Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
File:                     AS400890.roa (raw, json)
Hash identifier:          PX9J9UCj7OMvtCyBLOeovRcLNDAfzY+WWJJntvOEQio=
Subject key identifier:   E6:13:6E:95:A3:A1:33:5B:74:F7:5E:66:22:BF:11:32:25:FA:46:FB
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       74DD4E3788F30943B01845E8F89630B722C9DF2E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
Signing time:             Thu 01 May 2025 23:28:32 +0000
ROA not before:           Thu 01 May 2025 23:23:32 +0000
ROA not after:            Thu 30 Apr 2026 23:28:32 +0000
asID:                     400890
IP address blocks:        157.254.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dd:4e:37:88:f3:09:43:b0:18:45:e8:f8:96:30:b7:22:c9:df:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  1 23:23:32 2025 GMT
            Not After : Apr 30 23:28:32 2026 GMT
        Subject: CN=E6136E95A3A1335B74F75E6622BF113225FA46FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:0e:7b:d6:85:9a:05:2f:0f:e4:ec:48:d1:
                    a4:2d:5d:d2:ab:53:d2:e8:82:4e:51:18:6e:cc:f7:
                    85:2f:78:d5:9d:40:f3:f9:0b:da:0e:89:04:13:4f:
                    a6:21:b9:97:83:83:92:2e:1d:2e:12:1a:23:57:dc:
                    7a:37:23:4f:43:b3:a8:b1:0b:3b:30:75:b2:bc:5d:
                    16:f1:7b:e2:55:bd:44:3a:09:bb:93:d9:b0:b2:70:
                    fb:42:11:62:a2:98:82:1a:03:91:2c:1d:66:de:81:
                    b6:80:a7:93:27:71:30:71:57:fb:1a:00:38:3e:61:
                    b4:2a:e0:15:e3:ca:4b:f6:6c:db:da:be:ff:80:cc:
                    8f:ee:01:23:37:5d:2c:95:b7:c0:4a:9f:52:66:b6:
                    e8:ac:03:67:e0:b0:94:6a:e5:29:29:6f:6a:1b:1d:
                    27:76:fe:50:5f:14:80:61:6b:10:88:de:b2:c5:ff:
                    0a:23:64:0c:8d:59:1c:b0:2c:4a:ce:27:28:3f:99:
                    04:61:c3:e5:ae:6d:30:0a:0e:03:5b:ac:64:73:74:
                    72:4d:cb:4c:2b:c6:97:d6:61:41:1f:3d:9a:0c:5b:
                    39:49:2f:df:18:3d:5a:42:66:9d:88:d2:10:6f:9d:
                    ff:0a:65:4d:6f:6a:5e:48:b8:64:b9:50:5b:e5:26:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:6E:95:A3:A1:33:5B:74:F7:5E:66:22:BF:11:32:25:FA:46:FB
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:2f:d2:37:de:d5:e4:b0:1d:f8:2c:89:2c:33:66:06:90:
         a2:8d:70:a7:68:2b:da:d4:b1:b6:e5:52:14:40:59:16:0b:7c:
         8c:ba:7c:f1:a2:53:25:8b:9c:21:13:48:1c:8a:79:c0:3d:cd:
         8d:bb:c9:04:c9:80:a0:73:a3:cf:fa:72:7d:14:6a:38:ea:8a:
         e3:57:73:e5:1b:c2:44:c0:00:c6:7a:64:ae:29:ba:82:34:9d:
         f4:ef:08:a5:08:f7:4f:bb:cb:98:38:d6:3a:5f:4f:c6:7e:69:
         fc:61:15:00:4b:35:71:4e:86:7d:4a:b9:7a:ff:5a:0c:bc:be:
         37:e1:9a:dc:ab:22:40:fb:eb:77:98:dc:90:1c:c5:fb:16:f0:
         40:73:41:13:71:da:8a:c8:c8:c1:da:61:43:15:10:9d:91:b3:
         98:49:4f:f7:78:38:c4:86:5d:49:5a:37:33:ff:d1:be:4b:b7:
         0f:d5:b2:58:96:04:80:1e:0e:04:ac:43:d3:47:a0:39:64:b2:
         00:49:78:a9:b9:bc:ff:03:c0:5d:aa:f9:02:19:ea:58:95:51:
         3b:66:eb:ac:d5:31:0b:77:69:8d:45:92:82:9a:95:1f:c1:33:
         e9:58:29:02:66:63:33:35:6d:6b:f0:cb:59:8a:ff:33:66:c1:
         a5:05:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:13 2025 by rpki-client