Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152672.roa
File:                     AS152672.roa (raw, json)
Hash identifier:          6NbIRoBaslxKTINB/nIPjzBC2OTvPQ4l++UFeKOZhCY=
Subject key identifier:   34:1B:F5:4A:E6:0A:54:67:D3:F6:7A:D7:AA:35:7A:0F:21:8B:98:DB
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1C60139FB28E40C8F3EDC0794A02ADDFF35F66C5
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152672.roa
Signing time:             Sat 28 Mar 2026 00:04:15 +0000
ROA not before:           Fri 27 Mar 2026 23:59:15 +0000
ROA not after:            Sat 27 Mar 2027 00:04:15 +0000
asID:                     152672
IP address blocks:        40.183.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 10:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:60:13:9f:b2:8e:40:c8:f3:ed:c0:79:4a:02:ad:df:f3:5f:66:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 27 23:59:15 2026 GMT
            Not After : Mar 27 00:04:15 2027 GMT
        Subject: CN=341BF54AE60A5467D3F67AD7AA357A0F218B98DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:01:54:79:b3:49:36:7a:5a:cc:aa:9c:9d:
                    14:16:90:9b:74:ab:8b:11:6e:a6:dd:cd:8d:98:ae:
                    09:99:1b:da:81:e5:e6:90:6c:e6:b2:bd:36:55:3c:
                    43:6a:ea:3f:5a:af:bb:72:0f:a2:a5:46:8a:90:19:
                    7b:60:e9:6f:9d:4b:55:7c:6f:e0:ec:c8:7c:af:65:
                    00:79:14:8b:91:d9:ff:ac:4e:c6:bb:49:05:03:54:
                    61:20:c6:20:f7:e3:44:e1:5d:2b:69:10:80:2a:17:
                    4f:73:68:ab:a8:97:8d:e8:f9:f2:d6:2d:f9:6f:5b:
                    b1:21:ed:32:5b:c3:47:b6:ab:c3:c4:44:96:4b:46:
                    17:21:6d:28:50:e6:ec:f0:a2:d1:36:dd:97:53:91:
                    19:96:a6:0d:8e:c3:95:46:16:91:8c:77:07:4b:9f:
                    56:3e:a1:de:8e:8f:79:2b:22:61:1b:c6:89:7e:cc:
                    77:6e:24:91:45:05:4e:b6:4b:93:43:12:cf:ea:0f:
                    a0:31:6f:4b:d1:ec:29:93:1b:f0:9d:03:47:94:5b:
                    7b:c8:09:fc:0d:08:dd:f6:ec:ff:6d:20:d8:6f:ac:
                    63:59:1a:77:5b:a9:d6:9f:17:d3:25:6d:49:da:e8:
                    91:17:61:15:7e:74:c1:02:38:9d:28:de:09:20:1a:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:F5:4A:E6:0A:54:67:D3:F6:7A:D7:AA:35:7A:0F:21:8B:98:DB
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:00:9d:95:23:be:5a:68:97:a7:91:24:bb:ae:f5:ec:ec:
         2a:5d:4b:06:78:0c:96:f6:ed:ac:b6:af:ee:f8:3d:ae:86:1e:
         43:85:b7:b3:e1:9c:51:88:2b:4b:d3:48:30:13:b3:66:79:24:
         5c:c8:bd:0f:c9:fa:f8:c6:3c:a4:1f:52:e2:0a:ad:ff:3a:f8:
         c1:1f:75:16:c0:c9:74:0b:b4:d1:12:f4:bc:de:03:b2:d7:cb:
         33:d6:8c:8b:60:ba:fb:5b:3a:12:bd:d0:ae:42:c5:a1:bc:d0:
         a3:6b:b1:f1:25:c7:9d:7e:d2:3e:3c:c4:b2:77:cc:8c:8c:5f:
         a9:9d:84:5f:67:16:87:66:3f:84:10:b9:e1:c5:47:99:a2:d4:
         e6:c8:5c:52:b2:ea:92:ea:b6:aa:38:72:53:e4:8d:18:83:72:
         f7:db:e8:bf:32:cd:69:7f:80:52:b1:1e:21:35:b6:57:31:9c:
         b6:53:4b:dc:79:e1:df:38:78:7f:ab:18:7c:da:15:ca:ad:1e:
         2a:0a:5b:10:af:1e:fb:b8:99:bf:8f:1e:23:c5:bc:c7:ff:bf:
         84:2b:23:7e:f4:df:db:f5:fd:09:b8:f0:20:29:86:89:bb:8e:
         42:e4:64:07:a8:83:93:e5:ae:d6:fe:75:18:59:5b:85:af:d8:
         79:49:65:39
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUHGATn7KOQMjz7cB5SgKt3/NfZsUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzI3MjM1OTE1WhcNMjcwMzI3MDAwNDE1
WjAzMTEwLwYDVQQDEygzNDFCRjU0QUU2MEE1NDY3RDNGNjdBRDdBQTM1N0EwRjIx
OEI5OERCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm4BVHmzSTZ6
WsyqnJ0UFpCbdKuLEW6m3c2NmK4JmRvageXmkGzmsr02VTxDauo/Wq+7cg+ipUaK
kBl7YOlvnUtVfG/g7Mh8r2UAeRSLkdn/rE7Gu0kFA1RhIMYg9+NE4V0raRCAKhdP
c2irqJeN6Pny1i35b1uxIe0yW8NHtqvDxESWS0YXIW0oUObs8KLRNt2XU5EZlqYN
jsOVRhaRjHcHS59WPqHejo95KyJhG8aJfsx3biSRRQVOtkuTQxLP6g+gMW9L0ewp
kxvwnQNHlFt7yAn8DQjd9uz/bSDYb6xjWRp3W6nWnxfTJW1J2uiRF2EVfnTBAjid
KN4JIBqtMQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDQb9UrmClRn0/Z616o1eg8h
i5jbMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE1MjY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACi3ZTANBgkqhkiG9w0BAQsFAAOC
AQEAZ9cAnZUjvlpol6eRJLuu9ezsKl1LBngMlvbtrLav7vg9roYeQ4W3s+GcUYgr
S9NIMBOzZnkkXMi9D8n6+MY8pB9S4gqt/zr4wR91FsDJdAu00RL0vN4DstfLM9aM
i2C6+1s6Er3QrkLFobzQo2ux8SXHnX7SPjzEsnfMjIxfqZ2EX2cWh2Y/hBC54cVH
maLU5shcUrLqkuq2qjhyU+SNGINy99vovzLNaX+AUrEeITW2VzGctlNL3Hnh3zh4
f6sYfNoVyq0eKgpbEK8e+7iZv48eI8W8x/+/hCsjfvTf2/X9CbjwICmGibuOQuRk
B6iDk+Wu1v51GFlbha/YeUllOQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:59 2026 by rpki-client