Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154685.roa
File:                     AS154685.roa (raw, json)
Hash identifier:          dGLyeay13C1UuDoBKdpIPhZEsLz957gCZUOrA1unw7k=
Subject key identifier:   FA:7A:C6:84:F8:8D:46:B8:12:95:46:9E:76:44:EE:8A:B2:A7:9E:63
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       18E9A469386417923D93CD3F66E68522495DCF1E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154685.roa
Signing time:             Sat 13 Jun 2026 07:13:06 +0000
ROA not before:           Sat 13 Jun 2026 07:08:06 +0000
ROA not after:            Sat 12 Jun 2027 07:13:06 +0000
asID:                     154685
IP address blocks:        157.254.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e9:a4:69:38:64:17:92:3d:93:cd:3f:66:e6:85:22:49:5d:cf:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 13 07:08:06 2026 GMT
            Not After : Jun 12 07:13:06 2027 GMT
        Subject: CN=FA7AC684F88D46B81295469E7644EE8AB2A79E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:a2:78:ee:37:90:73:e8:ee:67:7b:45:c8:
                    32:9a:28:c9:9c:32:4f:79:6a:a8:45:ce:ea:17:87:
                    05:cf:c4:22:d0:75:ba:99:67:15:f3:2d:0d:03:0b:
                    22:89:e9:c7:55:6f:74:85:63:47:f8:91:0f:93:38:
                    94:52:13:85:c7:11:70:e2:0c:d3:7e:7f:f3:66:1b:
                    29:1d:4a:00:2a:67:f6:b0:f7:bb:8f:fd:41:28:c1:
                    67:99:33:99:85:93:ff:23:65:6e:3b:d6:3f:c4:16:
                    0d:30:28:ef:4b:6f:53:52:c1:76:df:48:d8:c7:3f:
                    11:0b:7d:a7:bb:ca:8b:38:2c:27:ff:0b:f6:c5:cd:
                    c6:9b:ec:48:80:21:d3:8e:cf:c4:44:1d:48:67:bb:
                    b2:61:e0:ab:e6:24:b3:24:33:f6:09:83:7d:98:60:
                    e6:d8:82:94:04:f2:20:38:01:5c:23:b5:40:5f:de:
                    c3:30:f2:26:9c:6e:27:1d:ff:2e:ef:ad:c6:c6:5d:
                    7a:47:aa:f1:33:47:f7:d7:90:65:53:cc:f9:c1:f2:
                    92:34:d7:75:77:1d:2b:46:77:0d:3d:22:aa:5b:9c:
                    ec:5e:ae:cf:69:49:2e:8e:c5:5e:33:03:58:cb:5d:
                    4b:5e:11:18:6c:1e:30:6c:b2:e6:0f:9c:74:f7:0a:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:C6:84:F8:8D:46:B8:12:95:46:9E:76:44:EE:8A:B2:A7:9E:63
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS154685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:07:51:54:ac:57:75:23:2d:77:aa:48:4b:32:15:e6:fe:
         f4:4d:9d:c1:61:d5:ea:51:8f:ad:be:1d:5a:68:a5:2c:ae:ac:
         c2:df:ac:f9:90:63:cd:85:07:ac:7b:d5:28:b2:f0:94:2f:73:
         dd:ab:b0:44:55:22:8b:5b:82:e2:c8:ac:de:f1:10:b8:da:dc:
         90:41:55:cd:f8:a7:95:b9:37:d9:0c:13:c8:ae:be:a3:97:d3:
         f5:59:5b:0a:f0:80:f5:80:81:d1:0b:7c:e5:c1:20:3b:43:d6:
         d4:80:c0:5e:99:ac:93:8b:6f:fd:b6:c6:df:68:ef:11:98:2f:
         2c:35:aa:b2:f1:d2:a0:4f:e0:bc:e0:0d:87:cc:55:d6:2a:b6:
         72:44:56:21:65:29:ca:02:6a:ff:b5:8c:c8:21:90:ee:51:4d:
         87:b3:e9:4e:80:a5:0f:18:cc:17:20:06:7f:09:49:58:0e:f2:
         fb:02:b5:04:d6:a9:c9:25:6b:dd:3a:24:f7:59:3c:6a:0c:ae:
         fc:78:52:49:d2:8a:7c:d3:fd:22:93:90:20:a3:bf:48:27:be:
         45:4f:25:36:35:90:60:a4:f7:0f:ed:6c:69:f5:f6:ad:3f:5f:
         41:5d:69:f0:4b:d0:b4:90:88:df:27:9b:f8:66:90:c2:58:f4:
         31:68:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 02:16:17 2026 by rpki-client