Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
File:                     AS53847.roa (raw, json)
Hash identifier:          bGQ2Q+c14g4v4NdGfxeRcxZAprEz5vPC4igdU+fjzNo=
Subject key identifier:   16:94:7B:9B:4F:30:40:7D:08:4D:14:7A:89:4A:87:DC:8C:B8:1D:63
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       69A055FA227F3ECEDA2CFF8E48D710163B21B129
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
Signing time:             Mon 06 Jul 2026 22:29:10 +0000
ROA not before:           Mon 06 Jul 2026 22:24:10 +0000
ROA not after:            Mon 05 Jul 2027 22:29:10 +0000
asID:                     53847
IP address blocks:        162.248.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 09:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a0:55:fa:22:7f:3e:ce:da:2c:ff:8e:48:d7:10:16:3b:21:b1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jul  6 22:24:10 2026 GMT
            Not After : Jul  5 22:29:10 2027 GMT
        Subject: CN=16947B9B4F30407D084D147A894A87DC8CB81D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:d0:87:c9:39:91:36:d4:5f:c7:55:77:22:
                    35:b0:ec:f2:80:39:92:30:28:db:d5:cc:0d:30:26:
                    d8:78:4a:07:1d:80:f6:f1:2a:f3:dc:e4:84:47:7f:
                    ba:5b:8f:93:15:bd:98:aa:b4:6b:eb:5d:83:68:97:
                    bc:18:99:1f:fb:6b:34:15:5b:7c:30:d5:64:dd:a6:
                    e6:bc:e8:d4:ca:c6:21:fd:31:bd:10:ca:c4:81:b1:
                    52:5e:17:72:6c:d1:3c:89:d4:bd:54:dd:e9:a9:94:
                    ed:b3:1a:72:d8:fa:50:8a:e9:e4:36:0f:76:92:92:
                    03:c1:21:f7:08:e8:49:ae:61:a4:e8:65:f3:9b:da:
                    de:ad:61:e7:f4:76:6d:60:d0:5d:8a:e0:16:21:f6:
                    cc:53:2d:39:0a:e7:0c:4b:3e:1b:e1:08:9d:b0:32:
                    e5:05:5e:c2:02:1b:d3:74:cb:79:66:90:9e:b9:79:
                    89:3b:f7:cf:24:4a:d9:8f:20:2c:0b:0d:ff:69:53:
                    c4:0e:2a:89:fb:64:fc:2e:2b:d6:a1:aa:13:7b:2a:
                    ff:6d:2d:9b:c0:3a:77:c1:4c:d7:4e:91:68:23:61:
                    d7:7f:d4:a8:cf:7a:f0:a2:60:b0:0d:74:e6:0f:9c:
                    5d:fb:84:6f:6c:56:5e:29:f9:94:f0:70:2a:66:55:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:94:7B:9B:4F:30:40:7D:08:4D:14:7A:89:4A:87:DC:8C:B8:1D:63
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:55:89:bb:78:da:89:c3:fd:94:f2:9c:7d:a1:4e:18:22:
         e0:4d:75:63:78:cc:b5:c6:fb:b2:60:15:bb:f2:4d:30:7d:f7:
         4b:91:fd:92:78:a4:7d:99:64:22:e6:63:5f:e3:83:f1:c0:9f:
         4e:a4:d4:f1:b0:de:82:80:4c:44:e0:2d:24:50:b0:42:8a:94:
         09:06:74:ea:86:ea:36:3c:90:23:aa:5d:f9:40:1d:bc:fe:59:
         00:6a:99:17:44:92:34:79:e1:d1:d0:cd:4e:c5:2b:ea:4e:c8:
         1e:19:43:00:16:ad:9e:13:57:02:f3:3b:a3:b8:8b:26:69:36:
         01:1c:1d:b2:ed:c3:13:b6:1d:70:dc:57:29:16:92:0a:8b:b4:
         88:28:c2:73:ed:57:b5:cd:1e:c4:44:98:46:c1:0d:4c:08:8b:
         45:2a:b8:8d:43:49:16:62:fc:b3:d4:fd:05:44:a4:c9:2c:68:
         b3:64:f7:18:9c:51:90:a6:70:7f:5d:09:fc:2e:c6:68:6b:b9:
         d1:f0:7f:f6:4e:5e:06:a3:b7:04:31:8d:68:c9:c1:67:6e:83:
         c5:f8:54:9a:78:b5:2c:dc:22:fe:6d:4e:25:4d:86:ed:a8:f3:
         83:30:48:97:72:e1:c2:97:64:44:87:3f:d7:3f:36:a4:18:7a:
         33:41:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:43:24 2026 by rpki-client