Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154633.roa
File:                     AS154633.roa (raw, json)
Hash identifier:          f1CXbqya/1kghZPOkDx9pPRsAcKMLWju+3AhEQHamSU=
Subject key identifier:   F5:E7:C1:75:BE:AD:2F:12:0B:DD:A4:4B:53:CB:B9:02:19:87:41:F3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       04529C22C3B4A384B3C662FCF2602747774EC103
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154633.roa
Signing time:             Mon 20 Apr 2026 08:44:06 +0000
ROA not before:           Mon 20 Apr 2026 08:39:06 +0000
ROA not after:            Mon 19 Apr 2027 08:44:06 +0000
asID:                     154633
IP address blocks:        157.254.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 13:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:52:9c:22:c3:b4:a3:84:b3:c6:62:fc:f2:60:27:47:77:4e:c1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 20 08:39:06 2026 GMT
            Not After : Apr 19 08:44:06 2027 GMT
        Subject: CN=F5E7C175BEAD2F120BDDA44B53CBB902198741F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:04:be:0b:a5:db:04:60:9a:27:57:66:ac:
                    b3:83:df:63:83:df:38:6f:aa:a2:81:f2:c2:4f:cd:
                    d2:55:30:c0:9a:69:f6:91:5e:85:d8:24:61:57:a8:
                    97:53:b4:b6:9a:29:1a:63:1d:30:f1:f8:ea:0c:03:
                    16:8f:2a:ff:9a:9a:d2:1e:07:72:02:f6:d1:40:6c:
                    cd:43:9e:e2:db:15:f0:24:bc:be:a2:d1:67:70:1e:
                    51:5b:42:82:65:4e:18:0d:6a:d8:4d:38:34:30:81:
                    c8:a0:20:61:00:b0:98:48:1b:d3:76:b4:69:1a:61:
                    a5:7a:de:69:c5:f6:e6:56:80:e0:ac:ab:b2:2b:0d:
                    21:09:c7:0a:68:5c:ad:f7:10:38:fe:c4:64:ef:cd:
                    bf:ae:8d:89:7f:9d:6a:30:76:d0:1c:ea:ad:16:40:
                    be:21:37:c9:71:a3:79:fa:af:ed:a9:6c:36:bf:0d:
                    8f:4f:03:81:6c:13:bf:63:4b:b7:a7:72:f5:c2:f4:
                    5b:5f:5e:d3:62:07:30:ca:17:64:ab:21:e1:df:90:
                    78:aa:53:3a:a5:a0:70:31:94:50:ca:5f:06:ca:c8:
                    dc:40:67:0a:92:c1:0e:b0:b7:63:fd:44:0e:65:c1:
                    83:e0:89:64:5d:5d:2a:ee:a6:66:f4:15:8a:ef:42:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E7:C1:75:BE:AD:2F:12:0B:DD:A4:4B:53:CB:B9:02:19:87:41:F3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:0a:14:a6:2e:6f:a0:6f:d7:1a:b4:fa:09:f7:21:32:a8:
         30:c0:bf:36:1b:13:df:0e:7a:61:75:b0:c2:e2:49:1e:9d:33:
         bb:0a:fb:27:dc:3a:64:22:fa:d7:8c:fa:f1:27:35:1f:a1:69:
         72:db:3e:70:cd:31:8e:5d:69:3b:7e:81:fe:d8:37:1b:53:56:
         f6:27:45:8d:a4:0d:c1:43:31:07:ce:2b:ef:58:77:8a:e0:a3:
         44:89:68:69:9e:da:8e:1c:05:0b:e3:35:7f:b9:b5:2a:15:63:
         e1:0d:73:45:3e:ce:ef:4b:21:0b:f7:b6:44:63:ad:fd:f3:72:
         2c:5d:4e:5d:5b:e8:98:28:40:05:de:81:33:80:1d:c5:3c:44:
         6c:73:32:2f:10:7e:cc:bb:0a:fd:34:3e:e2:cd:07:f0:8d:a2:
         02:1f:09:84:ad:97:f9:91:f5:39:1b:87:5f:85:19:62:fc:60:
         a6:78:23:e9:d8:66:f7:1e:13:46:42:a8:e9:15:d1:dc:03:0d:
         f1:e8:a1:7a:db:60:f5:b5:96:96:2a:55:df:2b:67:b9:f1:c6:
         96:14:55:1f:f2:80:18:32:45:37:6f:30:62:21:b9:b0:2e:0f:
         6c:c0:b8:43:4d:69:47:bb:3f:6b:c3:93:c9:9b:bb:e9:a4:cf:
         f7:f8:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:52:33 2026 by rpki-client