Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa
File:                     AS142111.roa (raw, json)
Hash identifier:          vrtVHdJ4B8hdfq15UnGnoZ0VtzRzDXutVv8X9oqKPMQ=
Subject key identifier:   55:C8:86:32:F9:CA:E0:BE:E3:92:E2:3A:E2:AB:78:0D:A9:3E:52:7F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       034A9C0CEB4B2BC3F24F9AFEAAE8F99C6921A35F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa
Signing time:             Mon 30 Jun 2025 21:08:31 +0000
ROA not before:           Mon 30 Jun 2025 21:03:31 +0000
ROA not after:            Mon 29 Jun 2026 21:08:31 +0000
asID:                     142111
IP address blocks:        157.254.227.0/24 maxlen: 24
                          157.254.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 10:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4a:9c:0c:eb:4b:2b:c3:f2:4f:9a:fe:aa:e8:f9:9c:69:21:a3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 30 21:03:31 2025 GMT
            Not After : Jun 29 21:08:31 2026 GMT
        Subject: CN=55C88632F9CAE0BEE392E23AE2AB780DA93E527F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:03:c9:01:de:7c:45:f0:c7:26:d1:4d:45:
                    e4:a7:d8:b1:a3:c2:64:bd:8d:83:6e:5b:5c:da:62:
                    fe:08:2b:e4:5d:40:f3:30:60:79:37:39:33:b7:52:
                    52:14:99:68:0b:8d:d2:72:e1:c2:17:de:06:15:a3:
                    46:67:a9:31:65:ab:18:58:f3:b8:a1:c3:df:22:02:
                    65:60:79:97:35:05:77:6c:c4:aa:51:86:ae:05:fc:
                    52:69:d9:15:e0:d9:83:a1:1f:7f:98:9c:57:c2:f1:
                    62:b5:2a:21:e6:8e:0b:5e:e9:c6:52:62:d0:83:af:
                    5a:e9:dc:68:45:ee:04:de:54:fd:df:20:6f:ba:52:
                    e6:bb:e5:ab:60:d2:ec:65:e0:c8:6e:ee:28:d2:56:
                    9f:01:64:29:39:cf:d0:1f:b7:6b:4b:17:21:d8:c8:
                    57:f6:c7:9c:5f:b8:ce:d8:4c:60:19:d7:01:79:d3:
                    6d:29:c9:82:8c:60:23:3a:31:5c:a2:66:66:06:78:
                    ef:ce:39:03:ea:fb:c2:55:c2:d8:7a:19:7a:fb:f4:
                    35:b8:f7:0f:c2:7b:83:d3:4b:7f:85:a5:64:6a:94:
                    cd:33:72:34:a9:c3:3f:00:ad:c5:d6:b0:66:59:0a:
                    79:8a:24:ef:5f:72:9a:5d:94:91:87:78:be:a0:5d:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:86:32:F9:CA:E0:BE:E3:92:E2:3A:E2:AB:78:0D:A9:3E:52:7F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS142111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d9:59:79:b8:34:7a:31:c9:6b:07:6b:31:05:59:b3:53:f9:
         4a:60:77:6b:be:a1:e4:4b:f6:b3:e4:fa:cc:8c:e1:c7:23:db:
         ac:5b:f8:6b:18:ec:cb:51:c7:ed:36:5d:47:5a:39:b9:c7:7b:
         14:21:b7:a8:5b:a0:65:f2:8f:3c:b5:96:42:f0:3b:51:73:3e:
         47:23:3e:08:a0:2d:25:cb:81:e0:1a:7c:c5:13:b6:fe:9f:ed:
         6d:a0:9e:3c:0f:20:80:bf:af:63:4f:da:44:a0:4e:07:2c:df:
         5d:71:c7:5f:a4:33:e2:3f:c6:91:7d:89:97:67:b8:c0:0b:66:
         fa:3f:6e:cd:29:73:16:41:51:70:1d:35:79:78:86:fb:79:1b:
         60:07:49:92:b9:df:9d:0e:c3:77:bb:8a:e1:01:76:3c:8e:01:
         b3:25:ff:c6:35:ce:3f:40:25:5a:04:9a:d9:92:b9:fd:5c:67:
         90:33:7c:61:54:b3:d6:97:83:23:2b:38:61:2a:3b:ea:55:12:
         14:fc:6d:ea:25:e2:ca:8c:81:08:99:d7:24:a9:a6:4f:a7:16:
         60:66:a7:bf:ce:a5:11:33:f0:c4:38:32:04:90:9b:56:5b:7c:
         7b:bf:5a:ba:10:8c:70:cb:42:4c:77:1b:63:2a:e1:81:bb:db:
         6e:07:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 19:01:44 2025 by rpki-client