Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          LlhJfvgO7oZz1+BuQOpqsbKsIs36DMSXGIoZcBOHAiU=
Subject key identifier:   D2:DE:A2:B8:4A:9C:B6:F9:32:72:8A:62:7B:72:A3:85:D4:DF:15:EF
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       04035B424AC5AB7AEF285A29D0ACABEB5A1C76FC
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa
Signing time:             Sun 23 Aug 2026 00:06:48 +0000
ROA not before:           Sun 23 Aug 2026 00:01:48 +0000
ROA not after:            Sun 22 Aug 2027 00:06:48 +0000
asID:                     396356
IP address blocks:        157.254.16.0/24 maxlen: 24
                          157.254.173.0/24 maxlen: 24
                          157.254.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 12:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:03:5b:42:4a:c5:ab:7a:ef:28:5a:29:d0:ac:ab:eb:5a:1c:76:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 23 00:01:48 2026 GMT
            Not After : Aug 22 00:06:48 2027 GMT
        Subject: CN=D2DEA2B84A9CB6F932728A627B72A385D4DF15EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:37:70:f6:c2:2b:95:1a:c2:fa:8c:e3:1a:
                    94:72:bf:e4:03:88:92:44:b5:c5:86:65:9d:d3:c4:
                    ea:d6:41:03:71:c2:73:3d:fd:2c:85:e2:b3:47:a5:
                    2a:d8:14:d6:48:9e:49:1b:49:fa:ee:0e:8a:e4:ef:
                    3c:32:93:27:87:71:a6:00:83:3b:47:c2:ba:e9:3d:
                    ad:73:38:31:56:91:07:e2:a8:4c:a3:b0:17:95:11:
                    59:af:c9:17:4e:b5:d9:01:30:12:79:c3:bd:ab:3f:
                    26:77:e6:8b:6e:70:c6:65:10:6b:c5:71:43:d9:12:
                    f1:95:b3:d0:95:f3:18:b6:03:53:10:25:91:f0:af:
                    aa:ed:4b:d8:74:20:f9:f1:96:7f:ee:fb:87:73:02:
                    6e:dc:2c:34:b6:c8:07:e1:72:28:7b:c1:4c:9e:74:
                    33:e5:ab:11:b9:88:b2:5a:11:54:1c:82:01:05:86:
                    b9:7c:4e:45:67:29:1a:24:62:58:5d:24:83:da:93:
                    61:0b:aa:ab:a3:b3:7d:7e:c4:04:0b:70:6e:cf:33:
                    5b:1c:0a:be:03:97:b8:da:38:21:32:a6:bd:13:ff:
                    cc:76:33:a6:33:19:f1:b1:c3:2b:57:2e:da:2a:9c:
                    6e:aa:4c:fe:77:95:aa:50:57:bb:5c:78:ff:95:c0:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DE:A2:B8:4A:9C:B6:F9:32:72:8A:62:7B:72:A3:85:D4:DF:15:EF
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.16.0/24
                  157.254.173.0/24
                  157.254.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:af:66:65:71:90:38:88:e7:93:cd:c0:19:ba:47:66:74:
         37:27:84:db:0c:c8:95:c3:21:c6:90:a1:57:6f:c4:e9:a9:dd:
         52:0d:25:4a:cf:7a:8d:56:51:0e:c5:1c:7d:76:fa:e2:23:30:
         8c:dc:89:43:30:8f:73:9a:cd:e6:ae:ab:9f:7e:d7:22:6e:eb:
         a4:f5:99:3f:c1:93:a9:cf:d9:aa:24:dc:50:2c:ef:e8:6f:ee:
         bb:f9:85:8c:8b:7f:60:6a:a7:b4:67:24:21:b3:8b:06:e5:f4:
         87:02:f2:44:00:ad:fd:1d:83:50:52:03:42:b8:3a:f3:5a:76:
         05:5e:0e:d9:13:12:e4:7c:52:10:cc:de:19:47:50:d0:dc:5e:
         1e:47:39:74:f3:96:c7:c5:86:c4:49:cf:d5:9d:2f:5e:23:39:
         2a:11:e5:c4:ee:1a:1a:f0:b8:6e:1c:1a:94:f4:d3:90:75:78:
         99:88:e2:4a:a1:d2:f8:8a:2a:e3:46:94:e9:48:b9:eb:fb:8f:
         0b:36:d7:88:8d:21:38:61:c2:8d:4c:b4:3a:47:9d:7a:56:c7:
         ab:32:c4:2b:1f:2d:9c:e9:e3:c3:a5:03:c8:a1:9a:6c:4d:5d:
         db:86:57:54:9b:db:a9:ab:e0:35:2c:87:d4:9b:66:9a:f3:e4:
         29:2a:db:8f
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUBANbQkrFq3rvKFop0Kyr61ocdvwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwODIzMDAwMTQ4WhcNMjcwODIyMDAwNjQ4
WjAzMTEwLwYDVQQDEyhEMkRFQTJCODRBOUNCNkY5MzI3MjhBNjI3QjcyQTM4NUQ0
REYxNUVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ43cPbCK5Ua
wvqM4xqUcr/kA4iSRLXFhmWd08Tq1kEDccJzPf0sheKzR6Uq2BTWSJ5JG0n67g6K
5O88MpMnh3GmAIM7R8K66T2tczgxVpEH4qhMo7AXlRFZr8kXTrXZATASecO9qz8m
d+aLbnDGZRBrxXFD2RLxlbPQlfMYtgNTECWR8K+q7UvYdCD58ZZ/7vuHcwJu3Cw0
tsgH4XIoe8FMnnQz5asRuYiyWhFUHIIBBYa5fE5FZykaJGJYXSSD2pNhC6qro7N9
fsQEC3BuzzNbHAq+A5e42jghMqa9E//MdjOmMxnxscMrVy7aKpxuqkz+d5WqUFe7
XHj/lcB49QIDAQABo4ICizCCAocwHQYDVR0OBBYEFNLeorhKnLb5MnKKYntyo4XU
3xXvMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAJ3+EAMEAJ3+rQMEAJ3+1zANBgkq
hkiG9w0BAQsFAAOCAQEAqaavZmVxkDiI55PNwBm6R2Z0NyeE2wzIlcMhxpChV2/E
6andUg0lSs96jVZRDsUcfXb64iMwjNyJQzCPc5rN5q6rn37XIm7rpPWZP8GTqc/Z
qiTcUCzv6G/uu/mFjIt/YGqntGckIbOLBuX0hwLyRACt/R2DUFIDQrg681p2BV4O
2RMS5HxSEMzeGUdQ0NxeHkc5dPOWx8WGxEnP1Z0vXiM5KhHlxO4aGvC4bhwalPTT
kHV4mYjiSqHS+Ioq40aU6Ui56/uPCzbXiI0hOGHCjUy0OkedelbHqzLEKx8tnOnj
w6UDyKGabE1d24ZXVJvbqavgNSyH1JtmmvPkKSrbjw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:09:29 2026 by rpki-client