Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS49608.roa
File:                     AS49608.roa (raw, json)
Hash identifier:          AsSQrAgkxnHcUBoqA9xibJ9nROT/eXEHHw/CiX9FxnU=
Subject key identifier:   2A:A3:CC:5E:2E:C1:6D:98:FD:22:39:6F:BA:6A:C3:50:15:87:0D:61
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0F82D7F7BA82B7894368AE6EFAB77A08E885C4CA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS49608.roa
Signing time:             Tue 24 Feb 2026 12:50:23 +0000
ROA not before:           Tue 24 Feb 2026 12:45:23 +0000
ROA not after:            Tue 23 Feb 2027 12:50:23 +0000
asID:                     49608
IP address blocks:        157.254.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:82:d7:f7:ba:82:b7:89:43:68:ae:6e:fa:b7:7a:08:e8:85:c4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb 24 12:45:23 2026 GMT
            Not After : Feb 23 12:50:23 2027 GMT
        Subject: CN=2AA3CC5E2EC16D98FD22396FBA6AC35015870D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:6e:d0:b1:d0:59:78:44:dc:96:f5:e9:b9:
                    22:33:e0:f3:24:48:f6:82:9e:7b:29:8d:f2:2b:06:
                    62:a5:99:f4:11:ec:98:64:1e:87:9b:95:68:85:87:
                    1a:85:d9:a8:87:60:25:7d:1f:19:68:b3:d6:8a:a1:
                    d7:c3:30:8e:a7:64:93:76:7a:95:c9:58:a4:65:e0:
                    98:d4:34:73:81:25:fa:5a:fb:3e:c7:c4:54:f9:22:
                    f3:8e:be:8c:2b:00:7c:05:e3:55:ef:42:ce:b7:ef:
                    d4:5d:51:08:44:57:49:14:14:cf:af:55:4e:d5:19:
                    38:57:2f:14:f9:3e:09:da:5e:37:25:ba:88:b6:52:
                    87:ab:c6:6d:d6:b0:a6:83:d6:99:9c:f3:28:1f:29:
                    68:3e:39:cf:f2:5e:93:8d:0e:11:ae:58:33:d9:4c:
                    39:be:ca:54:d8:16:2e:ba:2f:a1:6c:e5:76:63:13:
                    1c:e2:5b:ac:df:90:98:32:26:12:c6:81:30:be:54:
                    98:21:a5:a2:7e:a9:8c:10:9a:d8:b4:b5:c0:27:d1:
                    1d:07:42:60:0b:c5:63:bf:5b:85:be:71:76:d7:34:
                    cf:43:bf:7a:e2:82:d8:cb:e4:dc:23:dc:b5:98:30:
                    7f:a8:ab:ca:d7:cf:35:13:08:96:b9:9f:e1:80:4a:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:CC:5E:2E:C1:6D:98:FD:22:39:6F:BA:6A:C3:50:15:87:0D:61
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS49608.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:b5:ef:1d:91:96:e7:da:36:57:92:26:5b:5f:11:fd:6e:
         f4:a3:c6:ff:87:9f:a6:ae:c1:37:6d:e6:15:ba:08:2d:d8:fa:
         6e:b5:59:d8:a9:ac:b8:4c:1f:53:27:9b:f4:82:c2:11:1e:0a:
         6e:16:38:d8:ed:2e:e8:bf:da:54:c6:a5:d8:d2:7d:b3:4a:62:
         67:ea:44:5e:13:7a:3d:c8:17:79:be:d8:31:9b:df:bb:b5:0c:
         58:5e:5c:d8:d7:eb:68:86:ed:c4:43:30:f9:15:00:1e:bf:6d:
         20:44:27:25:42:b4:d6:ce:54:5c:00:86:23:04:50:8a:b1:cb:
         ac:94:d3:e8:be:e8:58:0a:b3:97:a5:4c:2a:c0:4f:7f:f4:3d:
         7d:6e:15:a7:af:49:85:6d:a8:8e:ac:e1:ea:73:0c:6e:a8:ba:
         a4:8f:19:c0:04:9e:4e:bd:a0:80:ad:37:3e:ee:c5:3c:42:41:
         44:98:ee:18:e3:55:18:21:17:de:f1:63:be:07:9e:5d:cd:c9:
         03:26:84:bf:f5:f4:cc:42:fa:1f:db:aa:2d:aa:8e:66:ae:8c:
         6d:e6:8e:79:56:ba:32:4b:2c:98:3b:9f:0a:42:bf:0a:ec:7b:
         cb:5c:89:f7:4f:bb:70:fd:63:1d:d9:0e:b5:6a:e8:3a:9c:0e:
         5b:a7:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 17:39:12 2026 by rpki-client