Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS204966.roa
File:                     AS204966.roa (raw, json)
Hash identifier:          VoXqtlefHdm0m1g5Yl5t/5O3PyxK5W/CgE6NGUbZMyg=
Subject key identifier:   12:22:02:69:16:F4:BA:86:5E:B7:F4:9D:F8:C6:DD:24:AB:42:C5:67
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       75F9E796F0018D63B32843AA5A21008B14857F93
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS204966.roa
Signing time:             Mon 07 Sep 2026 17:09:43 +0000
ROA not before:           Mon 07 Sep 2026 17:04:43 +0000
ROA not after:            Mon 06 Sep 2027 17:09:43 +0000
asID:                     204966
IP address blocks:        157.254.130.0/24 maxlen: 24
                          157.254.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 10:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:e7:96:f0:01:8d:63:b3:28:43:aa:5a:21:00:8b:14:85:7f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep  7 17:04:43 2026 GMT
            Not After : Sep  6 17:09:43 2027 GMT
        Subject: CN=1222026916F4BA865EB7F49DF8C6DD24AB42C567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:38:26:19:9e:a2:c1:90:08:5b:66:d5:3e:
                    e8:0c:8d:8e:ec:04:53:3f:ea:cb:5f:6c:b9:bc:1d:
                    f7:12:96:6e:36:cb:ae:8e:32:cf:da:61:13:bb:f7:
                    cb:6d:f9:f2:1f:e6:51:3a:85:07:de:3b:15:d5:13:
                    3a:19:9f:6f:24:68:24:d1:06:ed:eb:db:bf:24:65:
                    7b:01:b0:c3:aa:a3:61:4a:82:dc:72:cc:f4:22:76:
                    7e:d4:5e:30:48:f7:5c:64:37:f3:e4:05:47:ea:d3:
                    ab:5f:4c:ae:87:eb:32:36:eb:88:b7:fd:8b:39:18:
                    e9:18:57:99:18:ae:fd:e9:97:e7:42:fb:ca:e2:90:
                    32:5c:fb:9a:99:20:59:3e:1e:d8:d1:91:30:bd:f2:
                    0b:bf:9a:ae:60:dc:b1:67:13:3c:26:18:72:9a:9d:
                    97:6d:59:f4:5a:8e:65:6c:6b:a4:4f:c0:07:d2:47:
                    c5:e6:88:cf:03:23:80:67:b9:9f:55:f3:41:65:d0:
                    8f:94:15:5d:bd:56:83:14:a6:70:0f:d4:85:4c:81:
                    7b:21:cb:c5:a3:b5:71:c7:e6:c4:b9:48:34:70:f4:
                    8f:bd:4c:f5:89:45:2a:12:3c:4f:05:6e:22:2b:39:
                    ac:fb:29:9f:7e:ac:51:5d:c5:f3:15:0b:72:65:1f:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:22:02:69:16:F4:BA:86:5E:B7:F4:9D:F8:C6:DD:24:AB:42:C5:67
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS204966.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.130.0/24
                  157.254.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:c7:95:51:3a:bc:21:c9:3f:f7:ff:8d:38:4d:a1:0b:24:
         70:68:01:5b:f1:49:b7:3f:07:2d:4a:23:6b:90:29:68:a0:bc:
         7a:c5:98:30:0b:03:16:ab:52:24:11:60:e2:65:13:b3:c8:48:
         2b:18:65:e1:e6:72:2c:a1:3b:37:6c:87:9f:f6:6b:7a:da:88:
         2d:ca:cf:93:eb:ee:e1:2c:86:62:64:45:33:2f:e8:92:85:c8:
         58:2e:f1:5c:5b:fc:e8:27:b7:26:ca:2b:04:95:a1:b9:89:d7:
         8a:3e:3f:a9:6b:3d:07:57:38:b0:0a:82:f1:2a:9a:5b:5b:8f:
         53:d0:78:6e:c7:41:35:77:e3:8f:83:35:4f:42:8a:f6:19:69:
         b0:df:37:ff:ed:58:7b:5e:de:61:45:f9:b6:92:f1:93:81:79:
         91:e6:bc:eb:40:32:7a:cd:6c:60:27:3a:27:1f:34:e5:07:45:
         fb:ac:c0:28:bb:05:4d:f8:4a:0a:40:ff:e5:ad:53:50:ba:d7:
         32:10:d3:7c:5e:63:04:02:ad:a8:2b:c0:1c:4f:64:ca:21:88:
         fb:03:7d:7d:26:c6:9b:30:a1:f2:73:19:f2:b2:68:2b:ad:8e:
         03:aa:d8:0f:e6:47:63:0b:f5:64:c9:0c:50:40:ea:f5:a2:fa:
         21:b8:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 14:38:57 2026 by rpki-client