Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS30088.roa
File:                     AS30088.roa (raw, json)
Hash identifier:          py1/YIZylA3os/SYsZf3UVWTP6gmbbWkALItzUOJXfI=
Subject key identifier:   79:8C:4E:3B:B7:97:01:87:68:9E:56:32:4F:CC:39:A7:E3:67:81:F0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5331F61B3D7EC7D89B35DDCB27101EDCEADF833C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS30088.roa
Signing time:             Tue 10 Nov 2026 10:24:51 +0000
ROA not before:           Tue 10 Nov 2026 10:19:51 +0000
ROA not after:            Tue 09 Nov 2027 10:24:51 +0000
asID:                     30088
IP address blocks:        157.254.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 06:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:31:f6:1b:3d:7e:c7:d8:9b:35:dd:cb:27:10:1e:dc:ea:df:83:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 10 10:19:51 2026 GMT
            Not After : Nov  9 10:24:51 2027 GMT
        Subject: CN=798C4E3BB7970187689E56324FCC39A7E36781F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:73:87:d6:81:2a:2b:49:92:0b:9f:6d:90:b3:
                    e1:64:11:00:cd:b9:59:b2:86:f0:a7:b4:5a:e7:20:
                    5c:4b:87:e7:31:71:27:48:23:61:e8:a6:68:42:f4:
                    0f:ab:a4:d4:18:66:01:16:49:61:56:08:6f:5e:c1:
                    48:85:29:e7:25:53:96:7e:cb:46:15:c5:ed:8a:7a:
                    e9:66:e2:4f:33:d8:0e:3b:b1:34:41:bc:05:c3:de:
                    69:cf:fa:8d:fd:c1:36:df:8b:31:d3:32:c4:37:9a:
                    fc:a0:c7:bf:1d:bc:8a:7e:9a:62:00:9f:04:f5:82:
                    94:fd:8c:28:d2:2d:8c:54:a9:34:42:ad:ac:60:ea:
                    95:be:9a:88:07:7f:4a:d6:10:d8:6f:fb:a7:b4:2a:
                    a9:da:60:9d:1c:a9:a7:ec:8d:eb:4f:c9:92:c0:f5:
                    f6:0a:03:e2:d2:f8:75:45:d5:55:0b:a3:31:6e:95:
                    7c:58:ab:3c:1a:42:f5:c9:ed:14:c6:8a:21:37:7e:
                    a0:d8:c9:79:d5:54:07:a2:a4:3d:70:e8:c5:b5:e0:
                    89:64:2a:0a:c0:21:de:16:db:5f:8e:02:9e:03:56:
                    4a:d3:a7:c4:9e:43:9b:83:85:26:52:3b:3e:ec:06:
                    0d:c3:f3:ec:88:d0:30:c5:e0:df:f9:9f:be:41:da:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:4E:3B:B7:97:01:87:68:9E:56:32:4F:CC:39:A7:E3:67:81:F0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS30088.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:05:90:6f:02:ef:2c:d3:b5:a5:c7:a7:93:9c:22:20:43:d8:
         36:99:e6:46:0e:6a:e2:de:a3:6d:10:f6:18:92:21:07:1a:55:
         37:51:9b:60:b8:ff:92:35:92:6f:b2:32:d1:2b:74:97:9d:7e:
         cf:2b:5e:50:eb:36:76:6a:e2:b1:2d:7a:01:e5:1b:02:5f:44:
         6b:f5:c9:90:9f:66:8f:30:f3:0f:45:e9:29:11:14:85:e5:2e:
         23:e6:7d:cb:81:22:28:05:41:b7:9a:ee:63:d9:6f:2a:77:e6:
         f4:14:b1:53:7c:96:62:50:07:1a:25:1d:4f:4f:ef:7d:1b:85:
         13:66:0f:00:00:82:6a:44:48:86:d8:57:5b:0a:0a:3b:e9:8f:
         9f:ff:bd:7a:ce:e5:28:97:d9:8e:d8:92:83:8c:f2:7b:61:91:
         c9:27:e9:9e:b8:a7:32:52:6c:be:5a:03:c0:3e:ee:7e:dc:b7:
         1f:91:f7:ed:db:06:2e:b7:b2:93:40:4c:9c:c9:b7:50:86:3f:
         f9:56:2a:18:cf:7d:f4:df:7a:13:40:6b:3d:45:dd:7a:55:46:
         0b:83:32:28:5c:42:0a:de:dc:51:05:ef:15:70:0f:87:e5:f2:
         f8:4c:a9:93:fe:ff:20:ae:ea:36:7b:90:55:91:3c:26:cb:1d:
         be:7c:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:05:02 2026 by rpki-client