Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136359.roa
File:                     AS136359.roa (raw, json)
Hash identifier:          tc9z2RNPzTr4q5EgUD20l9x8HDZeTfSqSYC0zz3lbbQ=
Subject key identifier:   F3:A3:69:BA:49:9D:A0:15:E6:79:6C:CB:68:1F:E8:44:5E:20:54:F2
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6FC1E31B0F8C3954409C071E728CD3DBD567BCA2
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136359.roa
Signing time:             Tue 13 May 2025 17:47:52 +0000
ROA not before:           Tue 13 May 2025 17:42:52 +0000
ROA not after:            Tue 12 May 2026 17:47:52 +0000
asID:                     136359
IP address blocks:        157.254.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c1:e3:1b:0f:8c:39:54:40:9c:07:1e:72:8c:d3:db:d5:67:bc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 13 17:42:52 2025 GMT
            Not After : May 12 17:47:52 2026 GMT
        Subject: CN=F3A369BA499DA015E6796CCB681FE8445E2054F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:99:ee:4f:80:a1:ac:ca:76:e6:cc:2c:39:
                    c9:34:67:79:af:e9:c0:43:c6:4a:62:83:34:b1:79:
                    1e:58:95:77:32:63:f2:39:01:07:3e:d7:d2:01:58:
                    a7:98:96:43:68:ae:f8:4e:a5:6f:64:cf:53:4c:72:
                    94:48:ac:7a:21:2a:13:be:a9:c5:49:92:0c:4a:5e:
                    39:c4:ed:73:77:65:85:6a:77:4c:a6:2b:d6:51:81:
                    1b:f6:34:02:7d:50:5d:1a:0a:40:19:af:cf:06:69:
                    cc:d1:b9:38:29:8f:bf:a8:7f:f6:7f:5b:6f:51:28:
                    39:e0:27:c4:83:ca:aa:37:a1:39:21:03:ba:4f:e4:
                    54:58:d8:59:e6:aa:e5:02:1a:d6:82:ac:6e:90:ce:
                    0a:c4:4d:90:7d:d6:81:0e:82:80:52:98:f6:f1:75:
                    ef:33:5f:8e:d0:41:50:c6:f2:08:be:e5:92:ac:6a:
                    21:98:8c:00:bf:f9:37:6c:9f:74:ae:f0:06:33:82:
                    a5:a8:69:b3:9a:cb:df:08:43:88:b6:20:15:0a:84:
                    27:2e:03:87:d3:fc:50:fb:9a:0a:70:a4:67:ac:1e:
                    df:cc:07:2c:78:a5:68:4b:cd:db:50:13:1f:e4:0d:
                    ee:a1:f6:85:1b:5e:8d:4a:09:a4:3e:7d:ed:44:e9:
                    9c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:69:BA:49:9D:A0:15:E6:79:6C:CB:68:1F:E8:44:5E:20:54:F2
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136359.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a9:1f:b6:9e:64:af:1a:52:fa:1f:c5:d1:23:eb:8d:4e:3f:
         e6:92:5d:c2:84:4b:c4:39:4d:8c:1a:fb:b3:48:c4:4a:66:e4:
         20:06:3b:7f:7c:93:18:a5:7d:ee:86:2d:84:56:7a:0e:ed:d4:
         42:58:6e:7b:37:54:8e:d7:9e:1f:c3:f3:7b:8a:6b:92:85:af:
         67:a5:db:d4:23:27:7f:57:9c:9b:8f:85:06:fb:46:41:d3:27:
         1f:37:d1:f7:5e:de:8a:30:39:7c:02:ea:66:19:0d:6e:15:4a:
         16:fd:b9:88:25:e4:2a:d7:4c:99:4d:e1:d3:84:3d:3f:e3:66:
         6f:8b:68:78:4c:3d:2c:25:75:33:e2:03:4e:bd:5e:a8:c3:89:
         52:93:31:4a:eb:26:d7:c9:0a:b6:2d:85:e1:7d:1f:4d:ce:77:
         54:21:3b:80:18:ae:b2:1e:1a:47:56:e0:db:3a:4d:21:32:77:
         87:5e:4b:6d:f5:1c:84:77:9f:a5:01:e5:10:98:67:a3:d8:b7:
         c9:fa:36:24:c6:41:05:f1:dc:de:98:89:7c:39:fc:c9:b5:34:
         8f:15:bb:1a:f6:c6:79:f3:b0:78:d0:c4:6b:4a:51:28:8b:bd:
         7e:34:f0:1d:7b:ff:6e:05:d8:c5:04:21:21:3a:3e:a5:ef:42:
         c0:91:97:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:30 2025 by rpki-client