Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS577.roa
File:                     AS577.roa (raw, json)
Hash identifier:          xXBh8qlIzMYYMC3mzSuVpmDifcZNybtlsrnixbkPQrA=
Subject key identifier:   4F:65:E6:29:51:42:39:8E:32:5F:79:B9:D5:59:16:8E:F2:4D:45:19
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7027DEC22AB37786BD0D86FC31712893877EE9AD
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS577.roa
Signing time:             Thu 30 Jul 2026 15:17:29 +0000
ROA not before:           Thu 30 Jul 2026 15:12:29 +0000
ROA not after:            Thu 29 Jul 2027 15:17:29 +0000
asID:                     577
IP address blocks:        157.254.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 10:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:27:de:c2:2a:b3:77:86:bd:0d:86:fc:31:71:28:93:87:7e:e9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 30 15:12:29 2026 GMT
            Not After : Jul 29 15:17:29 2027 GMT
        Subject: CN=4F65E6295142398E325F79B9D559168EF24D4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:56:d6:91:bf:96:b0:2c:81:ba:71:6b:14:
                    a0:a7:f8:d3:1c:28:5e:30:52:3c:d7:30:e1:9b:d2:
                    27:b1:3c:96:b0:6d:b3:1d:a6:56:c2:43:34:3f:90:
                    83:42:96:c5:7b:52:ab:5a:d1:58:8b:e5:8a:ef:52:
                    61:83:eb:35:ab:0a:72:d1:e7:4a:cf:a8:9b:dc:59:
                    5e:7b:17:a1:aa:a8:61:d3:91:f1:e3:54:1a:57:e5:
                    30:81:aa:da:4f:c9:9e:ae:21:a5:c0:f3:59:bb:83:
                    65:da:e9:b6:be:68:59:e4:e1:3f:cf:b5:37:1d:cb:
                    2f:a4:b5:65:f1:26:97:8c:b8:28:8c:9a:0c:93:db:
                    92:fb:17:1a:50:5e:5b:47:8e:36:d7:cc:e8:14:47:
                    b4:7f:64:ae:53:ec:77:68:d3:d4:e8:36:3b:d6:4f:
                    8f:9f:66:c8:e3:7a:b3:cc:af:ee:bb:c0:7b:fb:9c:
                    0e:a8:56:c9:a0:95:73:02:8c:0f:f7:b1:68:8b:b1:
                    85:a1:1b:a4:1e:6c:bf:1f:2b:23:b9:91:aa:4c:6f:
                    55:3b:b9:f2:f6:79:3e:19:28:7f:ee:98:e7:de:e3:
                    b4:4b:86:04:e4:e8:97:53:5f:c2:05:1b:f2:fd:d1:
                    a0:8c:3c:e8:c6:a6:fa:f7:9b:33:a5:3d:57:69:23:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:65:E6:29:51:42:39:8E:32:5F:79:B9:D5:59:16:8E:F2:4D:45:19
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:d9:32:32:2a:c2:b1:fb:aa:c2:a0:c2:7c:a4:bc:07:36:
         39:97:08:02:7f:bc:73:9d:e7:8c:38:b6:eb:57:f2:fb:17:d7:
         90:dc:43:9a:39:bb:e9:0c:ab:fa:b8:69:0e:68:30:53:74:d3:
         b5:6e:a0:e2:74:41:58:b5:6d:24:4f:37:56:6b:d8:8b:02:37:
         e4:9f:0f:87:0b:1a:8c:e8:8f:ec:73:00:13:46:b4:1b:ab:ed:
         f0:e7:d8:4d:1d:be:01:1c:97:c1:e4:f8:f6:39:10:c4:3a:42:
         a8:fd:d8:60:9d:13:65:c6:b2:a3:20:8f:b0:05:3f:0a:34:3e:
         d3:84:7a:15:11:48:fb:11:8f:21:61:8e:3b:7a:ab:a4:e0:75:
         b2:d1:5c:3c:f7:4b:4a:1a:40:68:88:c3:3c:c6:86:3b:59:97:
         ea:67:4d:dc:ff:8a:a2:34:bb:94:08:2a:72:8a:c6:56:f3:60:
         d1:c6:b1:f1:fe:ba:b2:71:33:a8:b6:20:ec:c2:49:b3:f4:7a:
         6e:70:1c:e4:ed:7d:a7:16:9e:73:8e:31:5a:21:71:e5:d6:82:
         b7:1a:3b:2e:3b:0c:f5:88:e1:88:db:56:0c:a4:da:13:99:0a:
         7a:1b:10:92:bc:25:b4:2d:86:67:29:fb:c1:68:9e:6b:54:e4:
         6d:1c:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 10:07:42 2026 by rpki-client