Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400956.roa
File:                     AS400956.roa (raw, json)
Hash identifier:          wzEuSQ4iJ0jd8iUUo4/y5TSlcJqoXr5U+IPSEk16cFc=
Subject key identifier:   C5:23:8A:9E:A1:DC:E0:5D:DD:36:0F:60:FF:AF:27:81:08:C4:40:A2
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5335B89A79517FDC709B1872270737B97BC5BBA5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400956.roa
Signing time:             Tue 16 Jun 2026 21:10:42 +0000
ROA not before:           Tue 16 Jun 2026 21:05:42 +0000
ROA not after:            Tue 15 Jun 2027 21:10:42 +0000
asID:                     400956
IP address blocks:        157.254.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 05:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:35:b8:9a:79:51:7f:dc:70:9b:18:72:27:07:37:b9:7b:c5:bb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 16 21:05:42 2026 GMT
            Not After : Jun 15 21:10:42 2027 GMT
        Subject: CN=C5238A9EA1DCE05DDD360F60FFAF278108C440A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:14:ac:77:7b:24:7b:15:3b:17:94:ea:4b:
                    6d:bf:c8:dd:c7:10:9f:05:1f:5c:fc:60:99:1f:8a:
                    6e:83:3c:ff:0e:21:a8:9e:96:fe:1c:8f:e7:0c:20:
                    9c:2a:2c:5d:46:36:e8:66:23:e7:d0:84:9a:97:ba:
                    27:49:56:1f:1a:ab:cb:84:00:fa:2f:b8:d9:b9:ab:
                    3a:9f:43:8d:b6:68:de:75:85:d2:ff:e2:f8:6c:49:
                    c3:f8:9c:5d:e5:2d:08:c1:4b:ff:36:0e:fa:ad:86:
                    1f:20:64:44:1a:b0:23:29:7d:ee:64:cd:df:d7:cb:
                    9b:0a:01:ba:67:4a:94:3e:4e:c2:22:ad:06:72:9c:
                    16:73:59:54:0e:7a:b6:18:c4:41:f6:60:df:b2:7e:
                    7f:7a:ee:a7:07:9f:cd:9b:ab:d6:03:f2:21:e3:1b:
                    ea:68:2a:36:13:d1:bb:47:4c:1f:49:90:7c:0f:da:
                    14:a0:04:04:10:93:d0:e1:af:56:0d:2a:f3:95:c9:
                    e6:94:8b:f9:43:6a:ac:19:13:6d:70:64:81:98:04:
                    df:6d:23:4e:16:9b:80:1d:c9:ac:7d:66:86:42:b2:
                    a2:c8:5e:48:91:ef:eb:07:d9:04:42:2d:c8:51:a7:
                    81:3f:58:5c:43:54:89:28:00:70:ed:7a:ce:c9:ea:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:23:8A:9E:A1:DC:E0:5D:DD:36:0F:60:FF:AF:27:81:08:C4:40:A2
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:37:d5:17:6b:36:5f:32:a0:ef:85:dc:a6:c3:be:60:ab:aa:
         f5:57:05:a9:db:23:26:54:1a:0a:03:91:7e:09:84:ad:87:01:
         f4:0d:23:cf:d8:ca:43:f5:6c:6c:92:57:a0:9b:af:14:83:8b:
         66:04:a0:2b:e5:8c:23:f1:cc:82:65:b0:2a:34:bc:e7:39:42:
         4d:3b:0e:46:c4:26:a4:fc:f3:df:4d:7b:37:b1:99:79:8c:3d:
         cd:41:75:4d:c6:c3:f3:44:e3:94:a0:2e:0b:10:c1:cb:91:ce:
         4a:6c:a2:32:12:0b:b5:8c:a0:ed:29:4f:45:7c:54:c5:1a:c8:
         b4:6d:47:78:19:d1:c5:a5:22:3c:d9:80:af:7c:bb:cf:97:c9:
         1c:31:46:f9:ef:27:a5:60:5d:96:53:25:ff:2e:f6:0b:0c:34:
         60:ad:0a:12:32:61:f4:55:8b:f7:07:ac:2c:44:80:d1:f9:03:
         47:f1:48:a0:fd:c5:5c:7a:4c:0d:2c:a5:65:6d:54:cb:53:c8:
         23:12:86:13:dc:06:d6:0c:b4:37:9e:29:df:68:ab:b9:4c:14:
         27:9d:8d:8e:5c:98:69:87:13:90:dd:03:01:7b:5b:47:ba:a7:
         f1:d7:18:32:4f:dc:39:b4:68:a7:f4:19:0e:5e:6e:47:40:dc:
         55:a8:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 09:30:04 2026 by rpki-client