Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          mLd939ztFr6Y9F1exvMEUTwt1PGoiFdXS0FBkNk7uQY=
Subject key identifier:   00:CE:77:AC:BB:C8:D7:92:CE:4B:37:D6:A8:48:DE:89:DC:E7:77:6A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2F32E1840E2920837DF071E7C258210E81AB44FC
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa
Signing time:             Sat 21 Mar 2026 04:04:10 +0000
ROA not before:           Sat 21 Mar 2026 03:59:10 +0000
ROA not after:            Sat 20 Mar 2027 04:04:10 +0000
asID:                     397423
IP address blocks:        157.254.48.0/24 maxlen: 24
                          157.254.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:32:e1:84:0e:29:20:83:7d:f0:71:e7:c2:58:21:0e:81:ab:44:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 21 03:59:10 2026 GMT
            Not After : Mar 20 04:04:10 2027 GMT
        Subject: CN=00CE77ACBBC8D792CE4B37D6A848DE89DCE7776A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:7f:20:9b:d3:d8:ab:93:a0:d0:75:bf:00:
                    12:56:96:ff:64:0b:55:1c:b0:69:73:75:5c:59:62:
                    36:28:0e:db:9a:89:b5:77:14:f0:d7:74:48:3d:65:
                    a4:1a:0e:ef:5e:0d:aa:99:ce:92:a9:83:2b:e1:48:
                    59:fa:0d:6c:84:97:e7:b3:ec:fb:6c:98:44:75:08:
                    72:d3:26:c2:f5:7a:0d:91:94:f9:1c:24:62:e3:ea:
                    4c:a0:6f:3e:cd:78:73:12:c0:fe:70:56:41:e2:4c:
                    64:1c:0f:5d:18:9a:39:e6:b2:f9:8a:63:05:81:68:
                    2e:1a:75:cc:a3:a1:eb:74:71:b0:0c:28:dd:c3:ab:
                    24:57:c8:18:e8:6c:1c:2c:0a:7c:74:39:b0:5b:f6:
                    9a:3e:64:a2:6f:9b:64:ad:1d:c2:3c:5c:85:f8:9a:
                    0e:38:96:93:ed:ba:0a:fc:8e:ce:bc:ea:7f:95:ae:
                    88:cb:49:7f:e3:bd:51:2f:ee:c7:b4:43:56:c5:e2:
                    b1:41:28:03:90:1d:9c:62:c1:ed:0a:1b:b2:d7:d8:
                    81:18:1f:4b:86:b5:52:0f:fa:01:0f:89:6b:cf:3e:
                    2f:5b:6e:7d:90:ff:1c:46:7e:22:40:71:a8:c4:b7:
                    f3:fa:76:68:3d:3e:68:5d:d8:83:1f:25:fc:a2:fc:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:77:AC:BB:C8:D7:92:CE:4B:37:D6:A8:48:DE:89:DC:E7:77:6A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.48.0/24
                  157.254.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:da:2c:d2:f9:c7:b1:09:49:70:a0:77:1c:8f:34:01:a7:ca:
         d9:b4:0c:c4:5c:86:57:a2:49:18:5b:ff:49:f1:dc:83:47:24:
         ff:8c:d5:10:d7:ae:37:c9:c0:97:f7:52:1e:8c:ae:51:5a:f4:
         ba:d1:f9:19:fb:aa:98:aa:86:6b:4c:a0:67:0e:ce:1c:ae:03:
         e5:01:fe:9c:f1:95:cb:3d:88:a8:cd:d7:02:39:48:fb:bf:33:
         ec:55:78:9b:02:cd:3b:cd:1d:79:28:39:24:a9:70:28:86:d5:
         ea:03:3f:19:50:53:e4:6f:f7:37:4e:ae:16:61:c2:0d:d8:a9:
         59:2c:00:d3:38:f9:eb:6c:19:b0:28:7a:7e:96:7a:3e:89:9e:
         3a:ee:c5:00:ad:d8:bf:e7:a7:65:a4:2f:86:ea:c0:07:e4:cd:
         9f:37:15:54:bc:e8:80:91:cd:0b:20:e1:2a:26:18:4e:92:a6:
         0e:92:d6:4f:9e:0c:08:52:7e:9e:90:8d:81:c7:68:56:ae:f1:
         d5:3f:ec:9d:bd:6a:6b:7a:6f:dd:5c:3e:5e:09:c9:94:cc:8a:
         66:6e:56:08:30:ba:ee:71:08:d3:7f:0b:16:8e:61:34:5b:ef:
         8c:4b:61:20:71:2d:d9:a5:0a:68:49:01:32:68:d4:4e:08:1b:
         8a:83:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 04:39:41 2026 by rpki-client