Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402507.roa
File:                     AS402507.roa (raw, json)
Hash identifier:          TfMuXQ5Ip0mZnIqADDsX/dKRsZ5xFedkra7/EMwJXqU=
Subject key identifier:   71:B3:50:B2:11:8E:67:0D:B3:B8:4E:61:6D:FF:5A:47:4A:AB:69:A6
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0E4705790848D2FFDA7C54668570D67D32ECEDCF
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402507.roa
Signing time:             Fri 29 May 2026 17:31:50 +0000
ROA not before:           Fri 29 May 2026 17:26:50 +0000
ROA not after:            Fri 28 May 2027 17:31:50 +0000
asID:                     402507
IP address blocks:        157.254.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 10:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:47:05:79:08:48:d2:ff:da:7c:54:66:85:70:d6:7d:32:ec:ed:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 29 17:26:50 2026 GMT
            Not After : May 28 17:31:50 2027 GMT
        Subject: CN=71B350B2118E670DB3B84E616DFF5A474AAB69A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:9b:1a:51:cb:2c:ca:d0:7a:17:68:37:43:
                    2b:35:b8:0e:b4:f5:19:81:8a:ca:48:7a:15:73:b7:
                    86:06:99:62:71:fb:80:d0:45:e9:b0:b2:08:fa:2f:
                    0c:6c:9a:8b:3e:c5:71:81:95:43:8d:9e:28:0b:9e:
                    1f:c6:cf:2a:e4:9a:95:90:0b:19:e3:15:28:aa:e7:
                    38:f1:c0:a4:47:5f:89:4d:b5:b9:f6:2c:33:e5:23:
                    42:5c:df:dd:b4:06:37:34:f4:4b:2f:b1:2c:d5:5d:
                    9e:8b:c8:03:36:8f:14:36:32:a4:e2:18:a4:59:11:
                    56:fa:f3:4f:55:b9:d4:50:4b:47:31:9c:9e:aa:c4:
                    35:d6:a9:29:14:c3:07:01:18:f5:bc:0d:13:d8:cf:
                    7d:85:51:ec:72:57:6b:f0:84:3d:92:af:7a:0a:4d:
                    43:c9:87:85:6b:74:51:2e:b3:80:63:5a:b8:82:45:
                    d5:de:85:15:60:24:c3:5f:0b:86:b3:3a:8d:bd:1a:
                    bf:4f:50:fd:d7:5d:69:30:30:e7:fc:23:e8:28:03:
                    05:70:e4:13:fa:a3:90:e0:ac:28:ef:c1:cf:c5:62:
                    11:a5:59:53:b8:cd:de:13:cd:26:b7:5c:86:20:e9:
                    4e:79:33:50:60:cf:44:03:ad:4a:5d:98:db:dd:4a:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B3:50:B2:11:8E:67:0D:B3:B8:4E:61:6D:FF:5A:47:4A:AB:69:A6
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402507.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:97:d3:c9:af:6e:48:bc:3e:4f:cb:12:1f:de:57:1a:23:
         8a:c2:7f:b3:3d:7f:86:f3:3f:8a:63:ef:24:23:49:40:43:90:
         93:bf:5b:00:c5:7b:cc:43:11:4f:b4:17:55:e3:07:d4:68:8e:
         a2:98:63:82:87:31:55:92:78:53:7b:49:82:f7:cd:0b:c0:32:
         b0:85:c0:83:e7:b2:66:5d:d1:f9:c2:b2:b9:19:46:8b:33:71:
         20:77:ac:1d:e2:d1:55:5b:87:0d:16:44:b5:ea:0f:e5:63:4e:
         15:fd:93:9c:8c:79:27:2b:05:71:9a:6d:df:a3:80:8f:aa:11:
         21:50:a8:4b:4a:1b:f1:16:dc:85:c9:7c:f8:0c:96:93:dd:56:
         dc:28:bf:f5:98:c6:1a:68:7a:c6:d1:6e:14:84:26:63:63:13:
         4c:ee:72:47:0d:81:e4:0f:50:86:94:85:1f:29:a1:09:58:f1:
         f0:e8:3a:6e:74:59:ab:a8:de:9e:6a:82:d6:9a:ba:0c:aa:43:
         78:9e:64:84:49:fe:65:34:52:bc:04:0d:50:ac:16:c4:cf:8b:
         15:61:e7:60:85:1b:e8:3d:ca:0d:9f:64:be:e9:99:ce:6d:92:
         ed:12:5a:58:31:d2:b1:ce:02:90:dc:6a:7e:47:2a:a8:00:dc:
         f6:17:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 19:46:10 2026 by rpki-client