Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
File:                     AS996.roa (raw, json)
Hash identifier:          Qmt4AM+3vJcc5F8lENZs6yfJiN0Ir26slmQJA1nlr/Q=
Subject key identifier:   6C:A5:90:83:A0:BA:1A:E7:39:17:94:8F:E0:32:3B:3B:A9:59:91:7F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4ECA83DD3821517A2528E6BF3A9CD164C2DB5BA7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
Signing time:             Wed 14 May 2025 11:58:49 +0000
ROA not before:           Wed 14 May 2025 11:53:49 +0000
ROA not after:            Wed 13 May 2026 11:58:49 +0000
asID:                     996
IP address blocks:        157.254.34.0/23 maxlen: 24
                          157.254.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ca:83:dd:38:21:51:7a:25:28:e6:bf:3a:9c:d1:64:c2:db:5b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 14 11:53:49 2025 GMT
            Not After : May 13 11:58:49 2026 GMT
        Subject: CN=6CA59083A0BA1AE73917948FE0323B3BA959917F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:9c:74:6a:d6:2e:4f:f2:9d:62:0d:b6:5b:
                    02:4f:b2:cd:b0:c2:f1:da:be:ea:67:59:dc:32:d5:
                    e2:20:a1:24:f4:83:0c:9a:30:80:37:62:a4:5e:9d:
                    b9:ac:cd:c2:e4:4e:b4:b5:34:13:e0:e3:b2:46:45:
                    c9:d7:66:0a:ab:c2:dd:87:c5:73:3d:4b:6b:07:4f:
                    59:b0:f7:0b:c2:3e:50:c9:4e:22:a8:85:50:31:68:
                    9b:3d:33:99:83:9b:d3:c4:54:d7:fa:9d:97:e1:09:
                    d1:02:e7:12:79:2b:56:bd:ad:b9:bd:22:5c:8d:f1:
                    35:e7:69:e4:6a:4d:c1:41:23:6b:4b:17:6b:29:26:
                    ca:b1:c9:05:06:6c:48:7a:ee:b9:0b:67:a5:1c:e9:
                    97:df:dd:4c:26:55:97:66:16:54:69:18:90:f2:9d:
                    2b:7e:19:ab:54:1f:ab:6e:76:2a:9a:1a:45:ed:07:
                    3c:e1:d2:5c:a1:29:40:a2:af:f5:81:70:37:85:9e:
                    0f:1d:43:fb:75:f8:dc:07:1c:33:b8:65:66:a6:70:
                    b0:fc:6f:77:96:2e:86:55:74:9f:e4:dc:84:69:0a:
                    12:ce:12:2d:8d:98:16:28:7f:92:d9:05:93:94:08:
                    db:da:71:a4:15:90:16:26:71:81:c6:1c:cd:56:47:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A5:90:83:A0:BA:1A:E7:39:17:94:8F:E0:32:3B:3B:A9:59:91:7F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.34.0/23
                  157.254.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:f2:35:fe:a4:3f:1c:65:1c:04:4f:46:ee:67:4c:43:b1:b7:
         08:35:5f:ee:bb:93:42:01:1e:a2:76:6e:b8:84:ae:80:53:50:
         ca:b2:c6:ba:c2:7c:8a:73:13:77:29:2f:7e:4a:22:fb:9b:16:
         c0:aa:fd:14:b0:28:c2:7e:83:b9:fc:58:28:74:2a:5c:14:37:
         f1:ca:83:be:11:36:ec:59:a1:9e:80:eb:e4:cf:34:96:01:36:
         bd:32:8d:75:2f:b0:18:ac:dd:8a:ca:17:bb:cf:be:49:e6:5e:
         65:40:54:41:1d:98:74:97:3a:7b:1c:1f:84:f3:73:39:2d:18:
         35:80:8a:12:bb:a7:02:d0:a0:02:51:0d:3b:87:cf:5b:63:97:
         ae:2f:1c:e7:b1:e2:19:ff:9a:47:b6:fc:58:a5:5f:6c:7f:3d:
         4b:27:5b:c4:ef:b6:79:9c:76:59:94:72:6d:c9:15:4c:26:9f:
         dd:4f:dc:e2:b0:b7:0b:c4:7a:30:00:e0:69:c5:34:a8:73:73:
         5b:f3:2c:db:77:f1:26:d9:5f:3a:5a:34:d5:2b:39:c1:bd:1b:
         b4:4f:16:83:7a:18:dd:ec:9b:e1:7e:f8:a3:a9:a1:57:20:2e:
         19:e1:86:e5:25:15:c5:66:06:87:c0:7a:15:ad:d9:44:c5:12:
         ef:2b:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:17:33 2025 by rpki-client