Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS273196.roa
File:                     AS273196.roa (raw, json)
Hash identifier:          enNjYsKkFXzwG7s86pxtVEcy3MHG27r/GLgdmF9IuF0=
Subject key identifier:   A9:38:1A:E5:21:55:9F:13:55:70:69:C5:A7:FC:0E:9F:3A:3A:93:1A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6A728DF848DD780E3C6B94E7AF8C9783BDBCFDF8
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS273196.roa
Signing time:             Sat 30 May 2026 07:32:28 +0000
ROA not before:           Sat 30 May 2026 07:27:28 +0000
ROA not after:            Sat 29 May 2027 07:32:28 +0000
asID:                     273196
IP address blocks:        157.254.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 10:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:72:8d:f8:48:dd:78:0e:3c:6b:94:e7:af:8c:97:83:bd:bc:fd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 30 07:27:28 2026 GMT
            Not After : May 29 07:32:28 2027 GMT
        Subject: CN=A9381AE521559F13557069C5A7FC0E9F3A3A931A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:45:e3:ff:d0:70:3b:77:1d:16:b8:3e:a2:
                    84:59:d5:64:b3:b2:46:b9:b8:9b:da:d8:71:a9:07:
                    f5:4e:75:e7:d8:37:6a:1a:c5:25:4f:4d:9e:21:b2:
                    8c:ed:85:4d:83:61:41:d3:ae:d1:09:27:ee:94:33:
                    b8:b2:74:2b:16:76:19:7d:a2:95:1e:27:2b:dc:15:
                    78:e6:b7:48:71:5d:8f:1e:83:53:47:0b:eb:1e:92:
                    56:cd:ca:67:fb:ea:4e:47:50:52:bb:ed:cf:fe:74:
                    c4:85:0b:27:5c:ce:a7:dc:04:0e:f2:53:4c:10:72:
                    00:4c:8a:40:3c:89:b5:62:79:27:68:0e:9b:8d:16:
                    41:d1:98:33:1e:94:b5:c1:05:6c:f3:59:c7:12:85:
                    58:3f:1c:57:c7:c8:0d:dc:9a:de:46:4a:c1:05:2d:
                    cd:ed:79:d3:38:7d:c2:f0:68:d9:fc:c5:25:1c:cc:
                    1c:15:b0:29:91:b0:e6:22:a5:8a:cd:ef:95:7c:07:
                    96:81:45:2c:61:c2:97:cd:a1:e3:12:93:a4:e8:ad:
                    3b:17:d2:5e:4d:ae:22:09:77:de:cb:83:13:50:40:
                    a0:fb:3f:44:3b:41:1b:d6:e8:8c:74:58:f9:c9:9c:
                    40:d9:d4:1a:cc:8e:8e:54:da:1a:f4:6b:d0:a0:d9:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:38:1A:E5:21:55:9F:13:55:70:69:C5:A7:FC:0E:9F:3A:3A:93:1A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS273196.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:24:7b:f9:76:54:41:e9:1d:b3:dc:ad:46:8d:45:fd:36:
         95:d4:6e:f9:1d:57:00:d8:03:68:a0:54:3f:16:63:09:0a:b7:
         bc:09:47:8e:4a:4e:2c:b4:c8:00:c8:d9:1c:ad:22:c9:93:75:
         7a:4d:c0:01:c5:78:7e:5d:1b:b9:18:61:d2:3f:66:dc:d8:0c:
         db:f0:98:eb:9f:fd:c3:65:b9:11:31:6a:18:9e:38:ee:fc:55:
         bd:bb:55:2c:cb:2a:eb:9b:3b:0a:cc:ed:2a:f9:bb:26:7f:7a:
         67:20:db:3b:f8:a5:c5:31:2f:dc:3d:bc:c3:52:f0:b2:3a:ad:
         ab:cd:02:69:32:d6:a1:45:50:f1:2e:e4:29:ac:50:38:83:77:
         8f:81:6f:93:11:94:79:0d:89:62:53:78:07:82:a8:24:04:1e:
         2c:ff:9a:2a:0d:2c:12:0b:0d:9b:28:bc:27:48:d3:88:24:2b:
         9b:d4:02:20:cb:a6:77:ea:c5:4e:d6:cd:9c:19:8c:12:d3:47:
         ff:b0:a2:30:b3:6d:af:b9:51:56:5f:07:6d:6a:74:12:e9:d7:
         c3:ef:8e:9d:f8:50:60:5f:13:f5:01:ca:3b:d4:f6:80:50:4f:
         12:7c:18:4a:6b:5e:59:9c:85:7b:d9:c1:9f:79:5c:fb:02:a3:
         dc:37:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 19:43:38 2026 by rpki-client