Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136725.roa
File:                     AS136725.roa (raw, json)
Hash identifier:          wmhBtikR7uMW8+S2T5B4iqkFzYdrd7jjPd/kvP9+7Lo=
Subject key identifier:   A0:BC:3F:D9:30:36:EB:D8:55:FF:B4:E8:0C:95:07:41:2A:7D:73:73
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7FD6B1CB14E19FB34BAE7561B2CA993CD6955DAE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136725.roa
Signing time:             Fri 31 Jul 2026 07:50:00 +0000
ROA not before:           Fri 31 Jul 2026 07:45:00 +0000
ROA not after:            Fri 30 Jul 2027 07:50:00 +0000
asID:                     136725
IP address blocks:        157.254.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 10:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:b1:cb:14:e1:9f:b3:4b:ae:75:61:b2:ca:99:3c:d6:95:5d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 31 07:45:00 2026 GMT
            Not After : Jul 30 07:50:00 2027 GMT
        Subject: CN=A0BC3FD93036EBD855FFB4E80C9507412A7D7373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:80:a0:c5:4d:8a:63:29:d6:ba:86:23:82:
                    d2:a0:82:13:bc:68:68:90:87:03:77:17:87:0d:b9:
                    9a:ec:03:1a:6c:f1:3f:b2:c1:b3:2e:d7:23:28:21:
                    90:2d:1b:ad:8c:11:5d:e3:b8:aa:36:c5:61:1b:a9:
                    57:96:a7:04:b2:f0:e2:17:bc:8e:f4:28:f5:86:88:
                    14:f3:f9:d4:19:9f:73:f9:44:19:37:a9:51:a6:19:
                    47:f4:e9:67:c1:a5:57:a7:6b:57:09:22:d9:19:3a:
                    a9:94:75:1d:bf:28:25:dd:45:22:56:ba:51:e4:9c:
                    ee:96:f6:30:8d:7d:f2:b7:eb:78:61:0b:50:b4:a1:
                    5b:13:49:cf:ec:38:c2:03:06:bb:3d:b2:af:1a:c2:
                    db:a7:69:0e:44:86:d6:10:0e:a1:6b:d3:f2:cb:07:
                    d6:fb:37:5e:cb:ae:37:08:5c:b6:57:b5:b4:a5:ca:
                    5d:a5:7b:ee:4e:e1:3b:be:16:2f:6c:10:23:04:77:
                    7d:89:64:39:d1:a7:71:fe:b7:15:74:76:83:74:bb:
                    02:12:f9:8a:0a:31:a2:29:8d:8a:db:26:5a:f7:27:
                    a2:4b:9f:6c:b0:14:71:ba:3b:d3:54:78:f0:37:cf:
                    ae:05:01:10:05:c4:f1:16:ca:0d:6b:29:fd:42:a2:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BC:3F:D9:30:36:EB:D8:55:FF:B4:E8:0C:95:07:41:2A:7D:73:73
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136725.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:87:77:b3:f0:6e:21:62:e8:82:80:2c:30:46:b5:57:3a:6c:
         52:e0:63:c3:70:b8:8e:09:a5:5d:ff:a6:7c:81:20:44:77:20:
         60:22:e0:2b:fd:6d:42:28:83:d6:29:79:b7:f5:0c:60:ec:9c:
         a9:f7:0b:09:f9:2c:4d:bf:68:3b:60:1e:13:71:02:85:0c:26:
         eb:05:e4:35:8d:2c:5b:37:42:c4:87:80:3b:3b:72:2a:09:65:
         d2:57:8e:22:9c:c6:fb:70:49:62:48:e1:ae:8a:70:1a:af:d4:
         b2:e7:69:81:e2:00:ec:92:0c:8d:92:09:4f:f8:ef:00:8a:16:
         36:41:a3:8d:85:ae:86:8f:df:5d:b9:76:c8:61:78:c5:60:3e:
         bd:a4:ba:05:22:1b:7c:5d:03:ab:f2:69:02:01:06:a0:81:c6:
         c6:c6:a1:5b:f2:b7:7b:4c:c9:02:af:e1:74:2e:c0:68:19:13:
         08:6e:33:d7:22:63:e3:d7:98:85:03:cb:57:de:e5:90:98:a4:
         27:53:db:cd:65:fc:56:8b:3d:a6:ca:71:e5:c4:a7:70:b2:87:
         74:00:b8:c9:73:4d:ea:7c:54:1a:85:9a:09:43:11:9f:ed:39:
         80:2e:62:d6:87:22:7b:aa:9d:3f:9f:01:47:7a:1f:ea:60:da:
         fb:f4:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 10:09:01 2026 by rpki-client