13647.roa
File:                     AS13647.roa (raw, json)
Hash identifier:          NDvGQYVCUQjJiXO+mDgp7dVnmn2NTJdldPhMIiDxwtM=
Subject key identifier:   B7:F9:EC:23:A4:50:B0:84:E5:AB:0D:EF:93:9A:02:A7:39:70:E3:DA
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       33B4518967939648799DED11D360ADC1CD4C8963
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS13647.roa
Signing time:             Tue 18 Aug 2026 18:44:00 +0000
ROA not before:           Tue 18 Aug 2026 18:39:00 +0000
ROA not after:            Tue 17 Aug 2027 18:44:00 +0000
asID:                     13647
IP address blocks:        157.53.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 08:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b4:51:89:67:93:96:48:79:9d:ed:11:d3:60:ad:c1:cd:4c:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Aug 18 18:39:00 2026 GMT
            Not After : Aug 17 18:44:00 2027 GMT
        Subject: CN=B7F9EC23A450B084E5AB0DEF939A02A73970E3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:9d:42:71:41:32:6f:68:0c:44:1a:4b:0f:
                    de:c4:5b:1b:be:2b:8c:3d:54:7c:91:e4:d6:55:04:
                    8d:10:f8:b0:5d:2f:ab:08:ac:30:15:97:18:08:5d:
                    2f:c6:00:fe:dc:fb:02:bb:11:1b:42:55:d0:28:96:
                    8c:71:ba:9a:d9:19:2c:74:8d:ae:93:d1:6e:65:ba:
                    13:fc:34:a8:d7:e2:9d:0c:a4:08:22:ad:ce:6e:cf:
                    f1:15:11:f8:c2:37:64:c4:89:ab:3e:1f:43:4a:01:
                    45:9a:7e:a7:f2:f5:83:04:d6:ac:9a:04:31:6e:0e:
                    b4:cf:29:13:75:9d:30:8b:12:6d:fa:56:e5:62:90:
                    36:62:d8:46:c4:73:c3:f6:b4:7b:46:c4:68:dc:0d:
                    7a:97:95:fc:89:fe:cd:b7:7f:2d:2a:c3:1c:53:09:
                    77:71:b5:da:88:b8:ff:83:9c:be:67:30:a5:f8:15:
                    37:f3:28:e1:0e:33:d7:57:99:ea:76:ca:07:06:b6:
                    ab:ad:ab:5f:a9:92:65:1e:28:67:72:13:a3:82:c6:
                    60:35:ae:0b:9e:43:7c:9b:77:9e:57:17:34:aa:ba:
                    6a:d9:f1:33:7f:26:81:3e:49:90:06:87:fd:65:a1:
                    f9:7f:48:18:47:19:b7:94:05:d2:6c:80:3a:16:90:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F9:EC:23:A4:50:B0:84:E5:AB:0D:EF:93:9A:02:A7:39:70:E3:DA
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS13647.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:c3:c9:b4:8b:ec:4c:6d:69:e5:c4:36:6e:0d:22:cf:45:
         11:d7:7f:52:3c:a6:51:e2:ee:b0:e1:32:ae:07:37:3b:6b:79:
         c0:35:0f:41:c5:42:22:5b:cb:4d:e3:07:10:92:fc:47:ad:eb:
         cb:39:75:88:87:86:f6:6a:89:06:c4:c1:1a:6a:eb:4a:89:f2:
         95:26:13:4e:0d:ca:73:f4:46:a4:b1:96:bd:c8:da:29:0b:c3:
         9f:13:50:ea:a7:9b:67:38:7b:73:f1:07:8c:29:45:9f:ab:9d:
         aa:b7:95:82:c9:02:13:fd:eb:be:59:d0:a1:aa:d4:44:52:bb:
         1c:67:2a:00:7d:7f:f1:41:b9:3d:30:90:c4:1f:3b:a4:1e:ec:
         ec:78:fa:93:57:33:32:cb:e4:d7:1c:4e:f3:7a:55:da:dd:4b:
         bd:a8:0f:cd:56:8b:78:c6:70:06:e8:6f:f1:77:f2:fd:2b:52:
         50:5a:01:4e:b6:c6:64:36:db:a8:e3:2c:c8:ca:51:c3:ef:11:
         ef:66:08:a1:cf:58:da:0c:97:49:ff:98:22:1d:3c:f4:cd:d4:
         40:08:26:d2:ed:d9:a2:e8:22:19:31:82:1b:23:41:c3:a3:e8:
         75:06:fb:36:cd:20:8a:ac:96:d8:d7:74:dc:6d:e6:2b:81:f7:
         54:06:f5:0d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUM7RRiWeTlkh5ne0R02Ctwc1MiWMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYwODE4MTgzOTAwWhcNMjcwODE3MTg0NDAw
WjAzMTEwLwYDVQQDEyhCN0Y5RUMyM0E0NTBCMDg0RTVBQjBERUY5MzlBMDJBNzM5
NzBFM0RBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HGdQnFBMm9o
DEQaSw/exFsbviuMPVR8keTWVQSNEPiwXS+rCKwwFZcYCF0vxgD+3PsCuxEbQlXQ
KJaMcbqa2RksdI2uk9FuZboT/DSo1+KdDKQIIq3Obs/xFRH4wjdkxImrPh9DSgFF
mn6n8vWDBNasmgQxbg60zykTdZ0wixJt+lblYpA2YthGxHPD9rR7RsRo3A16l5X8
if7Nt38tKsMcUwl3cbXaiLj/g5y+ZzCl+BU38yjhDjPXV5nqdsoHBrarratfqZJl
HihnchOjgsZgNa4LnkN8m3eeVxc0qrpq2fEzfyaBPkmQBof9ZaH5f0gYRxm3lAXS
bIA6FpC+pwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLf57COkULCE5asN75OaAqc5
cOPaMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzEzNjQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTX3MA0GCSqGSIb3DQEBCwUAA4IB
AQCHi8PJtIvsTG1p5cQ2bg0iz0UR139SPKZR4u6w4TKuBzc7a3nANQ9BxUIiW8tN
4wcQkvxHrevLOXWIh4b2aokGxMEaautKifKVJhNODcpz9EaksZa9yNopC8OfE1Dq
p5tnOHtz8QeMKUWfq52qt5WCyQIT/eu+WdChqtREUrscZyoAfX/xQbk9MJDEHzuk
HuzsePqTVzMyy+TXHE7zelXa3Uu9qA/NVot4xnAG6G/xd/L9K1JQWgFOtsZkNtuo
4yzIylHD7xHvZgihz1jaDJdJ/5giHTz0zdRACCbS7dmi6CIZMYIbI0HDo+h1Bvs2
zSCKrJbY13TcbeYrgfdUBvUN
-----END CERTIFICATE-----
Generated at Sun Sep 13 16:37:36 2026 by rpki-client