Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199856.roa
File:                     AS199856.roa (raw, json)
Hash identifier:          E/GEv4HLoXl//lXZNr8A0DgCM+IBBnV0Yvmr4VUrgJ0=
Subject key identifier:   57:10:31:A3:2B:44:43:83:DE:D9:1D:88:A5:AD:65:3B:88:8D:91:42
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5AD6A34717EC16DDF23786159FDFFFAA3073A30E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199856.roa
Signing time:             Wed 12 Mar 2025 16:28:26 +0000
ROA not before:           Wed 12 Mar 2025 16:23:26 +0000
ROA not after:            Wed 11 Mar 2026 16:28:26 +0000
asID:                     199856
IP address blocks:        157.254.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 12:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d6:a3:47:17:ec:16:dd:f2:37:86:15:9f:df:ff:aa:30:73:a3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 12 16:23:26 2025 GMT
            Not After : Mar 11 16:28:26 2026 GMT
        Subject: CN=571031A32B444383DED91D88A5AD653B888D9142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:bd:f6:66:d8:96:f2:08:f1:bd:3c:d9:7e:
                    bb:9f:4a:b5:17:60:eb:f0:f2:5f:44:4a:7a:d6:d7:
                    2e:84:1b:6f:20:f7:3c:a6:91:d4:d3:5d:e0:e2:d6:
                    06:1d:1d:fb:51:4b:ec:5e:24:4a:82:19:9d:bf:8e:
                    81:f7:ca:93:8b:2c:ef:66:fa:49:c9:e5:a9:dd:59:
                    74:fd:62:a3:f5:42:d6:10:ff:6e:1b:e4:b5:90:cf:
                    2d:68:70:c3:c5:8f:80:c0:1b:99:75:6f:8f:bd:5b:
                    67:39:05:29:09:2c:6f:79:a2:d4:a6:0c:43:99:ea:
                    54:b1:31:1a:35:b6:89:e5:1c:7b:34:26:7a:2d:1a:
                    ff:ee:ae:66:45:c5:a2:85:d9:36:3c:6b:ff:cc:28:
                    e0:29:17:98:f1:d0:12:81:d1:18:0b:b3:31:20:7a:
                    6e:fb:bf:a1:73:c4:c2:08:36:a6:7c:05:94:8a:b2:
                    45:a8:27:83:8f:ef:ad:94:7a:93:98:70:ad:74:09:
                    18:f2:be:33:ca:8b:54:39:8d:b4:93:f8:34:da:56:
                    92:fc:c3:69:0b:d8:03:bb:d9:3c:f3:90:55:96:b4:
                    f9:32:6a:d1:14:1c:cc:02:84:38:86:1c:07:b2:b9:
                    6f:ed:05:0b:ae:a9:b8:48:e9:9d:ef:20:e3:3d:9c:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:10:31:A3:2B:44:43:83:DE:D9:1D:88:A5:AD:65:3B:88:8D:91:42
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199856.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:d4:6b:63:33:a7:57:63:5f:77:60:d7:b8:84:ab:53:68:
         56:16:d3:7e:b0:f3:e0:df:f6:e0:7c:ee:0a:33:c4:e5:51:af:
         58:07:90:21:25:98:b7:35:53:20:83:b2:11:35:81:47:6e:7e:
         66:23:e3:bc:74:81:7f:1e:f8:0a:64:2a:90:33:61:40:b1:6e:
         d4:3e:ba:90:a4:9f:6d:ef:20:bb:40:c8:73:cd:4e:fd:e5:18:
         11:85:68:52:e5:e1:8f:6b:d9:9a:4d:43:aa:3d:70:83:ed:d3:
         b5:66:8b:fd:31:64:cb:30:b5:17:89:9f:60:6e:f7:ba:94:c2:
         d8:66:c7:1c:37:6a:6d:fd:3a:51:77:a8:94:50:3e:4a:75:40:
         dc:63:41:cd:e3:d2:e6:8a:0a:5a:9e:77:1b:f0:ee:cd:34:ea:
         9d:20:be:09:8b:97:2b:c3:aa:8b:a3:7b:de:e9:3f:c4:d2:0a:
         c5:2d:d8:66:a9:42:b0:0a:de:eb:4c:a3:84:e2:f9:ab:c4:d6:
         20:66:63:74:06:b2:1c:27:95:f3:36:e0:a5:ad:ba:9a:e2:7e:
         5c:40:e5:ac:a1:93:29:d1:d7:15:5c:34:94:34:a5:9d:fa:3e:
         64:a2:2f:b5:98:53:67:b4:a4:86:b7:06:2e:8c:9c:16:09:83:
         1c:75:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:18:31 2025 by rpki-client