Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272930.roa
File:                     AS272930.roa (raw, json)
Hash identifier:          ZnIOey11PzkAp32AVHsuvYYlrBjXJPvP7LYI6WLI4X0=
Subject key identifier:   5E:FA:41:E4:CA:8A:EA:34:05:E1:DF:AF:09:48:E4:7B:9A:E9:57:FD
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7165D89C7440160A7B62988F4EA9FF1CDD4DB1A2
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272930.roa
Signing time:             Mon 30 Mar 2026 16:28:10 +0000
ROA not before:           Mon 30 Mar 2026 16:23:10 +0000
ROA not after:            Mon 29 Mar 2027 16:28:10 +0000
asID:                     272930
IP address blocks:        157.254.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:d8:9c:74:40:16:0a:7b:62:98:8f:4e:a9:ff:1c:dd:4d:b1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 30 16:23:10 2026 GMT
            Not After : Mar 29 16:28:10 2027 GMT
        Subject: CN=5EFA41E4CA8AEA3405E1DFAF0948E47B9AE957FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:f3:46:88:18:a8:03:8a:b4:57:ac:c4:d7:
                    b1:cc:83:8f:2a:0b:20:ce:99:1e:f3:94:c0:a1:7c:
                    91:af:dd:63:4e:0e:c8:e4:ff:e5:41:21:ce:c1:2e:
                    4c:af:4c:3e:74:f4:f3:0e:de:7a:12:b3:87:13:bb:
                    e0:e8:29:6a:95:d9:a4:47:05:1d:df:6d:db:89:26:
                    9b:0d:2f:40:e4:a7:6a:4e:b7:69:02:6f:e5:8a:a1:
                    f7:25:fc:0f:81:a7:99:09:a1:65:9a:b0:d8:c0:5c:
                    10:9c:d2:11:30:92:8c:0f:2a:04:52:18:9b:14:2f:
                    00:e8:a3:e1:14:02:fa:0a:bc:35:d7:8d:06:f1:b6:
                    af:6f:61:6c:db:6a:2f:94:d0:3b:79:64:e2:8a:84:
                    ff:15:b5:74:86:1e:b3:d4:5b:c1:dd:6e:06:70:28:
                    96:87:f9:9b:40:81:c5:88:7f:67:3f:dd:bc:57:17:
                    1f:f7:34:b2:1a:01:ce:7f:e2:a0:29:22:69:d3:42:
                    d2:76:07:ce:ed:f8:6d:b7:85:84:c0:50:07:50:d6:
                    ac:89:cc:57:7f:b3:8e:ab:c2:88:03:d6:13:6b:42:
                    8b:90:84:94:63:64:e0:3e:32:96:4e:f9:dc:77:b8:
                    3c:32:fc:00:06:a9:c5:15:02:9e:81:20:1f:27:50:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FA:41:E4:CA:8A:EA:34:05:E1:DF:AF:09:48:E4:7B:9A:E9:57:FD
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS272930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:e1:6b:7a:b2:f8:d5:84:0d:13:53:f3:9e:6a:d8:b2:70:
         91:15:35:b3:6c:d1:3c:71:16:64:88:79:ec:e3:94:4b:c3:a4:
         6d:4d:17:33:10:81:91:45:bb:5f:e0:20:2d:76:dd:38:5b:fc:
         15:2f:6b:a1:d5:59:37:3b:c6:f3:e2:5c:53:ce:91:15:7c:4f:
         42:57:e7:39:c8:8c:43:c2:26:1c:19:70:f6:ef:ef:c0:71:0d:
         ce:0b:86:8e:04:97:97:1b:6b:50:7e:9d:79:a6:0b:a6:3b:ed:
         a0:03:eb:14:ef:4a:e9:e7:26:31:28:de:66:49:4c:f1:f2:e2:
         6e:a0:37:a9:b6:bd:1a:14:0b:5f:23:c3:79:9b:a9:43:0a:4a:
         25:e2:25:a1:86:ca:a0:71:db:ef:12:c2:ac:aa:6e:64:95:8f:
         2d:be:07:b0:83:32:d3:5a:c8:d8:e8:16:33:af:d3:ce:e8:1b:
         5f:6b:61:78:08:37:c6:8b:b2:70:68:91:73:5c:10:9d:8b:d5:
         c9:47:97:f9:49:55:4a:72:fa:86:36:cd:03:1f:a3:a3:d4:15:
         ab:b8:79:eb:74:32:af:61:51:b1:a4:f5:14:25:fd:98:35:44:
         10:44:37:19:4b:6d:5e:64:4e:af:47:b9:57:c3:aa:cf:3c:db:
         77:d9:a9:51
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUcWXYnHRAFgp7YpiPTqn/HN1NsaIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzMwMTYyMzEwWhcNMjcwMzI5MTYyODEw
WjAzMTEwLwYDVQQDEyg1RUZBNDFFNENBOEFFQTM0MDVFMURGQUYwOTQ4RTQ3QjlB
RTk1N0ZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVXzRogYqAOK
tFesxNexzIOPKgsgzpke85TAoXyRr91jTg7I5P/lQSHOwS5Mr0w+dPTzDt56ErOH
E7vg6ClqldmkRwUd323biSabDS9A5KdqTrdpAm/liqH3JfwPgaeZCaFlmrDYwFwQ
nNIRMJKMDyoEUhibFC8A6KPhFAL6Crw1140G8bavb2Fs22ovlNA7eWTiioT/FbV0
hh6z1FvB3W4GcCiWh/mbQIHFiH9nP928Vxcf9zSyGgHOf+KgKSJp00LSdgfO7fht
t4WEwFAHUNasicxXf7OOq8KIA9YTa0KLkISUY2TgPjKWTvncd7g8MvwABqnFFQKe
gSAfJ1BBhwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFF76QeTKiuo0BeHfrwlI5Hua
6Vf9MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzI3MjkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+2jANBgkqhkiG9w0BAQsFAAOC
AQEAFsXha3qy+NWEDRNT855q2LJwkRU1s2zRPHEWZIh57OOUS8OkbU0XMxCBkUW7
X+AgLXbdOFv8FS9rodVZNzvG8+JcU86RFXxPQlfnOciMQ8ImHBlw9u/vwHENzguG
jgSXlxtrUH6deaYLpjvtoAPrFO9K6ecmMSjeZklM8fLibqA3qba9GhQLXyPDeZup
QwpKJeIloYbKoHHb7xLCrKpuZJWPLb4HsIMy01rI2OgWM6/TzugbX2theAg3xouy
cGiRc1wQnYvVyUeX+UlVSnL6hjbNAx+jo9QVq7h563Qyr2FRsaT1FCX9mDVEEEQ3
GUttXmROr0e5V8Oqzzzbd9mpUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 06:30:16 2026 by rpki-client