Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS210347.roa
File:                     AS210347.roa (raw, json)
Hash identifier:          Net/4XOH4ksk68cx+dbfjy3Ln1W9jHAQEQbh2w/RgGg=
Subject key identifier:   4D:92:E3:BE:8E:BD:92:8A:14:68:72:AA:A1:D4:B8:BA:E7:6F:74:C1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3411CB10C67DFA52797AABEF3A36AD18B9783A7A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS210347.roa
Signing time:             Fri 05 Jun 2026 13:16:33 +0000
ROA not before:           Fri 05 Jun 2026 13:11:33 +0000
ROA not after:            Fri 04 Jun 2027 13:16:33 +0000
asID:                     210347
IP address blocks:        157.254.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:11:cb:10:c6:7d:fa:52:79:7a:ab:ef:3a:36:ad:18:b9:78:3a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  5 13:11:33 2026 GMT
            Not After : Jun  4 13:16:33 2027 GMT
        Subject: CN=4D92E3BE8EBD928A146872AAA1D4B8BAE76F74C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:0e:a8:34:d7:6e:2d:75:ec:c8:b5:ed:99:
                    37:2e:e5:a2:c0:63:db:68:6d:9b:8d:7b:e4:a9:cd:
                    c4:fe:96:f9:15:d8:9a:fd:3f:c3:8a:ad:b0:5a:bf:
                    a1:ee:6b:e3:36:d6:6b:44:84:d2:ab:6c:2d:04:ba:
                    82:cc:6a:3e:c4:ec:63:3e:1a:a2:1e:29:6f:5a:9e:
                    f2:75:3e:e8:86:69:3e:5b:63:ae:be:95:11:aa:45:
                    47:50:b6:c1:c8:3d:ef:11:79:07:71:d8:03:ac:31:
                    c8:3e:b5:b1:da:8d:74:36:19:05:ce:57:2e:5e:b7:
                    a2:f8:b8:c4:93:dc:5a:e9:b4:84:4c:12:d4:71:ad:
                    04:fd:d5:27:bc:6d:7c:33:e9:aa:b4:f6:d8:a0:ea:
                    ab:78:48:1b:40:06:43:6b:32:4d:07:3f:bd:0e:8b:
                    b6:3e:7f:a1:99:3e:da:2d:29:f1:d9:5b:85:ac:e6:
                    8d:b8:ab:b4:94:f0:4e:d2:0b:26:24:eb:bc:7e:c1:
                    d8:c6:21:97:a2:fe:d8:b8:30:b6:b5:75:94:2d:44:
                    58:4b:0a:40:f5:8e:98:1a:6e:f1:05:44:09:1c:f7:
                    14:8e:b9:53:4a:19:0f:fc:a8:48:d7:04:8b:38:b4:
                    4c:13:df:47:bc:b2:91:e5:ef:f2:fe:bd:2c:3b:53:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:92:E3:BE:8E:BD:92:8A:14:68:72:AA:A1:D4:B8:BA:E7:6F:74:C1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS210347.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:4a:db:06:d5:72:7b:6d:d6:b5:8e:dc:37:0e:81:03:da:a3:
         01:03:0c:1a:ab:2f:27:11:68:75:b1:22:cd:f5:aa:96:f9:40:
         b4:ae:f5:54:01:0e:91:e3:15:b6:da:65:ff:1f:bc:0b:c7:12:
         ad:ea:be:05:74:ab:1c:59:ff:93:b9:d5:cb:c3:ed:10:a3:14:
         0e:6c:ab:87:2f:2d:01:43:9d:6b:fb:8c:4a:b0:28:25:19:27:
         77:e7:55:14:48:8a:68:18:29:fb:25:50:73:74:70:5e:30:06:
         62:ad:c9:7c:17:0b:17:58:73:92:30:96:ae:63:7d:f0:4d:81:
         b4:3a:05:aa:f1:83:ac:14:ab:d7:ec:7d:ae:19:fb:7a:51:8f:
         dc:c0:ed:e1:0c:46:24:8e:a4:f7:0d:12:c2:86:74:8a:0b:5b:
         46:88:1f:c5:00:19:2b:18:fc:6d:20:6b:34:b1:57:e4:02:81:
         53:29:fd:79:72:18:d5:83:3e:66:2c:1e:e8:0f:5c:5e:59:d7:
         f3:38:70:f3:0c:ae:3e:88:bd:85:6c:51:f6:25:26:34:46:9e:
         5c:f1:f8:5f:d0:30:48:66:40:77:fc:8b:22:d2:04:2f:81:ae:
         9e:1e:48:17:40:ee:ca:0a:0c:51:86:a6:0a:67:a6:84:ce:4e:
         21:e6:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 19:55:50 2026 by rpki-client