Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          XvVRfvMhlir0s+7Or5aX7ki6lqg6wSv4vKz5SpOD5e4=
Subject key identifier:   B9:82:07:34:28:80:A2:65:AF:31:42:3B:D6:FA:9D:D2:FE:BB:56:DC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1243CECAB861CD6ACE6D41E13B9D68D212426EC5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8075.roa
Signing time:             Tue 30 Jun 2026 15:04:21 +0000
ROA not before:           Tue 30 Jun 2026 14:59:21 +0000
ROA not after:            Tue 29 Jun 2027 15:04:21 +0000
asID:                     8075
IP address blocks:        157.254.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 17:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:43:ce:ca:b8:61:cd:6a:ce:6d:41:e1:3b:9d:68:d2:12:42:6e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 30 14:59:21 2026 GMT
            Not After : Jun 29 15:04:21 2027 GMT
        Subject: CN=B98207342880A265AF31423BD6FA9DD2FEBB56DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:e6:ad:47:2b:80:6d:73:be:12:45:af:cb:
                    75:9b:89:ba:80:9a:78:d5:af:c2:7a:3f:76:79:f9:
                    53:b4:b8:2b:84:f9:05:b1:aa:a7:72:d2:51:01:f9:
                    07:79:54:b9:e1:00:1b:f8:97:fa:a4:e2:b9:b6:a3:
                    b8:69:ce:c5:ad:d8:ef:61:bf:db:59:0a:4a:8e:fa:
                    2d:11:fd:1e:43:75:8d:3e:96:e7:e7:f6:5a:61:5e:
                    22:93:8b:28:8d:30:d3:e3:15:6f:3b:1e:0c:00:1f:
                    be:ef:ed:e2:b8:85:73:70:3a:1f:9c:32:62:e6:6a:
                    37:49:0e:65:7e:96:30:eb:53:d0:a1:ad:7d:10:3f:
                    f3:9f:8d:08:30:b9:14:47:a2:2f:49:2b:b0:d5:70:
                    4c:33:df:1f:d6:4b:e0:ac:4f:9e:9e:a6:f3:a4:3e:
                    40:cb:e4:dc:aa:91:c9:0f:74:5b:9b:ad:82:c5:64:
                    ed:75:26:0e:12:84:27:5b:49:67:ae:a9:20:ad:6a:
                    33:d1:fe:d2:14:c8:55:43:1f:6c:0d:26:cc:bb:8d:
                    7b:03:24:cf:d9:4a:93:46:70:b0:f8:3a:2e:b7:71:
                    d8:f7:35:2a:ca:52:d9:fe:be:a4:88:85:8c:52:71:
                    4d:01:14:3a:fc:61:fe:a8:31:62:c5:e6:b0:5d:4d:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:07:34:28:80:A2:65:AF:31:42:3B:D6:FA:9D:D2:FE:BB:56:DC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b5:59:4c:22:b9:c5:60:c7:7c:a9:66:a1:14:50:45:f8:75:
         41:e1:b9:2b:30:0f:d5:1a:c9:35:5f:33:79:64:46:bc:09:06:
         23:46:f9:a0:4f:1f:da:05:9b:f6:eb:26:dc:83:17:30:63:68:
         8a:2f:c1:ad:4c:87:35:e9:a7:37:57:cc:70:8f:22:3c:9f:68:
         b0:d8:2a:30:1c:9f:99:5e:9c:a7:84:b4:1b:e1:e5:fd:e1:ed:
         6a:96:52:de:8e:6b:78:76:31:45:26:6f:14:f2:7a:3b:9b:9f:
         2c:cb:e7:78:23:8d:31:63:d7:6e:d2:35:98:97:96:de:d8:57:
         dc:87:c8:72:b8:94:4c:b9:8b:62:f7:ea:b5:61:72:da:a5:ac:
         91:b4:e2:32:0a:cb:ae:4f:a6:91:60:01:13:9e:66:e5:61:38:
         5f:c4:69:31:69:19:2e:97:27:32:9a:95:54:0b:03:6d:8e:ea:
         3b:ee:ad:1e:de:39:ab:69:0d:8e:7f:5d:c0:9c:4b:d5:a6:10:
         d9:98:05:b6:90:1e:f5:1a:35:88:e7:dc:91:c1:5c:6f:fd:9e:
         6e:e0:a8:83:ed:a9:ef:1b:fa:15:ab:38:16:46:f9:8a:8d:54:
         47:c9:28:ff:27:3b:0d:20:50:bf:9f:d1:73:55:c8:26:77:70:
         ce:13:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:15:26 2026 by rpki-client