Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          5wq200rwF9Rroh6cE8A5meHRMU5Tnj6Z9FYIjFcKxeU=
Subject key identifier:   29:E6:21:1E:CB:9C:51:82:07:0C:FF:C0:C1:C6:34:47:38:E8:99:BC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2177C5542BCBC7877173D5654AACC04A8161DBDA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS36530.roa
Signing time:             Tue 13 May 2025 11:16:47 +0000
ROA not before:           Tue 13 May 2025 11:11:47 +0000
ROA not after:            Tue 12 May 2026 11:16:47 +0000
asID:                     36530
IP address blocks:        157.254.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:77:c5:54:2b:cb:c7:87:71:73:d5:65:4a:ac:c0:4a:81:61:db:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 13 11:11:47 2025 GMT
            Not After : May 12 11:16:47 2026 GMT
        Subject: CN=29E6211ECB9C5182070CFFC0C1C6344738E899BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:5d:8c:68:33:cd:d9:6d:92:12:9e:94:98:
                    d0:c7:05:a4:8b:d3:0b:df:66:13:76:13:2c:37:ea:
                    13:e4:d5:ef:2b:57:a9:70:98:2d:41:cb:53:ab:ce:
                    22:15:67:70:12:09:16:10:5a:08:6c:ec:36:c3:d0:
                    2f:1a:30:3b:5a:fb:61:22:72:4d:40:83:06:5d:5b:
                    95:e0:bf:42:82:27:c7:14:f3:43:58:04:2e:97:71:
                    88:59:4e:0a:5d:3f:40:9f:ee:64:da:0a:bd:28:12:
                    5b:95:83:5e:65:0e:06:01:32:07:64:95:dd:8e:9e:
                    ce:ab:a0:c4:af:e9:cb:dd:0c:d8:aa:cf:5b:3a:88:
                    ff:18:86:3f:c6:f6:20:d8:49:b9:bd:bf:b2:0e:1f:
                    54:f0:64:f7:9b:7c:00:46:15:c4:39:e8:10:3c:20:
                    69:01:e4:44:76:bc:0c:eb:2d:67:7f:95:c8:11:1b:
                    d4:26:23:e0:ca:cc:aa:9c:49:88:c9:e2:79:2f:9a:
                    6f:ae:ab:f5:32:b9:da:2a:dc:15:b5:98:e5:6e:10:
                    b0:4a:3b:ad:4a:bd:19:45:aa:d5:65:8a:d6:3a:64:
                    a0:e9:d9:9b:2f:3a:0d:ae:51:83:d3:bc:e2:69:9f:
                    36:d9:cf:23:28:08:ce:25:8c:00:2e:cb:9e:09:e3:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E6:21:1E:CB:9C:51:82:07:0C:FF:C0:C1:C6:34:47:38:E8:99:BC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:86:a5:13:5c:9e:68:d2:75:c9:45:09:61:d8:28:98:ed:23:
         e5:cf:bb:95:bc:9d:72:73:cc:34:d1:ec:bd:fd:93:b6:59:d5:
         2d:6a:32:b2:11:d2:ab:8f:00:5d:9c:22:2c:e1:a8:e8:e2:d1:
         07:ea:ae:ec:ff:11:2e:98:8b:d1:82:78:0d:2b:2b:1d:94:38:
         4e:17:87:90:f7:e8:1e:4a:cd:65:bf:00:20:1b:4a:15:12:31:
         05:03:2e:bc:40:7d:38:21:ab:67:55:38:a2:3d:00:11:a6:b8:
         cc:56:07:28:f8:60:54:70:11:f7:53:f3:34:88:ac:fc:89:3c:
         42:f0:e1:0d:99:36:7e:22:b8:41:b3:8a:34:4e:13:a1:db:9e:
         18:b3:07:74:60:59:68:d5:38:5f:c2:10:db:a2:79:ee:6d:ee:
         06:1c:c5:40:6c:7b:d2:6b:d6:e2:35:93:6a:f3:02:51:2d:27:
         d5:d1:ac:a8:e1:43:d4:86:34:d2:72:95:01:87:a9:ef:7a:a3:
         d6:a2:86:17:ab:7d:a3:9d:7f:e0:45:22:4e:32:7f:e0:d0:7c:
         d1:55:11:49:da:5e:05:1c:34:36:fd:5d:24:53:97:12:3f:b4:
         dd:b3:ed:d9:dc:a7:d8:6c:46:b2:ac:8a:76:c4:61:7c:f4:92:
         f3:45:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:22 2025 by rpki-client