Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS150293.roa
File:                     AS150293.roa (raw, json)
Hash identifier:          swh2qsIstuLiFsx27A+Sb0GfljsSA+kJZmysY2eUErA=
Subject key identifier:   E1:D9:9A:16:AD:95:BE:A9:47:6B:2A:90:6B:4A:FF:DC:05:E1:6E:93
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       23C639283CF51F19AC753681B051FD65725B6A21
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS150293.roa
Signing time:             Fri 27 Mar 2026 08:36:48 +0000
ROA not before:           Fri 27 Mar 2026 08:31:48 +0000
ROA not after:            Fri 26 Mar 2027 08:36:48 +0000
asID:                     150293
IP address blocks:        40.183.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 10:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c6:39:28:3c:f5:1f:19:ac:75:36:81:b0:51:fd:65:72:5b:6a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 27 08:31:48 2026 GMT
            Not After : Mar 26 08:36:48 2027 GMT
        Subject: CN=E1D99A16AD95BEA9476B2A906B4AFFDC05E16E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:b1:d9:f6:c6:63:d0:53:b3:02:95:36:bf:
                    ab:6b:3e:ea:93:d4:13:d6:95:b4:88:6d:b3:ea:61:
                    8b:0a:dc:4a:84:65:d3:73:72:2a:d9:eb:eb:d2:99:
                    62:38:85:5b:98:53:34:61:1d:87:fb:5a:47:89:c5:
                    1e:bf:54:cb:1c:e7:93:c7:09:64:b9:27:ae:3d:46:
                    f3:65:da:04:02:ec:bc:1d:cd:7b:34:8b:0e:6d:45:
                    49:1c:34:b1:76:b2:47:6b:9f:76:86:c8:a8:9a:bb:
                    b7:a3:f0:7a:e2:06:db:72:3b:50:bd:48:b7:06:8c:
                    bc:44:75:8a:83:91:a2:19:65:66:c7:f8:16:97:52:
                    3a:ef:66:7b:56:e3:8e:8d:e0:38:99:2a:af:38:53:
                    08:3d:e4:2a:37:5b:52:4c:a0:41:ab:c4:db:48:f4:
                    e1:6d:0f:05:13:ba:9d:43:80:f3:4f:82:3f:5e:cc:
                    78:86:68:ab:64:de:f1:70:ee:a9:85:b0:a3:ad:4a:
                    cd:8a:21:76:bf:f5:4d:60:f3:0f:19:65:35:ff:e8:
                    c8:2a:82:59:e6:76:24:f6:1e:0a:64:a3:1b:03:6b:
                    ec:1a:8f:2d:7c:ed:90:20:72:81:da:95:57:49:0b:
                    b3:29:ea:d5:bc:28:4f:8b:03:8d:20:1f:12:b1:22:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D9:9A:16:AD:95:BE:A9:47:6B:2A:90:6B:4A:FF:DC:05:E1:6E:93
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS150293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:52:a2:25:75:0a:88:b6:32:fe:d2:f3:33:2b:40:db:0b:
         06:58:e7:4f:72:23:65:53:b8:1f:ae:c2:c0:56:7f:4c:0f:06:
         5d:79:e3:76:65:97:96:2a:28:68:86:4e:36:d1:d3:75:e3:35:
         bb:7f:16:dc:1d:3e:2b:76:85:81:ab:19:75:2e:2c:85:c0:b2:
         26:25:e8:6d:dc:58:c3:e5:5b:07:27:9f:f9:72:6c:4a:32:5b:
         ad:3e:2e:8f:24:d2:55:98:62:8f:21:ef:3c:8f:87:dc:e0:6e:
         b4:f1:86:ce:77:c6:29:cf:37:ca:e7:32:93:fb:33:0d:e8:f9:
         4e:3b:17:05:72:2d:13:44:d9:0b:dc:c4:ad:57:b7:dd:61:5d:
         55:19:f4:f7:5a:88:e1:fd:20:c4:88:73:78:ad:4b:fc:8f:c6:
         29:8d:b4:5a:a4:0d:20:5c:2c:9a:bd:3b:78:9e:38:b3:a6:4e:
         ad:35:16:49:30:11:86:f0:24:cd:2a:3e:77:40:a6:d7:0f:cc:
         eb:a8:fa:76:e5:6c:ce:03:31:d8:83:26:b6:16:c7:ea:5f:bc:
         c1:ea:73:5b:e6:64:35:ac:4f:6a:e9:de:3d:60:96:81:6a:4e:
         55:a1:35:d6:90:63:f1:ef:6c:a5:dd:9c:6b:0b:71:47:ad:fd:
         1d:9e:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:59 2026 by rpki-client