Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401730.roa
File:                     AS401730.roa (raw, json)
Hash identifier:          QgTkWC1bVPDZLdlHe4ZiOGHtm3/Mdws43qotu4CbrTE=
Subject key identifier:   3B:6D:71:DD:5B:6B:DD:3C:13:56:24:AA:DE:2A:73:B3:B0:91:7D:E5
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2210947C7FBE13249F646A06BD1F14F576E19312
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401730.roa
Signing time:             Mon 26 May 2025 09:27:06 +0000
ROA not before:           Mon 26 May 2025 09:22:06 +0000
ROA not after:            Mon 25 May 2026 09:27:06 +0000
asID:                     401730
IP address blocks:        157.254.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:10:94:7c:7f:be:13:24:9f:64:6a:06:bd:1f:14:f5:76:e1:93:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 26 09:22:06 2025 GMT
            Not After : May 25 09:27:06 2026 GMT
        Subject: CN=3B6D71DD5B6BDD3C135624AADE2A73B3B0917DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:cb:11:0a:96:85:cb:d1:2f:8a:01:de:d0:
                    3c:a1:76:a4:7c:18:b4:3c:15:04:b0:cb:0f:40:9e:
                    26:6d:42:d9:ea:59:c2:5f:37:f8:3d:a4:cb:10:0f:
                    8e:94:05:e5:df:3b:bd:68:c0:98:c7:27:ff:bd:72:
                    42:f7:b8:07:d1:17:dd:19:18:d0:c1:8c:ab:12:a1:
                    6f:cf:35:8b:74:fa:da:28:52:e8:9b:68:03:cc:55:
                    d1:7a:ba:19:ba:07:49:a7:65:e5:5c:01:20:61:84:
                    2e:01:10:9b:8b:98:6c:8a:f3:b7:28:d3:50:3e:44:
                    4b:2e:54:87:c9:92:ba:d7:c8:e6:9c:63:d1:3c:17:
                    07:5a:46:86:05:c4:65:9b:6f:4c:a3:0e:0a:ed:6e:
                    b5:68:19:ed:f9:0e:7b:eb:38:32:c0:a7:84:a2:6d:
                    b1:ff:0a:6f:bc:66:a1:fb:2d:6c:05:cb:18:30:07:
                    a5:52:06:94:59:79:5e:47:1e:7b:a5:8e:11:9c:8e:
                    7d:a2:c5:d3:37:b4:1d:58:68:18:56:46:b7:a5:b1:
                    e1:d4:ae:26:1d:1a:4d:f9:90:03:83:d1:73:08:d1:
                    70:f5:35:98:7c:84:d4:00:ce:1d:8d:e7:e5:16:66:
                    a0:ee:af:6b:95:92:f8:f3:0e:0d:bd:15:74:3d:7c:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6D:71:DD:5B:6B:DD:3C:13:56:24:AA:DE:2A:73:B3:B0:91:7D:E5
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:36:73:d1:b0:24:5c:09:4d:7a:fb:3f:eb:c2:d0:5a:22:06:
         f0:b9:cf:99:21:f2:f4:19:8d:4f:90:3c:84:b9:7e:5b:5e:e6:
         c5:13:d9:ec:91:87:19:6c:35:c5:9f:44:77:16:dd:3f:28:7b:
         83:47:37:12:35:ec:a8:0e:8c:7f:7f:be:10:5c:fd:fd:aa:8f:
         2a:45:5d:83:27:c9:2c:50:7f:e2:8a:c3:c7:92:08:c0:3d:70:
         19:82:7b:5d:15:c5:57:dc:9c:d5:47:88:54:8b:d7:16:8b:d0:
         70:4a:94:1b:c3:35:dc:70:9f:d1:01:78:b4:54:a0:82:9b:3c:
         6a:4a:c6:f3:d3:83:ee:5f:40:65:18:9b:d5:bd:1b:f8:8f:e8:
         35:63:ec:cd:f5:5f:16:a7:9d:61:e8:fc:94:48:2f:d1:10:3b:
         e3:f9:c2:59:9b:3f:d1:f8:ee:a8:2a:81:a4:0d:77:b1:be:1b:
         3b:20:3e:65:ac:4e:91:8c:d4:9d:14:a1:60:a8:9a:90:63:e8:
         35:b5:97:c6:c3:7c:c5:53:dc:81:bc:16:80:4f:67:8d:af:1e:
         68:57:ce:8e:b6:f4:d4:b0:6b:e3:73:66:cc:cb:1d:16:e2:56:
         5f:a4:df:3f:3b:41:5c:35:31:0f:a7:40:8a:bf:a8:2b:a5:15:
         9e:57:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:10:54 2025 by rpki-client