Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402349.roa
File:                     AS402349.roa (raw, json)
Hash identifier:          5riG/E3phOWfmBlG9+PgYVuYUGs7pYVFpckXYqa+PqI=
Subject key identifier:   BA:A3:BB:4E:30:3B:71:9D:D4:22:7C:25:E5:C1:83:F6:E8:21:A3:89
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7D57329C1C16098ED64C830AAB59A326F5EBCC58
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402349.roa
Signing time:             Mon 01 Jun 2026 08:20:20 +0000
ROA not before:           Mon 01 Jun 2026 08:15:20 +0000
ROA not after:            Mon 31 May 2027 08:20:20 +0000
asID:                     402349
IP address blocks:        157.254.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 18:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:57:32:9c:1c:16:09:8e:d6:4c:83:0a:ab:59:a3:26:f5:eb:cc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  1 08:15:20 2026 GMT
            Not After : May 31 08:20:20 2027 GMT
        Subject: CN=BAA3BB4E303B719DD4227C25E5C183F6E821A389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:74:65:bb:9a:69:75:6b:87:8d:d6:6a:98:
                    99:fd:1b:eb:91:0e:97:22:78:b4:38:ad:0b:99:c9:
                    86:14:3a:e7:eb:49:6e:a3:2a:eb:7a:3f:ba:1b:55:
                    a9:3a:12:24:51:a4:6a:58:c9:b4:0a:2f:f2:9a:3a:
                    a4:60:b6:a0:04:f4:c4:e3:cc:37:b5:25:05:4a:3b:
                    f4:c0:0a:3f:46:e3:ea:fb:27:e0:98:c1:ef:bc:a2:
                    d0:a7:50:19:e3:05:77:49:9d:ed:5e:63:58:f0:fb:
                    94:97:81:1c:3c:f5:dc:78:fb:91:14:f0:64:1c:04:
                    68:00:c3:4d:bf:7f:40:b7:87:41:5e:71:74:b7:e5:
                    62:89:84:56:1c:ca:7a:a1:d8:b9:95:57:20:06:f9:
                    90:d6:bc:84:97:df:d9:1e:36:18:e6:a9:e1:82:93:
                    48:e4:c6:9f:0e:a8:de:29:31:21:d8:44:f4:40:e5:
                    7f:36:7a:12:a4:fd:7d:79:7f:56:87:da:66:ed:50:
                    c0:3f:b0:74:0d:35:a8:0e:a5:cd:51:21:f8:7a:80:
                    89:fa:7e:8f:d5:bd:a8:a5:6c:f6:a2:81:8b:99:f8:
                    2e:02:dd:af:62:d9:48:82:49:6c:b1:76:de:e7:6c:
                    85:ec:ce:b9:bf:ed:f3:01:e7:ac:79:17:22:f6:bd:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A3:BB:4E:30:3B:71:9D:D4:22:7C:25:E5:C1:83:F6:E8:21:A3:89
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402349.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:c5:95:a0:59:0c:21:18:cb:86:2b:40:da:14:a4:3d:de:
         25:e2:ca:4c:44:6f:cf:a6:2e:78:18:b8:d5:9e:58:31:1e:68:
         e7:04:53:65:21:b7:f3:ff:68:ee:20:5a:e8:5a:f0:1f:89:6d:
         b5:db:4b:59:99:a9:64:86:a4:4d:41:0a:13:c6:c5:58:62:f4:
         18:94:02:23:59:d8:b9:50:b2:d5:f3:2d:4f:84:b9:2a:6e:57:
         57:d8:16:87:26:25:60:5f:66:a5:f6:85:64:7f:4d:63:8a:e6:
         98:fe:dc:9d:44:c0:a9:c0:52:4e:3b:0a:43:50:61:1d:cb:f9:
         d9:cd:3e:b1:3a:9f:bb:68:31:85:bb:08:a1:58:9d:85:35:52:
         49:37:d5:fe:54:34:74:0d:46:7c:5c:5d:4a:f0:be:72:28:a0:
         ff:ef:a1:b2:2e:24:89:63:99:ad:7a:dd:65:25:88:d2:12:3e:
         55:62:55:fc:c7:d5:61:f2:d3:1a:23:91:6d:0b:2c:ce:6b:4b:
         bc:9b:0f:6d:6b:39:f2:2f:57:96:92:88:86:f5:69:fc:b2:83:
         61:34:74:f2:28:69:e0:4b:7d:ea:61:79:4c:f6:7a:5a:d3:4f:
         3d:a9:8c:91:fe:c3:8c:6d:c6:57:f8:41:4f:a7:70:19:55:cd:
         80:ec:f0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 22:22:12 2026 by rpki-client