Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          DM2fPQiHOdkdZzcPPneTb0gMnyf7geVOXzG0fS4yios=
Subject key identifier:   79:E8:0B:C0:CB:CD:B2:02:8D:BD:F3:19:43:B9:78:B3:83:63:A6:09
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6F9B5C5851DA4D52C118407FD7B0EFFA4E674953
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
Signing time:             Thu 13 Mar 2025 09:28:26 +0000
ROA not before:           Thu 13 Mar 2025 09:23:26 +0000
ROA not after:            Thu 12 Mar 2026 09:28:26 +0000
asID:                     397423
IP address blocks:        157.254.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9b:5c:58:51:da:4d:52:c1:18:40:7f:d7:b0:ef:fa:4e:67:49:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 13 09:23:26 2025 GMT
            Not After : Mar 12 09:28:26 2026 GMT
        Subject: CN=79E80BC0CBCDB2028DBDF31943B978B38363A609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:54:61:cb:6e:23:86:b4:06:65:24:46:d8:
                    0b:ff:2c:6b:fb:c3:1a:03:a4:0c:25:ae:82:24:f1:
                    14:14:15:c6:bc:28:36:5c:47:66:d6:0e:e5:b4:e9:
                    fb:3b:d7:76:85:59:1a:87:12:9c:6d:25:e3:60:fd:
                    00:f8:30:55:4a:b6:28:23:60:1e:39:3a:58:92:2a:
                    9f:93:f0:aa:56:97:ee:17:c7:26:54:b3:c4:4e:df:
                    54:40:d6:10:73:5e:3a:b0:13:d1:4e:e7:89:77:b6:
                    a1:fe:27:f3:06:fb:5c:64:f8:35:77:ba:a6:d8:8f:
                    75:bf:0d:c5:ab:c2:db:e0:f5:24:ee:83:28:67:bc:
                    4f:7b:c7:42:7e:96:20:df:86:cd:ea:eb:7c:66:3e:
                    2e:4b:2d:4e:7a:ad:ff:3d:38:4b:7a:79:d3:29:e4:
                    96:bc:6e:72:08:8d:cd:c4:d6:7b:e8:73:5b:84:e5:
                    af:54:1b:d9:40:40:ec:2a:d7:a4:3a:19:ef:eb:d8:
                    b2:20:cf:86:a8:64:f3:71:b4:59:08:08:cd:2a:1a:
                    db:8a:fc:ac:8e:ec:9d:98:98:ff:ad:ae:d1:8d:91:
                    36:77:9e:32:be:3d:e4:06:7d:03:9f:91:e9:23:07:
                    f8:4a:fa:75:70:13:45:f4:0c:28:1b:45:f1:fc:e8:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E8:0B:C0:CB:CD:B2:02:8D:BD:F3:19:43:B9:78:B3:83:63:A6:09
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7c:ce:33:62:a6:7f:cf:cd:ed:08:30:ec:79:06:b8:2e:75:
         90:f6:e1:eb:f7:b4:38:90:a5:28:cb:80:64:ef:73:f7:00:aa:
         c4:d7:44:d4:1b:81:df:2d:65:46:54:80:3b:25:f1:af:2f:e9:
         74:96:6e:95:d1:e5:f6:c6:1e:96:2c:e6:fd:28:94:46:0f:4c:
         cf:8c:c4:6b:3e:86:19:7b:10:af:c2:49:4e:5f:20:cc:ca:1c:
         3f:c4:9b:ff:7f:01:65:01:43:0f:bb:2e:6f:c3:3f:d9:20:99:
         90:ad:18:83:25:05:b5:65:b6:dc:3c:23:59:d2:34:a0:dd:59:
         91:2c:4c:5d:c8:79:56:d4:88:1d:5b:16:0c:67:07:1d:72:f6:
         7b:53:66:07:55:f8:3f:b7:ba:38:e2:91:bb:5a:ac:12:06:69:
         f1:83:e1:2f:d7:a9:d2:a4:69:64:dc:69:8e:19:8b:b7:a3:06:
         e1:59:c5:ff:c5:43:91:1e:0d:48:bd:62:1c:95:18:f2:51:a8:
         5a:d3:26:d0:cf:54:64:bd:89:e9:b2:e4:9b:46:b2:a6:fb:2f:
         d5:0d:ee:0c:ec:50:6c:54:8a:f0:9b:55:27:ec:ff:af:eb:57:
         66:9f:cb:a5:05:6e:da:77:8e:5b:4d:b5:ec:f3:37:68:38:2a:
         14:22:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:11 2025 by rpki-client