Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402236.roa
File:                     AS402236.roa (raw, json)
Hash identifier:          7T1A6BnBsfvU+Q5l+fjWrDJhL+D9I0JktKUgS0apQbs=
Subject key identifier:   2D:C0:E0:77:19:42:A8:C6:A3:20:A7:D5:31:C9:3E:AD:05:67:B7:4B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       72B2D360B3A680871884ED71D4CE43574EE1E77E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402236.roa
Signing time:             Mon 06 Jul 2026 18:22:59 +0000
ROA not before:           Mon 06 Jul 2026 18:17:59 +0000
ROA not after:            Mon 05 Jul 2027 18:22:59 +0000
asID:                     402236
IP address blocks:        157.254.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b2:d3:60:b3:a6:80:87:18:84:ed:71:d4:ce:43:57:4e:e1:e7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  6 18:17:59 2026 GMT
            Not After : Jul  5 18:22:59 2027 GMT
        Subject: CN=2DC0E0771942A8C6A320A7D531C93EAD0567B74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:58:37:5f:ae:ea:bb:1b:52:75:1f:6b:53:
                    aa:1e:9f:02:19:f6:4e:54:68:ac:83:c0:20:6b:16:
                    bd:14:21:eb:21:56:e6:4b:11:62:ca:ab:d5:8a:f6:
                    e8:30:03:10:5d:35:e0:d4:fa:9a:93:b4:7d:02:71:
                    a1:3e:8a:eb:55:ee:14:02:21:d2:29:b2:bd:17:ec:
                    39:b7:6a:ed:c0:19:44:0b:65:e2:98:a3:cc:b3:f7:
                    b2:c1:a0:de:89:14:84:78:39:eb:a7:8e:63:34:6b:
                    27:64:8d:47:31:50:28:75:b5:38:11:ca:65:a5:cc:
                    cb:56:27:d5:47:66:00:15:f6:6d:ea:2e:cc:01:4c:
                    af:b4:a0:17:eb:dc:da:de:32:f9:3e:24:b3:16:fd:
                    b3:59:64:dd:05:4d:fa:d4:0d:a0:6d:50:0f:e1:52:
                    ff:2d:8a:b6:42:bd:9d:29:b0:b9:6c:fc:ec:5d:46:
                    85:ba:10:9f:39:c6:a0:4f:62:f3:26:ee:7e:9a:e6:
                    e3:80:3d:4d:89:18:57:75:33:bb:eb:d5:b9:b2:d7:
                    5a:1a:bc:02:91:a8:cc:da:78:45:b4:80:6e:74:bd:
                    b1:7c:dc:aa:58:d9:f7:5a:84:45:ff:83:0d:2f:07:
                    78:38:3e:89:91:b8:e6:09:6b:c9:43:d1:ee:3f:bf:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C0:E0:77:19:42:A8:C6:A3:20:A7:D5:31:C9:3E:AD:05:67:B7:4B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:8e:42:0e:50:cc:a7:7f:72:1c:9d:4c:88:42:f9:a4:a7:4a:
         7c:66:05:1d:ae:6f:3e:33:3f:05:ae:c8:b6:79:23:04:b6:f4:
         c1:49:9d:24:4c:8c:10:55:88:d4:df:a2:92:59:23:86:41:30:
         a1:e6:2a:f8:50:8c:f1:f2:bc:69:21:57:8d:0c:2c:d6:75:2c:
         81:f3:35:bd:00:f5:49:59:21:1a:8d:6d:1e:e3:ec:f4:92:99:
         39:69:f2:7d:cb:7f:fd:70:3f:37:e2:91:23:f1:81:c1:ca:14:
         04:ce:39:e8:5c:64:07:93:10:43:8d:f7:bf:76:5d:f6:0c:e9:
         3c:82:c4:62:00:06:de:fb:2b:13:12:b7:cb:c4:b9:05:05:e9:
         9e:f3:00:a6:7a:94:95:36:66:3c:19:86:bc:7b:87:19:58:77:
         ba:5b:25:ea:e4:aa:f2:33:77:7e:1b:4d:41:68:8c:3b:f8:7b:
         48:d6:bf:0f:e4:e3:8e:d3:25:ba:c6:b7:90:3b:57:41:98:8c:
         c3:1a:0b:16:3e:0d:80:6b:9c:b5:87:5f:9b:fb:bf:14:e5:7c:
         63:ca:df:64:26:0e:b7:5e:a8:68:20:0b:be:8f:25:be:e1:f9:
         ec:cb:f9:15:32:a3:a7:4c:f7:8d:08:86:ac:bb:9f:b9:b9:94:
         90:d5:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:31:18 2026 by rpki-client