Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
File:                     AS214174.roa (raw, json)
Hash identifier:          Zl6Jc+PRRp8iwAn1JHMoVgqkymBsLs9gFfB+A9cQxZI=
Subject key identifier:   E3:DE:A2:AE:FA:66:DD:48:18:7B:41:24:56:C0:41:8A:46:E0:0F:57
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       333F5EBEA224516F4099CDF5E11F193AD7047DFD
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
Signing time:             Tue 02 Sep 2025 06:15:12 +0000
ROA not before:           Tue 02 Sep 2025 06:10:12 +0000
ROA not after:            Tue 01 Sep 2026 06:15:12 +0000
asID:                     214174
IP address blocks:        157.254.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3f:5e:be:a2:24:51:6f:40:99:cd:f5:e1:1f:19:3a:d7:04:7d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep  2 06:10:12 2025 GMT
            Not After : Sep  1 06:15:12 2026 GMT
        Subject: CN=E3DEA2AEFA66DD48187B412456C0418A46E00F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:fd:30:bf:83:09:85:52:bd:5b:0c:ef:6e:
                    de:21:1f:f4:9d:54:9d:00:a0:92:e1:91:d0:10:29:
                    45:df:04:02:6a:7f:cb:f8:ae:21:08:09:15:c5:3b:
                    24:4c:7a:57:7b:a5:ad:c1:00:03:cc:7a:c1:9f:04:
                    71:fe:72:90:b2:67:0a:46:af:fc:af:07:53:bc:fd:
                    38:8b:27:07:32:30:13:74:3c:0a:a7:b4:51:b8:dc:
                    68:d4:62:09:56:4d:7f:d2:ea:f7:4c:24:af:80:54:
                    57:d7:a1:fd:84:4a:70:b9:60:63:e5:44:8d:2c:33:
                    08:3f:16:bf:9f:32:7c:76:7d:6b:ad:88:56:63:ec:
                    3f:de:bf:88:c1:bc:88:b0:31:e2:c9:ab:a0:9a:8a:
                    4e:00:9a:84:1d:14:78:2c:a9:7b:58:83:28:9c:ab:
                    2f:60:33:6f:1f:54:f3:d4:c8:c7:77:ac:fc:c5:71:
                    68:7e:ad:27:dd:cd:a4:f9:db:a4:40:d3:99:39:55:
                    f9:0f:45:83:8d:e3:11:f6:b3:0e:c7:a1:dc:6f:bf:
                    4b:34:c5:87:6d:ee:3a:73:d0:da:a1:3f:d4:1a:f3:
                    71:46:87:e4:5d:89:06:f5:50:19:b2:96:e0:a2:8f:
                    95:8d:09:b2:b7:4c:b0:3b:be:90:1c:f0:f8:a0:4a:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:A2:AE:FA:66:DD:48:18:7B:41:24:56:C0:41:8A:46:E0:0F:57
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b7:7b:a4:54:12:78:36:25:8f:7b:2c:e4:31:d9:6c:4e:3f:
         a7:81:7e:dd:23:3f:cd:22:48:84:37:6a:0e:cd:89:f6:36:94:
         95:c6:02:88:af:61:72:9d:13:59:b5:ff:49:1b:c7:86:ae:aa:
         a5:36:63:e9:ed:85:db:12:1e:83:07:6f:eb:14:94:62:a1:51:
         7b:f2:7f:42:3a:87:b0:65:df:51:98:6f:82:be:ca:07:50:d2:
         3f:6c:c7:26:91:76:29:b6:b3:53:3e:ba:53:fb:fb:ac:37:cc:
         c8:9c:cf:14:f3:eb:15:de:f6:f4:62:56:87:a4:2e:76:7a:0e:
         7d:4a:b8:5b:26:7e:84:8c:2d:f8:92:1e:9d:35:0c:ab:82:83:
         eb:7c:61:4a:50:2f:c9:b8:7c:f9:8c:93:c4:94:0d:f1:45:c8:
         a6:b9:81:26:ea:a4:e0:ff:71:14:fc:14:df:8d:21:bc:28:58:
         f5:6e:80:3a:71:17:c0:32:26:e2:c9:b5:b3:d7:40:c9:13:6f:
         2b:f1:2e:79:06:41:1a:20:d0:d8:1f:76:cb:63:27:bc:53:43:
         d9:54:54:2a:c1:b1:3e:bd:ff:e8:ab:14:e3:7e:54:a8:fe:3d:
         98:49:e8:44:96:28:4a:b8:57:a2:33:3b:46:3a:87:87:6d:83:
         d1:11:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:45:03 2025 by rpki-client