Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398465.roa
File:                     AS398465.roa (raw, json)
Hash identifier:          XtGLHZtikwO/WrZRdv71b4HfEIj8E8SLuAL7EsbErhQ=
Subject key identifier:   8E:01:23:EE:64:71:F4:5C:7C:4E:85:8D:E9:1B:61:51:CD:7F:9E:27
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5BD5067F873291E7205E9FCFA7C36302426D4A55
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398465.roa
Signing time:             Sat 14 Mar 2026 11:24:04 +0000
ROA not before:           Sat 14 Mar 2026 11:19:04 +0000
ROA not after:            Sat 13 Mar 2027 11:24:04 +0000
asID:                     398465
IP address blocks:        157.254.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d5:06:7f:87:32:91:e7:20:5e:9f:cf:a7:c3:63:02:42:6d:4a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 14 11:19:04 2026 GMT
            Not After : Mar 13 11:24:04 2027 GMT
        Subject: CN=8E0123EE6471F45C7C4E858DE91B6151CD7F9E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:c5:a2:03:48:82:13:b8:4b:21:aa:18:3b:
                    fd:99:b6:a2:30:94:45:ab:c7:81:41:20:18:9b:7c:
                    33:78:16:14:72:34:cd:51:95:75:04:d2:b4:a6:fa:
                    a9:78:f2:19:2a:2c:35:5c:54:79:68:03:99:61:d6:
                    96:d2:ab:fa:eb:38:8b:13:3b:7b:8f:7b:98:40:a7:
                    c2:33:83:07:6c:00:a4:3e:f2:dc:ef:07:ae:d8:09:
                    f9:95:f2:2f:84:31:2d:29:59:04:bb:8c:57:55:bc:
                    9d:12:11:3d:fd:de:2b:f6:90:0a:90:d8:e0:4a:87:
                    3f:30:d2:54:60:3f:60:70:5a:7c:99:e6:a2:50:69:
                    3b:58:5c:d4:3e:9c:46:f8:dc:42:87:f5:4d:f7:45:
                    c6:d3:ee:5f:11:e1:41:e4:11:63:5d:9b:2e:27:d0:
                    de:82:2a:d2:4b:f0:1c:7e:1d:26:e1:9b:64:48:ea:
                    0c:ab:f1:fb:3b:d0:3f:d5:7d:88:5b:65:a6:2a:fb:
                    d8:52:65:02:7a:86:f8:f4:06:2c:4e:c7:bd:f6:29:
                    64:99:45:da:d7:c3:7f:9c:75:8d:04:68:b1:78:62:
                    24:c1:2c:b4:70:7c:33:34:7e:33:0f:f7:04:3d:b6:
                    e3:7d:e0:d8:3e:52:15:49:1b:cb:6b:34:8b:54:98:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:01:23:EE:64:71:F4:5C:7C:4E:85:8D:E9:1B:61:51:CD:7F:9E:27
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:db:87:1d:22:62:69:8b:15:2d:90:b0:4c:1e:ca:a6:41:
         62:61:8e:81:65:9c:40:15:0a:ee:2c:f1:5c:52:b0:18:1c:bc:
         85:fd:8e:bf:7f:e7:c6:e6:8c:16:a3:b4:08:89:f7:8d:46:27:
         f2:ff:21:e3:3c:81:ba:5c:15:87:4f:53:14:10:c5:f4:dc:40:
         38:44:12:78:61:ec:41:f1:b0:a3:d0:92:db:08:8c:a4:b4:7e:
         ad:89:72:8b:ab:a0:54:e8:e8:97:74:74:ee:a0:22:52:91:cf:
         e3:35:0c:c0:a6:f0:8e:a4:22:36:5b:ca:f6:28:86:d5:21:08:
         b8:5c:6c:ae:ad:9e:b0:51:48:e9:94:ac:7c:b2:22:40:f8:85:
         f5:d5:12:20:5e:57:a7:2d:b2:ca:06:a1:5c:1e:df:ac:63:d5:
         47:e1:12:9e:83:d0:46:c9:94:bf:67:9e:77:e4:13:c9:cd:a1:
         3b:32:b6:88:be:31:93:cd:1d:11:11:0a:f9:1e:f0:6f:a0:da:
         2d:3f:17:c6:0d:6a:af:fd:7e:93:54:3c:c0:0b:c6:50:2b:b8:
         56:8e:30:6d:f5:62:e6:80:f7:65:60:36:1a:7c:2f:57:2d:e3:
         15:32:6d:60:05:fc:6b:c3:e4:c9:3f:b8:ed:a6:fd:17:4a:ac:
         eb:24:4e:df
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUW9UGf4cykecgXp/Pp8NjAkJtSlUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzE0MTExOTA0WhcNMjcwMzEzMTEyNDA0
WjAzMTEwLwYDVQQDEyg4RTAxMjNFRTY0NzFGNDVDN0M0RTg1OERFOTFCNjE1MUNE
N0Y5RTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MjFogNIghO4
SyGqGDv9mbaiMJRFq8eBQSAYm3wzeBYUcjTNUZV1BNK0pvqpePIZKiw1XFR5aAOZ
YdaW0qv66ziLEzt7j3uYQKfCM4MHbACkPvLc7weu2An5lfIvhDEtKVkEu4xXVbyd
EhE9/d4r9pAKkNjgSoc/MNJUYD9gcFp8meaiUGk7WFzUPpxG+NxCh/VN90XG0+5f
EeFB5BFjXZsuJ9DegirSS/Acfh0m4ZtkSOoMq/H7O9A/1X2IW2WmKvvYUmUCeob4
9AYsTse99ilkmUXa18N/nHWNBGixeGIkwSy0cHwzNH4zD/cEPbbjfeDYPlIVSRvL
azSLVJgfpwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFI4BI+5kcfRcfE6FjekbYVHN
f54nMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzM5ODQ2NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+DTANBgkqhkiG9w0BAQsFAAOC
AQEAifXbhx0iYmmLFS2QsEweyqZBYmGOgWWcQBUK7izxXFKwGBy8hf2Ov3/nxuaM
FqO0CIn3jUYn8v8h4zyBulwVh09TFBDF9NxAOEQSeGHsQfGwo9CS2wiMpLR+rYly
i6ugVOjol3R07qAiUpHP4zUMwKbwjqQiNlvK9iiG1SEIuFxsrq2esFFI6ZSsfLIi
QPiF9dUSIF5Xpy2yygahXB7frGPVR+ESnoPQRsmUv2eed+QTyc2hOzK2iL4xk80d
EREK+R7wb6DaLT8Xxg1qr/1+k1Q8wAvGUCu4Vo4wbfVi5oD3ZWA2GnwvVy3jFTJt
YAX8a8PkyT+47ab9F0qs6yRO3w==
-----END CERTIFICATE-----
Generated at Mon Mar 23 04:36:28 2026 by rpki-client