Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402215.roa
File:                     AS402215.roa (raw, json)
Hash identifier:          B4hcUnC/t9AFY1z4s2QBQChBvfHRwwB/MEVS3GG83Xg=
Subject key identifier:   F8:A3:99:5B:29:16:BF:3E:3A:9A:D9:1E:93:36:C6:51:19:9D:9F:32
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2D75BA3329C28470E1339A431393BFA7391B9B35
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402215.roa
Signing time:             Tue 11 Aug 2026 13:08:09 +0000
ROA not before:           Tue 11 Aug 2026 13:03:09 +0000
ROA not after:            Tue 10 Aug 2027 13:08:09 +0000
asID:                     402215
IP address blocks:        157.254.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 07:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:75:ba:33:29:c2:84:70:e1:33:9a:43:13:93:bf:a7:39:1b:9b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 11 13:03:09 2026 GMT
            Not After : Aug 10 13:08:09 2027 GMT
        Subject: CN=F8A3995B2916BF3E3A9AD91E9336C651199D9F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:59:e3:de:21:11:75:84:1a:eb:91:40:7e:
                    b2:78:6c:cb:d2:52:ec:f8:05:bc:e5:fd:87:00:51:
                    c4:4e:aa:4b:da:3f:59:f8:96:29:51:e9:d4:5a:c9:
                    dc:f6:76:fe:50:c0:03:67:a7:a5:e9:41:1b:fc:cd:
                    bd:b5:f4:46:de:43:d2:02:13:56:70:7d:b1:b0:9c:
                    fe:a7:32:17:28:7e:6a:b6:a1:f2:3a:96:f0:bd:05:
                    97:77:37:7b:c1:32:2e:ff:6d:8c:f1:df:eb:31:e9:
                    96:b1:bd:01:07:a5:42:82:67:21:ec:50:00:02:90:
                    2a:0a:6c:bb:9a:7f:2f:bf:f1:e0:97:f3:c2:97:31:
                    f3:80:52:9e:a3:e9:a4:68:fa:5e:94:b9:03:04:5f:
                    1e:d8:c2:e2:f2:90:20:c7:8b:8c:fa:46:5c:ea:c7:
                    34:1a:b9:d0:8b:da:b2:09:c9:8f:5b:8a:ef:e6:61:
                    3d:0b:ab:18:6c:48:ac:ce:bf:c8:b1:a7:7a:b1:50:
                    b0:81:20:38:a7:a5:44:6f:f4:60:74:1e:3b:58:d3:
                    84:ce:5b:27:af:93:6e:30:32:32:13:c5:b6:74:1d:
                    e1:ac:6c:be:79:c6:b0:f8:5b:a8:00:9e:da:c8:99:
                    61:bb:bb:0f:6e:de:7d:ce:5d:6d:be:08:88:42:35:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A3:99:5B:29:16:BF:3E:3A:9A:D9:1E:93:36:C6:51:19:9D:9F:32
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:10:26:e7:fc:2b:4e:84:a9:17:c9:72:8c:57:2f:ff:e1:7a:
         60:6c:8d:dc:08:00:9b:d7:41:0d:03:7d:b7:3b:2b:0f:d7:83:
         39:8c:d9:96:99:9a:c7:d8:7c:19:05:0f:4d:e3:f1:4e:18:8d:
         29:e6:80:28:22:20:f1:df:5b:00:c0:86:a3:a3:34:5f:2a:f5:
         f8:b2:2c:9c:c8:e7:3a:21:48:ad:e2:07:0d:8c:2a:b2:d1:5e:
         0b:05:a7:d8:0d:b6:12:78:6b:00:8a:d4:3a:e1:f8:08:ea:0e:
         0c:d5:73:4d:00:cb:75:be:62:3f:b7:a7:3c:7a:24:4e:34:cd:
         a0:e7:57:73:70:b7:1d:b5:a6:c0:37:fa:94:75:c8:fa:34:0a:
         9e:30:cc:af:bb:64:07:d8:2c:e4:54:49:28:16:75:a0:9b:51:
         bc:50:0c:1c:47:41:b2:cc:92:a2:70:91:8d:9e:6c:3d:46:26:
         2f:31:60:64:e0:f8:75:ab:bd:17:88:01:37:13:91:76:3b:c5:
         f0:ae:92:42:ab:9a:b3:4c:02:fc:3a:86:7a:6e:66:c8:e4:63:
         45:56:62:e5:49:d9:70:10:89:bb:56:a9:62:f5:2d:34:74:5f:
         20:79:0f:5f:54:52:cc:f4:c8:31:c5:91:a3:7a:8a:56:db:3f:
         04:03:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 13:36:52 2026 by rpki-client