Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396982.roa
File:                     AS396982.roa (raw, json)
Hash identifier:          ziMVr6UjCJSkegSzNEunjgUyRm6ndPEtI1NsA4pXasM=
Subject key identifier:   A4:10:B1:23:04:E2:4F:85:D7:19:77:3B:7F:E2:57:D7:83:3F:3A:A7
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       417042CF18B616E2B8C1D4B25E1D827B37E4235B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396982.roa
Signing time:             Mon 08 Sep 2025 05:50:10 +0000
ROA not before:           Mon 08 Sep 2025 05:45:10 +0000
ROA not after:            Mon 07 Sep 2026 05:50:10 +0000
asID:                     396982
IP address blocks:        157.254.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 10:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:42:cf:18:b6:16:e2:b8:c1:d4:b2:5e:1d:82:7b:37:e4:23:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep  8 05:45:10 2025 GMT
            Not After : Sep  7 05:50:10 2026 GMT
        Subject: CN=A410B12304E24F85D719773B7FE257D7833F3AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:ca:19:c6:af:f6:7d:56:64:6d:d8:67:f4:
                    98:ec:96:1a:81:e8:21:5b:b4:09:13:f5:66:9f:cd:
                    50:35:92:e5:a3:6f:0a:e0:99:60:10:cf:ec:10:87:
                    bd:e4:cf:f9:c6:5b:84:89:a8:5f:43:28:a1:f4:1f:
                    6f:c9:86:7e:45:8b:4f:15:9d:68:7e:98:04:a0:7b:
                    9e:58:5a:42:65:ed:a2:be:62:da:49:11:ee:ce:7a:
                    e2:f3:c8:fb:81:bf:99:5c:b6:4d:b5:e7:f2:c6:26:
                    d0:c8:92:aa:3d:16:84:04:11:20:9a:c2:96:69:ff:
                    56:17:a7:8c:9d:b2:e7:d7:3c:29:06:d9:1b:08:f1:
                    05:d2:1b:e6:40:42:6c:3b:64:42:a3:13:26:f0:c4:
                    7d:6d:5d:70:db:19:f1:7b:4c:09:d1:2c:83:45:c8:
                    f2:73:ce:59:1f:92:11:1f:2d:d4:47:0d:82:04:69:
                    08:11:06:05:fa:3d:1b:ae:30:bf:8c:9c:4d:71:a1:
                    6f:77:5d:57:5d:42:4f:46:ac:bc:27:38:f3:7b:7b:
                    aa:61:8d:6d:30:69:73:b5:29:df:81:1e:61:6a:0c:
                    4c:2a:09:d0:b7:25:c1:52:06:33:74:7d:f3:3a:19:
                    3c:9c:54:04:e4:ae:1d:ee:3e:7e:02:48:5c:e4:cf:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:10:B1:23:04:E2:4F:85:D7:19:77:3B:7F:E2:57:D7:83:3F:3A:A7
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:ac:1d:29:5e:64:11:32:67:d2:6f:05:a2:32:07:30:8c:
         13:d9:80:9d:a0:23:3c:a7:d8:05:4b:6a:91:a6:03:f0:29:eb:
         b2:d4:5a:52:3e:46:17:5e:ce:75:e6:95:69:e8:12:dc:7f:3f:
         31:a1:b0:ed:a1:b9:21:97:a7:59:2f:cb:b6:a1:86:cd:54:b6:
         b6:59:e1:3f:6d:30:60:fe:9d:ec:9c:ee:ea:89:f5:2d:02:e3:
         9d:89:01:dc:33:b9:ea:16:64:01:00:eb:4c:a2:a3:f6:e1:b7:
         53:7c:d8:78:7a:8e:3f:5a:98:ad:43:7b:7c:a6:87:f7:0a:a5:
         03:f9:92:4e:a3:e5:1c:06:27:7b:82:1d:44:4f:e0:27:7c:25:
         e7:01:f4:c4:d8:78:17:f5:98:09:74:2a:37:18:f9:95:ac:8e:
         be:17:f0:c5:3a:6c:a9:db:b9:de:85:e7:f1:b9:49:c1:14:4b:
         9d:28:be:41:84:da:f5:1a:25:d7:91:0d:62:e2:be:ec:54:bd:
         e8:08:a1:c9:ab:d0:c1:77:95:e8:78:7c:90:06:25:f9:9b:34:
         ab:c5:eb:ce:a0:36:7c:b5:bf:8d:a7:92:2a:33:f4:ce:43:1d:
         86:b6:fc:1b:56:db:53:68:5c:19:90:eb:66:91:32:31:4e:d5:
         c6:d9:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:46:48 2025 by rpki-client