Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS18978.roa
File:                     AS18978.roa (raw, json)
Hash identifier:          HFB9u4Tw1bzRG+1LStN8rtxBq9kqdS7kh+ctho6q5oM=
Subject key identifier:   19:98:75:60:AD:E4:39:D6:5C:B9:D4:A6:87:66:0D:AE:02:99:3F:6B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       701D21A0F9C3AD4C09476DE3DAA9FA4D6F43F385
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS18978.roa
Signing time:             Thu 23 Apr 2026 12:08:47 +0000
ROA not before:           Thu 23 Apr 2026 12:03:47 +0000
ROA not after:            Thu 22 Apr 2027 12:08:47 +0000
asID:                     18978
IP address blocks:        157.254.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 13:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:21:a0:f9:c3:ad:4c:09:47:6d:e3:da:a9:fa:4d:6f:43:f3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 23 12:03:47 2026 GMT
            Not After : Apr 22 12:08:47 2027 GMT
        Subject: CN=19987560ADE439D65CB9D4A687660DAE02993F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:e5:23:69:6a:cb:bf:42:25:8e:39:c2:a6:
                    7c:c9:3b:47:e9:f4:f4:73:b2:43:2b:6d:4d:28:7d:
                    74:63:56:f2:3f:3c:ee:22:88:51:bf:17:2a:f2:fb:
                    63:8c:57:eb:1a:d2:62:78:3c:c2:30:52:bb:91:69:
                    f0:99:94:f8:12:39:12:2f:dd:72:a1:01:93:c6:fd:
                    ab:86:be:15:48:11:3e:e7:32:4f:1d:dc:58:e9:47:
                    34:7c:ca:fe:37:8d:7a:c3:e0:2a:72:65:15:c9:df:
                    6b:2e:56:b5:59:9d:5b:c0:04:8c:2d:a2:67:d4:2d:
                    16:65:45:54:1d:c5:c7:b8:4d:dd:0f:6f:9e:3d:34:
                    12:c8:ad:59:f2:4d:6c:f1:4c:a5:2b:6c:1b:68:40:
                    46:1c:5a:ef:7e:7a:8c:13:b3:07:ae:70:27:e4:6a:
                    2d:d4:5c:20:89:71:9e:4b:ba:4b:a7:c5:d1:f9:aa:
                    4f:d1:f8:b6:bd:16:b7:92:39:36:e2:ab:12:8b:8f:
                    6c:a2:e6:b3:55:a6:af:06:5c:7e:5d:41:82:c8:fe:
                    4b:52:27:f6:b1:04:e5:8a:8a:27:f6:ed:b6:3a:35:
                    48:a8:3d:f8:fa:58:89:36:07:ea:d1:0c:6f:a6:56:
                    61:25:f4:be:17:f1:9b:aa:40:d9:93:32:ae:29:19:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:75:60:AD:E4:39:D6:5C:B9:D4:A6:87:66:0D:AE:02:99:3F:6B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS18978.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:53:08:9d:18:e8:7f:d9:07:1d:d0:87:c3:86:fa:26:bd:
         29:39:ed:e1:ff:5d:35:58:35:42:cb:d2:c3:2e:1b:e5:d6:ed:
         46:42:c3:7b:b7:e1:08:75:76:d9:ce:45:2f:39:17:a6:af:15:
         d0:02:30:2b:2e:73:83:06:02:c3:07:66:8d:61:ec:25:7e:8b:
         b5:10:47:d1:97:6f:21:11:97:e6:5c:fb:7c:fd:d6:cc:bf:70:
         2d:31:44:d8:7b:b1:d8:44:b2:3e:5b:1e:9e:ae:fe:f3:e8:d6:
         c5:50:7a:51:31:c8:cf:ea:e4:2f:45:4c:d3:21:0a:f0:0e:fa:
         0c:7a:1a:e5:70:15:cb:ec:8b:b6:fc:78:39:00:7f:3f:e3:53:
         29:1c:76:01:49:d7:3d:e7:54:b0:e9:5e:fe:31:5f:04:c2:77:
         dc:62:1e:c7:28:fc:01:4e:7a:43:a7:c5:84:47:c7:5a:0f:bf:
         54:1c:a5:c9:53:56:c7:95:59:ed:b7:23:37:83:51:69:b0:3b:
         4e:b4:0a:75:db:39:ea:61:e2:17:da:3d:0c:8f:78:78:4d:19:
         93:ba:d1:21:8e:f3:1a:5d:cd:12:b0:43:98:c1:7c:ed:c3:b3:
         ba:38:5f:5b:0b:9b:99:17:b6:b7:d9:24:d7:b3:24:02:ae:0e:
         08:54:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:52:33 2026 by rpki-client