Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398355.roa
File:                     AS398355.roa (raw, json)
Hash identifier:          nj5gyk2oxIJwKNviV9UNzYxeZIXyBL2EgdPxAqYUnNE=
Subject key identifier:   AB:AE:83:5B:E3:8E:50:67:08:45:D5:0C:46:80:EF:6A:25:F9:F1:F1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3747E57C953BC4ECAF0C762873329CC98ECE6368
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398355.roa
Signing time:             Mon 31 Mar 2025 23:39:29 +0000
ROA not before:           Mon 31 Mar 2025 23:34:29 +0000
ROA not after:            Mon 30 Mar 2026 23:39:29 +0000
asID:                     398355
IP address blocks:        157.254.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:47:e5:7c:95:3b:c4:ec:af:0c:76:28:73:32:9c:c9:8e:ce:63:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 31 23:34:29 2025 GMT
            Not After : Mar 30 23:39:29 2026 GMT
        Subject: CN=ABAE835BE38E50670845D50C4680EF6A25F9F1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:5f:e2:90:23:0b:96:2d:c0:c3:b8:b8:ff:
                    64:ed:95:d1:51:0d:1d:52:cd:ee:72:36:26:4d:35:
                    d7:2c:4c:08:3e:35:8f:af:32:fb:f3:1a:68:33:e6:
                    1b:a8:56:e5:16:ff:0c:f6:f3:b2:35:ce:64:f1:8b:
                    8f:74:6b:e7:20:9e:2c:aa:08:cb:b4:df:6c:ba:6e:
                    c7:a6:e6:e6:c1:e7:b2:8c:dc:35:9d:61:53:cf:4a:
                    0b:7e:1e:26:90:75:f4:d7:83:02:07:31:a0:d6:03:
                    b9:81:67:31:aa:f2:8d:d0:5b:68:47:c4:f9:14:96:
                    69:12:0b:e3:f5:9e:33:ff:00:ff:64:06:b5:c9:bb:
                    0c:8b:d3:43:b4:8f:e7:6e:89:10:fe:f6:43:a7:c7:
                    b8:df:56:63:8e:02:0d:20:67:b8:3a:46:86:2e:c5:
                    a8:9a:db:4f:67:d0:d5:c1:3c:66:0a:89:d4:91:e8:
                    7b:01:05:e8:63:4c:96:ab:c6:93:07:1c:5e:1b:10:
                    95:35:30:61:35:0e:03:01:95:a7:5a:bc:c1:d7:3b:
                    84:c2:30:f0:48:88:9d:8a:3d:1c:d3:bd:79:39:4b:
                    bc:40:62:16:72:bf:d4:ba:0a:6e:84:c4:a3:1f:6f:
                    31:2f:1f:e6:a8:3d:f6:1d:2f:02:9e:fd:69:ae:07:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AE:83:5B:E3:8E:50:67:08:45:D5:0C:46:80:EF:6A:25:F9:F1:F1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:97:5a:a9:cc:2e:12:80:8b:95:56:89:2f:b7:18:16:dd:
         19:97:2c:e6:ad:64:e4:1c:db:45:55:e5:46:a4:8a:ed:ab:aa:
         46:85:84:3e:df:81:0e:43:36:cf:97:e4:95:a8:70:b1:08:ab:
         6d:44:38:64:a2:0b:ab:7b:66:67:d0:fe:6d:7f:85:fa:d3:48:
         a6:ce:fb:e8:c0:8a:80:d6:a8:7c:29:46:9f:9e:68:fa:76:ac:
         ed:be:d2:f5:f6:91:da:96:c9:74:7a:c1:ec:18:2d:8a:d3:d0:
         39:a0:d1:46:9b:2a:34:fa:8d:30:db:31:f3:05:0e:09:4d:cc:
         59:97:bc:04:a2:ad:a9:a2:c3:6a:7d:d7:a9:d2:ca:66:2a:40:
         ec:fe:04:26:e5:fb:a0:35:4d:f7:17:fc:d7:a9:d9:4c:26:ce:
         8a:cb:cb:b4:4d:ff:0a:f1:b3:98:b5:dc:e0:0e:53:10:38:50:
         31:8c:9c:c4:89:a5:06:32:32:03:d2:0a:a7:1c:cd:31:bc:ce:
         1d:60:f6:55:5f:bf:1e:dd:33:e7:f5:a7:53:78:32:6f:49:74:
         38:4d:f2:fb:da:c3:e7:e7:f6:e8:91:a0:eb:d0:d0:9d:13:23:
         4a:6e:de:e0:d9:a7:01:28:0a:62:43:33:e1:64:35:2f:9d:b9:
         45:a8:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:25:54 2025 by rpki-client