Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25846.roa
File:                     AS25846.roa (raw, json)
Hash identifier:          7T4g2IFd+VCkJtl1FBFCxLhUIP4ArnflN2JmF3M+GcQ=
Subject key identifier:   D4:46:5E:C6:9F:AD:89:18:D0:BF:FE:A5:8D:B6:00:D3:52:8C:13:55
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       55E841F44A8E337B2AA31E98BCF40C3254B2D807
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25846.roa
Signing time:             Tue 13 May 2025 15:38:23 +0000
ROA not before:           Tue 13 May 2025 15:33:23 +0000
ROA not after:            Tue 12 May 2026 15:38:23 +0000
asID:                     25846
IP address blocks:        157.254.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e8:41:f4:4a:8e:33:7b:2a:a3:1e:98:bc:f4:0c:32:54:b2:d8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 13 15:33:23 2025 GMT
            Not After : May 12 15:38:23 2026 GMT
        Subject: CN=D4465EC69FAD8918D0BFFEA58DB600D3528C1355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:73:0c:af:8f:52:db:ba:90:ec:ed:c1:06:
                    96:38:f9:8c:91:68:18:24:00:ef:b4:c2:ae:47:4e:
                    6a:67:6b:b1:c1:42:9b:42:92:0f:bf:42:3f:cf:b4:
                    d8:f1:66:25:6a:2d:38:45:10:ca:ac:a5:b2:10:0f:
                    a2:4d:61:db:98:e6:9b:89:2c:3b:81:49:6e:c8:70:
                    42:06:68:d3:04:52:6e:ca:02:0f:12:dd:f2:f3:ff:
                    19:c7:20:44:2e:71:4a:c6:2d:cf:a9:da:e0:c5:97:
                    0c:4f:e9:58:39:fb:a5:13:16:76:b0:60:ac:25:68:
                    dc:b5:b1:c7:13:27:1c:d6:1c:df:c8:47:19:f0:54:
                    ac:e4:2d:64:de:55:41:1f:7a:94:a6:d9:84:1d:7f:
                    b5:03:7e:7b:48:3f:59:f5:7c:1d:1b:9c:3b:e9:17:
                    b9:70:df:9e:17:c0:6d:0f:4a:2e:a9:c3:65:14:49:
                    cc:46:6e:8e:29:30:7d:8f:3c:06:61:5b:06:35:6e:
                    56:e2:9a:36:5a:34:61:68:8e:b1:6a:12:f1:aa:8b:
                    b7:e8:96:ee:01:b2:a5:a7:1a:a8:7d:a7:d5:fb:2e:
                    de:b7:d7:53:a0:72:56:79:ff:87:6c:80:bf:83:1a:
                    18:19:2b:d5:2e:55:42:a3:66:8f:4b:29:3d:cc:ca:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:46:5E:C6:9F:AD:89:18:D0:BF:FE:A5:8D:B6:00:D3:52:8C:13:55
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:2d:a3:8c:72:15:fc:b2:2c:04:77:2f:3f:30:36:2c:f0:
         6a:06:44:63:9c:59:bf:6b:84:ae:ba:9c:7b:2f:ea:a5:e1:de:
         3e:2a:1d:58:00:ed:c6:df:8e:b3:2e:fc:2c:0b:bc:d8:68:4f:
         b5:a8:50:60:b6:5b:82:28:e1:39:0f:eb:40:8d:62:20:27:7f:
         2b:2c:03:ff:5e:23:84:41:b0:3f:4e:2b:5f:d8:34:8b:d1:dc:
         a1:67:4f:7a:58:21:94:dc:9a:54:cc:ac:23:51:34:24:14:d6:
         46:0c:bd:38:62:15:9e:e7:ed:c6:58:71:d0:e9:cd:33:32:75:
         a1:b0:00:d2:4f:9f:9e:b3:21:3c:36:29:ec:58:69:a1:59:6e:
         5d:eb:ba:d6:0e:16:72:1d:c4:a9:29:55:db:2d:6d:01:72:20:
         7d:3d:b8:a0:84:30:eb:60:42:6a:ec:7b:43:69:f8:a4:a1:6b:
         81:15:ba:e8:9e:a6:86:38:90:53:df:4e:87:c5:91:05:ed:53:
         d7:f2:ab:b2:4e:52:18:37:c6:d9:f1:81:e2:94:04:0b:9e:46:
         68:ae:2e:29:b9:92:59:cf:26:db:58:2a:c4:f8:25:a9:0a:0b:
         29:8f:98:b9:e0:7a:8b:e2:19:44:50:86:8d:04:85:1a:3e:bb:
         6d:83:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:35 2025 by rpki-client