Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214143.roa
File:                     AS214143.roa (raw, json)
Hash identifier:          x13DsBDxkxbhsCeVU7x7HyhiCOdsY2D5nH3dSQ9XZ2E=
Subject key identifier:   93:79:A2:AE:A6:18:D8:CE:45:16:D7:75:87:91:F4:00:40:36:95:35
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       41634FCCE9A8E195C9F70C918DB2442D372688A3
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214143.roa
Signing time:             Wed 07 May 2025 10:02:34 +0000
ROA not before:           Wed 07 May 2025 09:57:34 +0000
ROA not after:            Wed 06 May 2026 10:02:34 +0000
asID:                     214143
IP address blocks:        157.254.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 04:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:4f:cc:e9:a8:e1:95:c9:f7:0c:91:8d:b2:44:2d:37:26:88:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  7 09:57:34 2025 GMT
            Not After : May  6 10:02:34 2026 GMT
        Subject: CN=9379A2AEA618D8CE4516D7758791F40040369535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ae:4a:59:01:94:2a:a9:ba:7f:67:e2:85:b1:
                    45:1e:38:da:31:1f:65:dc:0a:6d:95:1b:72:d3:cc:
                    48:3d:72:54:fc:10:b8:66:d8:74:32:2f:33:bd:3a:
                    3f:d3:1d:bb:67:a5:98:fe:9e:fe:f7:62:84:0f:39:
                    70:39:45:57:e3:16:b5:40:2a:c1:10:f3:41:c4:4b:
                    5a:7f:e3:53:bf:6c:ee:e2:9e:f4:26:02:9a:28:de:
                    90:d7:d1:31:4d:b7:86:d8:0c:1d:f7:e9:3a:8a:ba:
                    3a:f9:5d:d0:18:cc:32:01:a6:20:fe:57:bd:cf:be:
                    00:83:a0:ba:e7:6e:b0:32:b3:9f:37:f3:4c:7e:68:
                    06:d4:35:4f:23:71:e7:df:78:6c:32:1a:d7:3f:54:
                    97:a9:98:d8:a4:8c:18:48:f0:28:7a:0b:5a:c3:06:
                    8d:e6:6a:70:99:6b:43:79:58:68:ab:42:45:2a:92:
                    b5:0c:33:9f:5d:cb:ec:79:f2:dc:b7:b2:84:62:1d:
                    01:53:94:bb:0a:c9:f6:10:45:b5:a2:43:91:b2:cb:
                    45:b3:e5:bc:a4:e9:6c:16:2f:f6:bd:c8:e4:fb:f7:
                    bd:c5:b4:7c:6b:af:fc:4d:12:5d:a3:35:43:52:49:
                    7d:24:f1:24:93:ed:6b:36:15:54:fa:0b:ef:5c:b7:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:79:A2:AE:A6:18:D8:CE:45:16:D7:75:87:91:F4:00:40:36:95:35
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214143.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:ac:91:40:7f:88:b6:8d:b0:d9:d1:7c:de:2b:74:ff:20:
         5b:de:32:43:f2:07:ed:94:12:99:0f:15:40:d5:a3:9a:76:f6:
         b1:04:82:ca:25:f6:45:55:b7:a5:9c:99:70:c7:c3:84:0e:7a:
         f2:5f:77:50:bc:65:40:6f:4e:fa:b2:24:9e:0c:f9:08:90:51:
         a2:05:75:4f:3e:e7:fb:aa:76:07:3a:fc:44:86:4d:cb:ca:fe:
         a1:cf:26:2c:e7:68:04:74:64:18:df:59:1e:18:bd:0c:2d:93:
         d8:80:06:89:8c:a5:20:2c:7c:84:91:9e:0f:dd:77:b4:79:92:
         44:5e:f7:43:40:d3:80:10:6a:a9:ce:69:12:bb:03:ca:19:6f:
         21:dc:ae:35:f2:76:ce:37:e6:21:27:67:7c:5b:d5:7a:e4:4c:
         91:27:54:61:6d:73:f5:38:fc:dd:7a:31:6e:99:46:88:0f:fb:
         12:66:d9:84:92:b6:e8:6b:76:5a:13:40:fa:9e:64:3f:9a:be:
         3a:8a:f1:8a:b7:e8:39:11:b4:92:36:cd:6c:69:42:2d:19:76:
         ae:da:70:70:3c:a5:12:f2:eb:a6:77:52:b0:b7:9c:66:75:95:
         cb:52:8a:26:7b:b6:4e:c8:76:0e:d6:85:16:d1:11:27:8e:fd:
         00:d3:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:00 2025 by rpki-client