Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS200017.roa
File:                     AS200017.roa (raw, json)
Hash identifier:          uozQWgluxcrEV8jV+pzm/Kat9O1Z643TZmOAiP67ZqA=
Subject key identifier:   00:2A:75:A1:77:AF:47:84:0B:66:88:40:DC:2C:42:82:C7:8E:50:D0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       626D142275569C009FEA4B4D17A5C0356D2C4648
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS200017.roa
Signing time:             Wed 07 May 2025 09:52:09 +0000
ROA not before:           Wed 07 May 2025 09:47:09 +0000
ROA not after:            Wed 06 May 2026 09:52:09 +0000
asID:                     200017
IP address blocks:        157.254.128.0/24 maxlen: 24
                          157.254.129.0/24 maxlen: 24
                          157.254.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6d:14:22:75:56:9c:00:9f:ea:4b:4d:17:a5:c0:35:6d:2c:46:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  7 09:47:09 2025 GMT
            Not After : May  6 09:52:09 2026 GMT
        Subject: CN=002A75A177AF47840B668840DC2C4282C78E50D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:2d:fe:a0:6f:3b:96:8c:f9:bb:87:d3:15:
                    7e:be:b5:27:a3:34:e8:4a:8f:86:fa:28:a6:c9:37:
                    49:a9:bf:1d:5a:bf:1d:83:6f:7e:44:0a:99:d1:c7:
                    ad:49:32:3a:87:2d:3f:b6:b9:f2:f4:7c:21:10:1a:
                    51:43:0d:34:48:9f:80:21:3b:e9:7e:dc:e7:39:12:
                    44:72:38:85:5e:97:33:d2:5c:a1:5a:84:54:a9:51:
                    a0:e3:0a:32:b8:a8:0d:3a:38:4c:5e:b4:bf:d2:47:
                    5b:55:95:ae:44:7b:fe:2b:28:0d:66:b2:ad:50:08:
                    ef:7f:70:ae:6f:fa:b8:0f:c8:28:2d:ba:74:a3:28:
                    f9:cb:72:7b:11:e9:44:22:f6:05:ae:57:2e:a1:d1:
                    c3:1a:c3:39:39:c9:68:6b:1c:be:df:fa:9d:7c:ff:
                    8d:ee:ef:4f:1c:2f:27:10:8f:8f:a2:81:0a:53:59:
                    35:33:70:4d:cf:e8:d3:b5:55:cb:11:e0:ac:0e:96:
                    df:2e:ca:a2:28:eb:b3:e9:bd:54:0a:b8:07:e6:96:
                    b3:62:54:f7:0d:b8:71:f8:71:ec:65:5a:09:10:1d:
                    66:b5:dc:5e:69:4d:e8:5e:ba:33:18:7d:d2:1a:ce:
                    22:9b:ea:aa:bd:e8:ff:1f:27:2f:6c:f2:38:a8:ed:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2A:75:A1:77:AF:47:84:0B:66:88:40:DC:2C:42:82:C7:8E:50:D0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS200017.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.128.0/23
                  157.254.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:20:b6:43:5f:3f:46:b3:1e:3e:47:90:e8:86:41:dc:3a:b2:
         9c:4b:56:76:2a:fa:46:a7:a7:eb:d8:67:6b:0c:4d:56:0a:f4:
         8d:e1:0c:73:76:40:8f:7f:8c:2c:35:f2:2f:c9:54:d7:50:60:
         3e:1b:3c:e7:7d:d7:ad:37:63:5b:93:d9:c4:c0:91:53:27:37:
         14:0e:02:56:51:fd:09:34:2c:40:74:73:d7:12:60:db:74:6f:
         e5:58:a0:73:d2:d3:19:c8:6c:a0:d3:3c:fa:5a:a9:71:1b:49:
         41:bc:e8:73:d5:85:54:c6:fd:bf:e0:e4:b9:b9:81:49:f2:4e:
         da:e1:02:96:ac:57:de:71:95:5d:c6:ef:23:f9:39:bd:87:88:
         2b:1c:a3:4f:39:16:20:c8:72:0d:d1:57:fb:ea:1b:0a:7a:50:
         57:71:64:cd:5b:a0:a3:bd:9c:48:21:21:2d:01:d6:5a:63:0a:
         8c:4c:44:61:ac:2b:3f:58:46:8c:17:6e:07:f3:b7:d3:ff:0c:
         e6:11:7f:9d:87:78:1c:7d:13:bb:b4:af:40:41:5b:24:22:74:
         c7:be:94:aa:b2:61:0e:5d:f5:cf:e4:3f:71:b6:41:5c:2c:93:
         b7:6c:ab:53:d6:b3:b9:3d:88:63:43:9e:d2:1d:8c:13:2b:cb:
         55:48:01:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:15 2025 by rpki-client