Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS146813.roa
File:                     AS146813.roa (raw, json)
Hash identifier:          vm0X5JdvhxRM9F1Y0T4W01neHvaMvvy87UhGe/7nJgQ=
Subject key identifier:   CB:A6:D5:98:CE:9F:65:00:97:D9:23:12:4F:58:A3:90:A6:34:25:88
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5ADA44B2D59BD2A7B7041138BEE5A74EDFCC98BE
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS146813.roa
Signing time:             Thu 24 Sep 2026 16:49:29 +0000
ROA not before:           Thu 24 Sep 2026 16:44:29 +0000
ROA not after:            Thu 23 Sep 2027 16:49:29 +0000
asID:                     146813
IP address blocks:        40.223.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:da:44:b2:d5:9b:d2:a7:b7:04:11:38:be:e5:a7:4e:df:cc:98:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 24 16:44:29 2026 GMT
            Not After : Sep 23 16:49:29 2027 GMT
        Subject: CN=CBA6D598CE9F650097D923124F58A390A6342588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:1a:34:5a:85:74:ac:01:6a:4d:a2:0a:21:
                    df:1c:a7:75:d3:36:dd:55:38:f2:ca:49:ea:ea:8b:
                    a1:81:a7:37:b4:2b:35:39:fa:df:09:53:c8:1c:d3:
                    eb:0f:54:bb:eb:72:19:27:0a:f0:b9:96:c2:cc:9c:
                    cd:94:f2:a3:aa:4c:56:8a:ab:f6:01:e0:c1:26:2a:
                    0d:2e:7c:c1:5b:cb:d4:5a:0e:4b:6b:67:5b:1f:8f:
                    43:74:5d:6e:d5:34:10:8e:04:60:d9:0b:c0:48:2f:
                    0b:a4:7d:b9:a0:5b:d6:ba:68:e8:79:89:3b:7a:1e:
                    5b:dc:21:68:b5:74:85:aa:2f:b5:ef:9b:20:4b:e7:
                    a9:ba:45:f0:70:ab:50:b6:e8:96:74:68:8a:81:6e:
                    ad:95:07:48:cd:35:a6:46:a2:27:1f:6d:e4:0d:bc:
                    92:c9:22:40:9b:2c:b3:e0:9d:fc:c5:cc:b9:2b:d0:
                    fb:0c:8d:b0:d3:6d:71:da:44:ef:d8:8f:c1:ef:11:
                    20:7c:4a:2d:a6:5e:fd:37:18:fa:42:c2:7a:d1:d7:
                    19:80:7e:a3:5e:bb:c0:d7:ea:45:32:91:0d:ff:ec:
                    74:ce:75:e7:6e:41:eb:94:5f:2a:35:c2:d4:b4:b8:
                    46:57:a9:d0:f2:73:5d:90:af:b8:37:b8:be:c3:6d:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A6:D5:98:CE:9F:65:00:97:D9:23:12:4F:58:A3:90:A6:34:25:88
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS146813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:37:e8:20:37:63:8f:99:9d:1a:78:c3:8e:27:d1:88:58:92:
         2e:57:89:54:c6:97:50:8f:01:ff:57:39:c8:88:ab:87:4e:20:
         18:fb:81:6a:5f:6c:0d:bd:4d:a4:f0:9b:1a:b2:f9:9a:a5:f7:
         60:7b:b5:b0:f9:2b:8e:c0:4e:92:a4:2f:a9:e0:e9:2f:95:2f:
         db:04:c4:6e:a5:65:68:06:96:a7:58:1c:1a:8b:60:30:83:ec:
         91:2d:bc:11:17:70:ba:f7:0a:5d:1f:f3:cc:84:65:ba:e3:ea:
         e0:5f:00:93:4f:33:ef:fa:4d:42:3b:19:f5:0f:d8:eb:ee:f3:
         7b:cd:3d:7f:0a:75:2f:52:86:ae:58:1b:82:2a:48:38:8d:09:
         75:46:7d:a7:31:37:b0:2a:05:5f:77:54:b2:57:b0:76:5d:9b:
         71:40:b6:77:be:6b:86:df:e1:5e:45:77:e6:da:db:6a:da:88:
         10:b8:d2:ec:10:90:52:c6:a1:a3:41:ee:ca:87:b0:40:2f:70:
         d6:db:45:35:e2:65:7a:6f:4d:06:5c:a0:70:bd:06:42:dc:76:
         d9:54:76:39:40:0b:11:2f:14:1a:62:3c:e6:a0:b3:78:88:eb:
         2c:5b:e3:ba:fc:d1:b7:ce:81:12:48:2b:bc:ce:27:fe:c6:a6:
         bf:e9:0c:98
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWtpEstWb0qe3BBE4vuWnTt/MmL4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTI0MTY0NDI5WhcNMjcwOTIzMTY0OTI5
WjAzMTEwLwYDVQQDEyhDQkE2RDU5OENFOUY2NTAwOTdEOTIzMTI0RjU4QTM5MEE2
MzQyNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQMaNFqFdKwB
ak2iCiHfHKd10zbdVTjyyknq6ouhgac3tCs1OfrfCVPIHNPrD1S763IZJwrwuZbC
zJzNlPKjqkxWiqv2AeDBJioNLnzBW8vUWg5La2dbH49DdF1u1TQQjgRg2QvASC8L
pH25oFvWumjoeYk7eh5b3CFotXSFqi+175sgS+epukXwcKtQtuiWdGiKgW6tlQdI
zTWmRqInH23kDbySySJAmyyz4J38xcy5K9D7DI2w021x2kTv2I/B7xEgfEotpl79
Nxj6QsJ60dcZgH6jXrvA1+pFMpEN/+x0znXnbkHrlF8qNcLUtLhGV6nQ8nNdkK+4
N7i+w20aGQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMum1ZjOn2UAl9kjEk9Yo5Cm
NCWIMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE0NjgxMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACjf8zANBgkqhkiG9w0BAQsFAAOC
AQEAFDfoIDdjj5mdGnjDjifRiFiSLleJVMaXUI8B/1c5yIirh04gGPuBal9sDb1N
pPCbGrL5mqX3YHu1sPkrjsBOkqQvqeDpL5Uv2wTEbqVlaAaWp1gcGotgMIPskS28
ERdwuvcKXR/zzIRluuPq4F8Ak08z7/pNQjsZ9Q/Y6+7ze809fwp1L1KGrlgbgipI
OI0JdUZ9pzE3sCoFX3dUslewdl2bcUC2d75rht/hXkV35trbatqIELjS7BCQUsah
o0HuyoewQC9w1ttFNeJlem9NBlygcL0GQtx22VR2OUALES8UGmI85qCzeIjrLFvj
uvzRt86BEkgrvM4n/samv+kMmA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:01 2026 by rpki-client