Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17497.roa
File:                     AS17497.roa (raw, json)
Hash identifier:          u5KamTCkAo9NU/0g6Ue+gt96u8WDockZiVJZ1pzrZXE=
Subject key identifier:   AA:3C:8C:27:87:92:6B:26:C5:CA:20:BC:13:21:D4:0A:A7:C0:39:57
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       17DD66E39666A807AFF3B158999F19577DD169F9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17497.roa
Signing time:             Tue 14 Jul 2026 09:02:15 +0000
ROA not before:           Tue 14 Jul 2026 08:57:15 +0000
ROA not after:            Tue 13 Jul 2027 09:02:15 +0000
asID:                     17497
IP address blocks:        157.254.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 05:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dd:66:e3:96:66:a8:07:af:f3:b1:58:99:9f:19:57:7d:d1:69:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 14 08:57:15 2026 GMT
            Not After : Jul 13 09:02:15 2027 GMT
        Subject: CN=AA3C8C2787926B26C5CA20BC1321D40AA7C03957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:e8:93:aa:79:ae:7d:12:d1:36:96:ae:48:
                    35:b6:ff:ff:6a:b7:6d:65:d6:70:61:60:5a:85:73:
                    5c:e9:3a:d3:8a:b3:33:a4:34:87:f6:ba:76:51:48:
                    f4:e1:1a:38:00:77:da:f8:38:46:ab:26:da:66:95:
                    9b:75:6e:87:84:6d:ad:b5:60:11:38:f3:83:9a:02:
                    68:4b:ca:f6:1b:9b:51:a3:4f:a5:94:83:6e:b6:19:
                    a2:66:53:dc:af:10:da:1c:30:88:ee:5e:84:75:39:
                    f8:7b:d1:8d:18:99:6e:d9:ac:c8:48:51:7a:4b:2a:
                    1e:47:4f:c0:7b:5a:0c:95:48:39:38:66:e0:53:95:
                    20:64:25:65:21:7d:61:80:dd:5c:d5:83:21:ed:e7:
                    98:d6:70:03:b2:bb:e9:6e:69:ce:bf:b1:bf:54:2d:
                    29:91:65:2d:29:9c:ea:08:e3:11:6f:5a:b0:63:33:
                    30:be:a9:c1:a5:d7:67:b6:b9:38:ee:6e:08:97:50:
                    e8:33:db:49:a7:65:47:79:98:a1:54:2d:6c:42:e0:
                    46:16:a4:6c:73:91:f7:7e:e8:ef:75:14:d8:00:cb:
                    ab:86:42:56:9d:26:1d:6f:25:e4:bf:38:31:5a:cd:
                    55:43:d9:b0:8a:42:45:59:e0:aa:74:a1:c7:5a:81:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3C:8C:27:87:92:6B:26:C5:CA:20:BC:13:21:D4:0A:A7:C0:39:57
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17497.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:d9:e0:6e:21:d9:b0:2b:0b:8c:f9:e5:58:fb:c2:05:2e:
         76:16:a6:87:16:2d:33:36:ef:96:bc:72:84:15:d5:3b:c3:6c:
         10:84:2b:49:38:90:0c:47:41:0b:31:ef:96:26:82:ee:9c:4b:
         63:d2:49:ef:20:2d:94:8d:f4:39:ed:9d:f8:7c:f3:aa:ec:ce:
         26:5a:03:fd:73:6b:b8:eb:53:53:61:3c:6e:27:c3:5d:32:9a:
         95:9f:e5:36:07:ef:9b:c5:6f:46:e5:ee:2f:e2:61:f4:d7:7a:
         a1:ef:e8:cd:33:0a:2c:e7:9e:9e:96:3a:c9:7b:3b:70:89:f9:
         6d:da:05:4a:26:43:a2:41:93:d4:5e:11:b4:1a:99:fe:ac:d0:
         4a:8d:d8:22:af:0d:a6:90:cd:e4:a9:92:f5:e9:b2:e8:0e:1b:
         68:3b:83:5d:9f:3f:be:75:0a:83:0d:08:d7:96:1e:1e:46:a8:
         08:27:33:29:62:d5:1a:0e:a0:e3:ce:88:b9:4f:81:c9:78:15:
         70:9a:0b:30:5f:70:90:1a:9e:73:b8:da:b1:8b:06:e6:0e:24:
         58:67:39:09:6b:1e:40:fc:0e:26:2d:5e:69:7b:9a:b8:37:27:
         96:e9:31:24:c8:4e:1d:7d:67:3e:08:08:d1:c8:02:fd:cd:0a:
         0f:07:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 06:31:44 2026 by rpki-client