Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS153786.roa
File:                     AS153786.roa (raw, json)
Hash identifier:          GfVKIPw8p67ifyMW0OTw0uUHIIh2khulDZ179NfqSPM=
Subject key identifier:   5F:B0:59:1C:5D:FE:04:E3:2A:E3:B5:B1:89:4A:81:82:33:C1:44:2C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       477E9577AB82956568014FAC72FFEA87913252AF
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS153786.roa
Signing time:             Sat 04 Jul 2026 09:58:09 +0000
ROA not before:           Sat 04 Jul 2026 09:53:09 +0000
ROA not after:            Sat 03 Jul 2027 09:58:09 +0000
asID:                     153786
IP address blocks:        192.231.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7e:95:77:ab:82:95:65:68:01:4f:ac:72:ff:ea:87:91:32:52:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  4 09:53:09 2026 GMT
            Not After : Jul  3 09:58:09 2027 GMT
        Subject: CN=5FB0591C5DFE04E32AE3B5B1894A818233C1442C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:cd:7d:05:d0:7b:9b:c3:33:44:d4:b1:4f:
                    bf:79:0e:ba:fd:f8:88:d4:2d:81:b9:ae:8d:ba:25:
                    16:81:69:5a:8d:00:e6:42:0c:fa:94:d7:90:90:52:
                    31:5e:bd:ca:fa:83:3d:e9:1e:a5:3e:3b:30:55:09:
                    bf:06:2a:39:ae:15:b8:ee:63:df:8e:69:fa:4d:3d:
                    59:5a:ce:26:f0:8f:6f:f0:97:da:67:82:c6:f0:f2:
                    f4:aa:80:fc:60:f2:3b:e0:cd:7d:c5:4c:16:e5:16:
                    4e:44:5c:74:3a:4c:5a:4f:f0:21:3c:78:dd:3a:58:
                    d4:fb:ac:a8:e0:11:9d:f6:c0:25:bd:be:de:17:34:
                    ba:54:47:7c:0a:b1:f8:34:7c:c8:b5:17:1f:32:94:
                    da:f7:e6:ba:32:c8:6f:cb:b5:a4:20:e2:1d:2a:29:
                    6c:6c:45:0c:d5:2d:c2:ed:49:65:32:09:ed:6c:ac:
                    27:21:ad:1b:f9:6b:18:8a:40:c9:a9:8b:10:5d:91:
                    f6:10:67:7a:54:bb:23:34:84:fb:e7:37:a6:54:9a:
                    99:40:f1:79:b7:89:57:c7:9d:e9:3a:0d:8a:65:62:
                    fa:e2:29:89:3f:2f:b3:31:11:f2:fd:4c:89:c3:20:
                    a8:d5:03:e8:58:1d:1c:fa:90:b6:1a:59:87:f8:b5:
                    f1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:59:1C:5D:FE:04:E3:2A:E3:B5:B1:89:4A:81:82:33:C1:44:2C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS153786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:88:fb:c2:4e:ab:2d:9e:31:9a:a6:c7:4e:87:bb:66:9f:
         35:2c:16:04:a0:68:84:d0:9c:7d:82:0f:a0:88:22:ba:4f:6d:
         81:04:e8:c3:78:d2:7d:6b:f2:3e:26:f5:fc:d5:a8:c4:41:0f:
         af:c1:8d:31:d3:30:7b:f4:c3:3e:7d:18:c0:04:07:bc:34:34:
         61:69:83:5b:c7:79:18:2f:8e:a8:d5:a2:3d:60:8f:1a:86:71:
         99:e8:2f:a9:d2:d2:ca:9a:b8:22:c8:22:7a:93:e1:cc:bd:78:
         ca:5f:03:6b:87:12:e7:29:01:a2:f6:c4:ad:0d:c7:cf:14:0e:
         7a:50:8b:06:44:03:c2:13:2d:b5:a7:46:9c:18:27:dc:e1:fc:
         d3:7b:2c:28:8e:12:b1:af:9f:28:b0:a9:99:15:23:fc:89:db:
         d9:e0:0f:97:2f:51:20:d2:a8:34:da:42:54:54:5b:ca:a1:39:
         49:bc:a5:74:6f:ac:dc:97:02:86:06:dc:34:92:fd:e0:b6:38:
         96:ed:57:62:c4:5d:75:b7:03:86:55:db:30:b9:c3:0d:67:1e:
         6e:2e:48:ae:28:f2:23:38:57:64:5b:a0:36:a5:47:4e:2d:d7:
         24:c4:b9:41:ff:81:5f:13:41:64:e3:46:e7:02:2f:51:e4:18:
         ea:e3:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:31:18 2026 by rpki-client