Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS36171.roa
File:                     AS36171.roa (raw, json)
Hash identifier:          BC3kbgS5+KALK6IidfJF3G2mvAhzx1d84gyWLCRUBkI=
Subject key identifier:   9E:19:0D:07:D7:CB:04:9F:2C:E2:F7:B8:55:82:DF:8E:3A:88:83:11
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       119657DC6DB1EF0371375F8671324A0EFC61C47A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS36171.roa
Signing time:             Mon 17 Aug 2026 12:16:18 +0000
ROA not before:           Mon 17 Aug 2026 12:11:18 +0000
ROA not after:            Mon 16 Aug 2027 12:16:18 +0000
asID:                     36171
IP address blocks:        157.254.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:96:57:dc:6d:b1:ef:03:71:37:5f:86:71:32:4a:0e:fc:61:c4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 17 12:11:18 2026 GMT
            Not After : Aug 16 12:16:18 2027 GMT
        Subject: CN=9E190D07D7CB049F2CE2F7B85582DF8E3A888311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:ea:0b:13:f1:92:77:bc:f0:8f:7b:01:e5:
                    db:50:96:a4:16:59:2c:18:f9:26:24:75:36:56:e2:
                    38:43:62:b0:e4:50:97:fb:16:51:c2:eb:5a:d8:4f:
                    25:b3:af:15:e9:55:33:77:2e:b3:3c:1c:ab:6c:c7:
                    58:60:94:fa:51:54:94:22:b8:b1:2b:76:1b:32:bf:
                    83:a3:b0:01:c8:56:96:84:80:17:68:54:59:c9:b5:
                    ae:7f:65:c7:d6:69:94:23:d1:ea:36:55:30:51:31:
                    71:6c:12:7d:ec:0d:22:3d:dc:5d:b0:c1:db:09:b5:
                    99:9f:2d:e3:07:c8:c7:63:46:8b:43:f8:40:56:8e:
                    2d:c3:fb:e2:f9:34:e9:05:51:b7:12:3c:d4:08:7f:
                    7d:98:77:34:6c:dd:1e:ab:33:3e:62:9a:3b:e6:94:
                    a9:d2:b4:1e:f9:90:14:0e:18:91:4c:ef:81:65:b4:
                    29:cd:81:58:ee:95:9b:a4:ba:95:f8:d6:8f:22:96:
                    48:e8:01:c5:63:ec:9c:44:0e:b2:86:11:95:e3:6f:
                    57:0e:16:36:ba:62:e3:a4:bb:da:45:44:76:3b:19:
                    1d:db:c5:b0:29:7a:e0:42:6f:cd:f1:cb:36:5a:11:
                    d1:11:1b:8d:f8:85:4c:d0:ab:86:aa:fb:e9:fd:46:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:19:0D:07:D7:CB:04:9F:2C:E2:F7:B8:55:82:DF:8E:3A:88:83:11
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS36171.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:59:88:05:d4:fa:72:bb:2b:c3:f8:53:29:9f:00:1b:9d:b4:
         9a:b8:3d:88:15:4c:9c:e7:2e:ec:0c:ea:50:13:2b:a1:f7:54:
         fa:25:f7:5f:f7:c1:e4:ca:7c:76:5e:33:6b:be:f4:81:ca:c1:
         ab:f3:94:20:04:77:81:1a:aa:8e:80:ce:5a:82:90:65:ca:d6:
         0e:a8:89:35:f5:11:87:14:38:d3:16:e4:a6:be:84:03:37:04:
         73:8c:18:c9:8c:37:d9:d1:57:0d:8b:25:e8:34:ee:c1:1b:7d:
         c6:56:f3:36:91:1a:2f:01:ae:74:89:34:f8:25:87:13:e6:db:
         ab:09:b4:e0:f3:df:2e:dc:2c:c7:88:2a:f8:04:40:a8:1e:57:
         5c:9f:b8:42:13:f2:bd:13:36:cd:20:e7:c9:7e:2d:9a:5c:9b:
         d8:2f:b7:e7:fd:f1:c0:1a:9a:2a:59:6f:8f:57:cc:74:e7:bb:
         c8:bd:06:0e:4f:86:e7:b4:fb:5e:2e:ce:c0:f8:a0:6d:a5:bb:
         8a:bf:06:bd:8d:5d:8a:3d:82:76:9e:fd:af:4a:38:f1:e7:6c:
         eb:f4:c1:f5:d9:6d:96:3f:c9:ce:4c:33:5f:98:ca:92:42:42:
         c7:f6:3c:a6:da:8b:96:c5:4d:94:0d:67:65:38:5b:1f:db:41:
         95:06:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 13:19:56 2026 by rpki-client