Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS208504.roa
File:                     AS208504.roa (raw, json)
Hash identifier:          X0Z7/ewC+3Z99CmyNY2D1FK9lelDPNJazL02dXdxcWE=
Subject key identifier:   B0:BD:67:8A:B4:19:F7:A3:F5:D8:6D:85:04:EC:F6:C4:8E:8A:45:2A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       160686137981385FFE4CB60732AE3D16253C214C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS208504.roa
Signing time:             Wed 22 Apr 2026 19:54:42 +0000
ROA not before:           Wed 22 Apr 2026 19:49:42 +0000
ROA not after:            Wed 21 Apr 2027 19:54:42 +0000
asID:                     208504
IP address blocks:        157.254.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 13:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:06:86:13:79:81:38:5f:fe:4c:b6:07:32:ae:3d:16:25:3c:21:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 22 19:49:42 2026 GMT
            Not After : Apr 21 19:54:42 2027 GMT
        Subject: CN=B0BD678AB419F7A3F5D86D8504ECF6C48E8A452A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:a2:fc:9c:6a:43:f8:51:5a:13:5f:c0:71:
                    f5:d9:5a:c1:38:c7:d4:53:62:29:0a:a1:38:19:5e:
                    19:e7:83:af:ef:3d:7c:27:bc:96:db:aa:09:5e:68:
                    63:5e:ae:bb:a3:d2:33:5f:cf:18:98:cb:08:ac:c9:
                    76:96:eb:42:cf:5d:ca:b4:02:f3:73:d4:ad:03:23:
                    47:94:3e:e0:89:84:4a:d7:f3:07:1c:a5:26:f4:37:
                    74:af:3c:f7:94:30:32:17:24:8c:87:62:6e:8b:fb:
                    60:09:27:52:4a:10:f6:38:44:b7:cc:0c:ae:91:98:
                    4d:6c:b4:8c:3e:2d:c9:c1:af:32:ad:1e:24:e0:15:
                    4f:98:1d:fc:fe:49:39:5f:8a:b3:0c:f4:3a:76:8d:
                    5f:9b:b8:68:3a:b5:91:14:88:44:cc:8d:20:f0:69:
                    ee:e5:f3:0a:84:41:44:66:48:4b:26:63:1f:46:23:
                    8a:71:77:a7:c0:84:61:b4:5a:07:01:b6:e9:b5:14:
                    5a:89:8e:29:dc:6b:f8:0a:7e:95:ef:2e:a3:9f:2a:
                    17:f8:60:26:b4:8a:6e:b8:c3:9a:cb:48:3b:78:fe:
                    36:ea:df:ba:ea:e9:1a:29:e0:45:28:df:ff:28:d8:
                    d5:4b:e7:cb:57:a3:db:df:2d:b4:d8:c1:3c:db:8e:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:67:8A:B4:19:F7:A3:F5:D8:6D:85:04:EC:F6:C4:8E:8A:45:2A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS208504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:cb:6e:31:4c:39:99:a6:a2:ee:50:4b:29:19:12:52:09:7f:
         8c:48:66:76:a4:98:b6:ad:54:46:c7:44:3f:e9:0b:e8:f6:e1:
         57:fe:32:f2:36:cd:e2:77:99:dd:df:e7:17:9a:e9:bf:6c:73:
         64:de:98:de:18:cc:b9:cd:77:7d:6a:d2:fd:59:06:3a:65:da:
         6f:0d:bb:cd:fc:d7:4f:2d:ba:eb:c2:53:e8:df:05:38:e5:9d:
         81:07:c6:9a:19:4e:5d:6f:5f:b1:2c:57:85:44:e4:68:2c:72:
         32:54:6a:9d:8c:be:43:e9:66:90:f4:50:2c:25:30:52:3d:f7:
         0b:d8:6b:89:c3:1b:6e:5f:8e:9a:8e:7d:82:45:03:60:aa:7e:
         bf:fe:c6:4c:ea:ef:dd:ff:eb:2b:2c:94:11:f5:6d:3c:e7:31:
         9d:4e:f6:ee:e0:6b:e1:24:54:05:22:27:37:b4:76:e4:37:c5:
         18:f9:50:c4:46:23:07:76:df:8c:09:82:ac:3a:33:02:2f:da:
         88:62:42:56:29:8d:4d:c4:d3:73:c1:d7:06:3b:6e:71:87:77:
         de:72:63:90:ce:f1:f2:68:4b:82:69:25:4b:2c:25:4e:7f:e5:
         0e:79:69:f4:05:a4:95:c4:e0:aa:8c:e4:16:ba:62:3b:33:92:
         29:bc:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:52:33 2026 by rpki-client