Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7536.roa
File:                     AS7536.roa (raw, json)
Hash identifier:          NYPfRbFB5y/xFBEBWiFNad0wiJX0aELSPkdpfYdM9+k=
Subject key identifier:   C7:E3:3F:3F:58:69:3A:8E:5F:0F:B8:74:10:85:91:AA:56:90:0F:91
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0CD348B1FB253ACCF3D21D378B9FA0ED60868F3D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7536.roa
Signing time:             Thu 19 Mar 2026 13:44:01 +0000
ROA not before:           Thu 19 Mar 2026 13:39:01 +0000
ROA not after:            Thu 18 Mar 2027 13:44:01 +0000
asID:                     7536
IP address blocks:        157.254.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d3:48:b1:fb:25:3a:cc:f3:d2:1d:37:8b:9f:a0:ed:60:86:8f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 19 13:39:01 2026 GMT
            Not After : Mar 18 13:44:01 2027 GMT
        Subject: CN=C7E33F3F58693A8E5F0FB874108591AA56900F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:db:05:24:a4:82:7a:18:9e:0a:af:4c:bc:
                    87:0f:06:80:f4:36:bc:57:8e:94:bf:95:53:69:9c:
                    e0:e8:3b:2b:00:b3:8b:c7:05:cb:d5:40:a1:d2:b2:
                    2e:9a:00:36:56:7b:b1:dc:b4:33:e1:8d:eb:fd:1d:
                    c1:e9:d7:46:2f:d9:fa:e8:19:93:09:54:2d:d9:b5:
                    41:f6:27:bc:68:62:ac:af:84:54:79:f2:bc:24:a3:
                    92:bc:fc:1c:d2:7d:4b:93:24:6d:a1:df:25:2c:63:
                    5b:72:c6:58:67:a8:bb:7f:cc:a2:a1:f1:70:85:86:
                    c1:70:e7:93:0a:37:43:27:1e:63:dd:e8:ae:dc:b7:
                    78:be:e0:96:9c:23:31:96:39:b2:c3:8f:1a:45:12:
                    6d:8d:13:16:f2:20:c0:ca:75:bb:a1:21:ea:d6:3a:
                    ac:56:29:ca:92:77:0b:14:8c:fa:8c:e5:7e:76:3a:
                    5d:52:ae:bb:1a:d0:5c:bb:b5:3e:bb:7e:0c:8b:3d:
                    d9:c1:89:04:97:7b:d1:42:9f:61:ce:e0:e5:d0:96:
                    f1:62:f5:74:a9:68:3b:95:72:aa:52:2e:dc:d9:4c:
                    e2:c2:f2:f3:11:cd:2c:d1:35:bc:a3:62:c3:0c:07:
                    37:6e:71:6c:d6:69:9c:78:c2:f0:c0:7d:a9:9b:44:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E3:3F:3F:58:69:3A:8E:5F:0F:B8:74:10:85:91:AA:56:90:0F:91
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:31:16:25:cc:0e:90:24:54:0e:fc:e1:2d:c9:d1:fe:a8:
         96:ea:1f:6f:b3:cb:fd:d4:66:9c:3a:de:a7:30:bc:f8:34:e3:
         e9:c6:2b:16:79:cf:92:72:65:e3:e9:22:2a:ce:ef:77:16:79:
         60:21:d3:82:db:02:87:5a:22:90:1b:d7:cc:50:88:f4:c8:36:
         1e:fe:a8:ba:36:c8:68:9b:4c:8c:a1:be:03:51:6e:91:7f:40:
         43:05:53:2f:8e:27:d3:2f:e3:b4:d5:4a:41:a0:85:e1:4a:be:
         c7:cf:d6:14:05:71:85:5b:78:dd:5f:a2:1e:1f:50:44:35:43:
         27:6e:2f:46:9c:06:a4:28:b0:b7:b4:5f:45:2d:38:d7:d2:e5:
         86:9a:18:aa:0c:b2:7f:66:b2:4e:0e:18:95:14:4f:11:ec:92:
         17:ae:04:70:5b:ae:d4:d2:bf:d1:b4:32:2a:d7:6f:4e:35:22:
         2c:20:4f:26:2f:9d:60:34:c3:5a:c6:e0:a8:00:47:bf:c7:84:
         98:a5:73:3f:20:dd:fe:5f:c8:0d:20:05:44:d6:65:37:be:e7:
         62:96:d7:74:ac:c9:4d:a6:aa:92:c9:7d:af:3d:76:a5:70:43:
         d5:5c:e2:d0:e6:1e:ac:4d:8a:ac:5e:fb:b9:47:59:e1:53:ed:
         f1:55:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 04:33:55 2026 by rpki-client