Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154107.roa
File:                     AS154107.roa (raw, json)
Hash identifier:          Ug/zqybL3Kpv8b/O3UVroDxtEV3szrLd8xCr6Zs+jv8=
Subject key identifier:   29:8C:28:1B:DC:E6:32:1D:55:2A:CE:E4:4F:D1:92:A9:B1:DB:CC:40
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       60BF6DCD4CD114BB3E15AFA5F23DC840DB9AFA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154107.roa
Signing time:             Mon 29 Jun 2026 05:00:18 +0000
ROA not before:           Mon 29 Jun 2026 04:55:18 +0000
ROA not after:            Mon 28 Jun 2027 05:00:18 +0000
asID:                     154107
IP address blocks:        157.254.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 17:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bf:6d:cd:4c:d1:14:bb:3e:15:af:a5:f2:3d:c8:40:db:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 29 04:55:18 2026 GMT
            Not After : Jun 28 05:00:18 2027 GMT
        Subject: CN=298C281BDCE6321D552ACEE44FD192A9B1DBCC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:da:bc:49:88:a0:22:82:04:00:3e:cc:4a:
                    63:75:e5:b5:06:e3:70:22:5f:19:b6:cb:93:bd:06:
                    37:de:1b:8c:11:41:53:b8:6b:23:36:51:21:33:2f:
                    e2:cb:26:37:7e:a4:fb:b6:91:3c:22:fb:1b:5a:61:
                    c1:4c:e9:54:a1:2a:2a:e8:76:7c:3a:b5:ab:16:e5:
                    5e:91:26:b9:aa:4c:8e:9a:c2:4e:87:ba:e1:a9:0c:
                    b5:16:40:70:e8:0a:0b:fe:4f:54:8c:1c:de:18:8e:
                    62:30:31:ab:b3:0c:66:bd:1f:0b:b0:da:78:c5:82:
                    88:17:ae:26:ac:15:2d:1d:b9:41:57:45:b6:c3:62:
                    8f:ca:4a:64:14:fc:1e:ff:ae:92:60:fb:58:52:de:
                    f2:06:4a:6d:87:70:5c:20:42:d9:f3:fb:0e:2c:53:
                    43:77:75:a2:ad:c8:5e:d9:a5:00:48:a2:bf:1c:f9:
                    f1:54:90:80:71:78:96:8b:0f:98:33:eb:26:2d:6b:
                    d1:34:36:45:fb:61:9b:d8:b5:4a:61:e6:1e:fd:6f:
                    e6:25:7b:93:52:5d:24:20:25:53:e8:39:c6:25:b7:
                    b3:ac:ec:62:92:02:0d:2f:7c:0a:f7:31:49:83:c1:
                    14:e8:69:04:2b:80:64:b9:b8:1b:de:94:77:ba:ce:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:28:1B:DC:E6:32:1D:55:2A:CE:E4:4F:D1:92:A9:B1:DB:CC:40
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154107.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:f0:02:52:25:b8:af:cd:8d:ed:6d:59:1b:f3:61:3c:dd:
         e5:7a:e4:01:12:e1:a2:12:9c:1f:5e:b7:c4:0c:0a:d7:5b:77:
         f4:35:54:78:65:a7:12:20:1e:5d:3a:41:18:1d:32:3d:f5:91:
         b5:4b:2b:56:f5:f7:b4:02:15:19:a5:69:50:47:4b:a7:64:ef:
         c0:85:79:a3:8c:80:36:85:67:8b:ca:48:8d:ae:ef:eb:18:0a:
         06:04:59:5a:dc:31:0f:d8:16:ec:78:0e:e2:83:99:a7:fb:64:
         fe:dc:c9:07:de:1e:f9:32:c3:93:18:ee:c9:4b:95:c7:14:82:
         5e:fa:ed:7b:8e:22:b9:72:c2:58:3b:2b:65:c0:9e:c2:88:2e:
         c8:f1:48:e7:43:1d:2c:c6:e4:8b:6f:be:6a:58:61:da:cd:02:
         f1:7d:3a:ad:b2:f5:28:b2:28:35:a3:d1:f0:4d:69:18:8c:bf:
         91:ff:96:54:ba:68:7f:2f:69:78:39:50:03:f4:1e:15:ab:c6:
         d5:c8:3a:0e:1a:c5:57:ef:03:6e:c8:5c:58:2c:d4:bf:4c:ac:
         58:fc:fa:19:34:02:21:05:c2:15:32:65:98:06:e3:d0:9d:b4:
         9f:ee:91:19:f4:51:fc:c3:27:2a:a7:33:76:ab:8d:b7:14:1e:
         d7:d1:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:15:26 2026 by rpki-client