Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS146899.roa
File:                     AS146899.roa (raw, json)
Hash identifier:          2y3aPP7GVi9hi2ubt2bCtEBSA2OlcwMjE4KAdAKY9Z0=
Subject key identifier:   7C:95:A9:66:6B:7C:34:E9:77:FA:A3:F3:38:62:B2:92:58:12:10:3A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       79E79921D91EC7A126EB9610BC107D0C59BD524A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS146899.roa
Signing time:             Wed 24 Jun 2026 11:27:25 +0000
ROA not before:           Wed 24 Jun 2026 11:22:25 +0000
ROA not after:            Wed 23 Jun 2027 11:27:25 +0000
asID:                     146899
IP address blocks:        157.254.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 16:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e7:99:21:d9:1e:c7:a1:26:eb:96:10:bc:10:7d:0c:59:bd:52:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 24 11:22:25 2026 GMT
            Not After : Jun 23 11:27:25 2027 GMT
        Subject: CN=7C95A9666B7C34E977FAA3F33862B2925812103A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:38:e1:f1:6f:6a:d5:ba:30:39:38:d1:4a:8c:
                    22:5e:91:c5:bf:0f:31:42:dc:c9:d7:3d:10:0e:78:
                    f9:15:b5:d4:f3:b8:2f:32:be:e0:1a:87:4f:04:e8:
                    68:e2:6c:9d:ba:68:5e:a6:f9:a0:79:62:67:7f:5a:
                    c1:a3:12:58:67:88:99:38:54:ea:ed:a7:66:86:b6:
                    80:d9:0a:1c:e5:f2:5e:0f:ab:5e:92:b0:3d:06:c5:
                    9b:2a:d5:f2:bc:c6:f5:99:79:9a:47:98:c5:cc:dd:
                    fb:65:4c:46:19:16:1a:a7:0d:eb:31:04:1b:83:ef:
                    68:17:6e:96:b9:67:10:0d:d5:22:69:1a:d6:52:47:
                    43:8b:67:15:d2:38:ee:e4:c5:96:51:9e:aa:80:60:
                    b1:a1:44:bd:30:8d:0e:74:f0:a2:21:66:50:bb:de:
                    c4:33:d7:51:99:f7:16:cd:79:cd:1b:39:f8:8f:d4:
                    2c:87:a3:03:9c:dd:5b:d8:72:28:c0:91:69:86:de:
                    59:51:c6:a2:a3:36:a2:43:01:f3:0b:bb:16:80:3d:
                    61:2e:9e:d3:14:b0:c8:8e:3e:7f:f4:68:0b:03:df:
                    9e:c7:75:06:00:17:b8:50:83:b7:2e:53:da:1e:59:
                    0f:45:67:c5:36:45:56:37:55:27:82:65:46:96:05:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:95:A9:66:6B:7C:34:E9:77:FA:A3:F3:38:62:B2:92:58:12:10:3A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS146899.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:1c:97:9c:09:e0:34:2c:6d:6d:59:22:4b:2c:5c:e5:38:2a:
         46:4d:ae:3a:24:2e:fe:ae:98:7d:d0:6f:2f:f1:89:cc:88:69:
         1e:0d:1c:ac:d2:29:c0:80:a4:6b:86:f6:76:76:a7:84:d3:3e:
         7b:2e:b1:6e:d7:3c:97:7a:11:2c:36:af:e3:98:02:8e:00:6d:
         82:a8:49:70:d1:c3:e7:1d:bb:19:31:32:eb:a8:2d:f9:42:91:
         72:7f:07:a1:31:c9:5e:8a:1a:5d:f5:92:ae:95:5e:26:83:2b:
         f9:9d:ed:11:35:02:f3:a5:ef:16:2e:b1:51:21:12:eb:28:bc:
         d7:18:16:17:39:67:39:76:fe:43:94:2c:60:0a:97:5f:c3:3b:
         dc:66:01:1f:22:5c:ac:fb:03:49:eb:65:e8:e3:57:d2:af:b5:
         13:5c:8b:2a:6c:a8:93:7a:35:4a:77:8c:99:1a:da:85:f3:f9:
         d3:9f:47:74:a2:22:ba:e1:2a:e2:0c:54:8c:eb:74:c1:e2:8b:
         f9:f7:cf:f8:43:b0:af:50:5c:25:76:a3:54:49:d2:cf:96:98:
         bc:18:fa:fd:af:71:d5:af:a9:e9:0b:17:0e:2e:70:10:89:a1:
         da:a0:1e:ba:2e:52:9e:3f:9e:3c:19:d9:5e:32:eb:b5:30:e0:
         17:c8:79:cb
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUeeeZIdkex6Em65YQvBB9DFm9UkowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjI0MTEyMjI1WhcNMjcwNjIzMTEyNzI1
WjAzMTEwLwYDVQQDEyg3Qzk1QTk2NjZCN0MzNEU5NzdGQUEzRjMzODYyQjI5MjU4
MTIxMDNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Djh8W9q1bow
OTjRSowiXpHFvw8xQtzJ1z0QDnj5FbXU87gvMr7gGodPBOho4mydumhepvmgeWJn
f1rBoxJYZ4iZOFTq7admhraA2Qoc5fJeD6tekrA9BsWbKtXyvMb1mXmaR5jFzN37
ZUxGGRYapw3rMQQbg+9oF26WuWcQDdUiaRrWUkdDi2cV0jju5MWWUZ6qgGCxoUS9
MI0OdPCiIWZQu97EM9dRmfcWzXnNGzn4j9Qsh6MDnN1b2HIowJFpht5ZUcaiozai
QwHzC7sWgD1hLp7TFLDIjj5/9GgLA9+ex3UGABe4UIO3LlPaHlkPRWfFNkVWN1Un
gmVGlgV7wQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHyVqWZrfDTpd/qj8zhispJY
EhA6MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE0Njg5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+AzANBgkqhkiG9w0BAQsFAAOC
AQEAtByXnAngNCxtbVkiSyxc5TgqRk2uOiQu/q6YfdBvL/GJzIhpHg0crNIpwICk
a4b2dnanhNM+ey6xbtc8l3oRLDav45gCjgBtgqhJcNHD5x27GTEy66gt+UKRcn8H
oTHJXooaXfWSrpVeJoMr+Z3tETUC86XvFi6xUSES6yi81xgWFzlnOXb+Q5QsYAqX
X8M73GYBHyJcrPsDSetl6ONX0q+1E1yLKmyok3o1SneMmRrahfP5059HdKIiuuEq
4gxUjOt0weKL+ffP+EOwr1BcJXajVEnSz5aYvBj6/a9x1a+p6QsXDi5wEImh2qAe
ui5Snj+ePBnZXjLrtTDgF8h5yw==
-----END CERTIFICATE-----
Generated at Thu Jun 25 02:55:30 2026 by rpki-client