Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS15830.roa
File:                     AS15830.roa (raw, json)
Hash identifier:          GtItCVJZ1cTybBBhDSMVZzl5tuHXQC9h3Exha9Z5Q3s=
Subject key identifier:   38:25:BB:D8:5B:65:0B:9E:F0:D0:96:FE:CF:E3:5F:73:65:69:BE:E7
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       222A5C1046A443A156F1B2255B10762524F9CEAD
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS15830.roa
Signing time:             Tue 10 Mar 2026 17:09:07 +0000
ROA not before:           Tue 10 Mar 2026 17:04:07 +0000
ROA not after:            Tue 09 Mar 2027 17:09:07 +0000
asID:                     15830
IP address blocks:        40.27.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:5c:10:46:a4:43:a1:56:f1:b2:25:5b:10:76:25:24:f9:ce:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 10 17:04:07 2026 GMT
            Not After : Mar  9 17:09:07 2027 GMT
        Subject: CN=3825BBD85B650B9EF0D096FECFE35F736569BEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:ac:bc:3f:f5:b1:ec:af:10:09:83:9f:c6:
                    92:80:57:55:cf:ed:27:01:ea:0f:c3:0b:6c:1e:19:
                    b8:a7:a7:aa:27:3f:10:e9:05:6a:ae:9a:ad:ce:f4:
                    13:75:51:ad:2e:df:1b:63:f2:ca:d0:22:50:74:70:
                    e7:5b:12:de:bc:55:80:fb:a4:76:ea:66:d5:a9:46:
                    d0:bf:06:d9:b9:58:9f:75:2e:58:bf:6c:1a:7a:28:
                    5d:63:b7:4a:06:be:c4:bb:28:80:d7:36:bd:2c:75:
                    ed:12:3c:8b:c4:52:da:ac:2f:ca:32:69:39:ea:6e:
                    42:c1:b1:a5:a6:cf:9f:38:a8:08:61:5b:77:08:17:
                    60:4e:b4:99:50:7a:01:6a:45:af:8b:e2:85:19:20:
                    c1:a2:19:13:12:42:cf:07:53:d0:95:cc:c8:83:1b:
                    cf:95:79:6d:a1:c8:72:76:76:3b:b1:74:2f:70:15:
                    bd:c9:a6:7a:2e:d6:6b:5d:6a:6f:4c:35:6c:14:2e:
                    4e:c2:f5:23:28:37:b8:1a:55:31:f7:67:f4:6e:0f:
                    36:25:ee:40:0f:f5:37:62:e7:46:e1:85:a6:33:c8:
                    00:8e:28:de:0e:ab:e7:59:b4:c2:56:a5:c1:0f:ab:
                    9d:7e:68:0f:64:b7:d4:44:0e:d9:b2:c7:0d:26:c5:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:25:BB:D8:5B:65:0B:9E:F0:D0:96:FE:CF:E3:5F:73:65:69:BE:E7
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS15830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:79:ab:d8:b6:8a:f5:72:97:4d:c6:00:84:17:78:45:b9:e8:
         e0:45:37:4f:eb:45:f5:a0:7b:52:da:6b:7a:dc:de:a5:2b:6f:
         27:46:31:ad:33:fa:10:f4:00:f3:49:e3:bc:83:e8:58:a2:c5:
         d5:c7:c8:ff:f1:da:d1:76:46:34:7f:00:08:3f:f4:c8:0d:b5:
         79:a0:08:b7:fa:fb:5a:c7:ed:29:46:0c:59:46:3a:bc:f4:14:
         b6:ce:b4:ef:47:b2:94:95:70:55:42:f2:cb:f1:aa:47:f6:1d:
         97:25:46:6f:2d:f1:c7:21:17:1a:34:5a:3b:db:2b:46:c1:2d:
         f5:e1:ae:26:64:6a:68:a7:b8:14:e7:2b:48:09:52:2e:77:47:
         1a:26:2a:41:7d:83:7d:32:ac:50:36:c5:40:a2:03:17:74:40:
         e2:3d:33:26:fb:79:0a:55:a6:07:e4:39:e6:e5:c3:9f:4b:5a:
         8f:b7:2c:07:ba:67:9b:a3:ea:54:ba:fe:01:7f:83:c3:07:ff:
         a6:9d:c9:0d:9d:65:f2:b7:11:1d:61:f2:9c:88:f2:38:2a:0d:
         e8:4e:4b:c7:fb:fa:22:59:f0:69:70:96:d2:46:a1:a5:0b:c3:
         5e:98:01:97:2f:fa:36:d7:13:51:40:5c:d6:fe:5c:aa:ff:60:
         a2:29:8d:2a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUIipcEEakQ6FW8bIlWxB2JST5zq0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzEwMTcwNDA3WhcNMjcwMzA5MTcwOTA3
WjAzMTEwLwYDVQQDEygzODI1QkJEODVCNjUwQjlFRjBEMDk2RkVDRkUzNUY3MzY1
NjlCRUU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tSsvD/1seyv
EAmDn8aSgFdVz+0nAeoPwwtsHhm4p6eqJz8Q6QVqrpqtzvQTdVGtLt8bY/LK0CJQ
dHDnWxLevFWA+6R26mbVqUbQvwbZuVifdS5Yv2waeihdY7dKBr7EuyiA1za9LHXt
EjyLxFLarC/KMmk56m5CwbGlps+fOKgIYVt3CBdgTrSZUHoBakWvi+KFGSDBohkT
EkLPB1PQlczIgxvPlXltochydnY7sXQvcBW9yaZ6LtZrXWpvTDVsFC5OwvUjKDe4
GlUx92f0bg82Je5AD/U3YudG4YWmM8gAjijeDqvnWbTCVqXBD6udfmgPZLfURA7Z
sscNJsVEvQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDglu9hbZQue8NCW/s/jX3Nl
ab7nMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE1ODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKBtGMA0GCSqGSIb3DQEBCwUAA4IB
AQAWeavYtor1cpdNxgCEF3hFuejgRTdP60X1oHtS2mt63N6lK28nRjGtM/oQ9ADz
SeO8g+hYosXVx8j/8drRdkY0fwAIP/TIDbV5oAi3+vtax+0pRgxZRjq89BS2zrTv
R7KUlXBVQvLL8apH9h2XJUZvLfHHIRcaNFo72ytGwS314a4mZGpop7gU5ytICVIu
d0caJipBfYN9MqxQNsVAogMXdEDiPTMm+3kKVaYH5Dnm5cOfS1qPtywHumebo+pU
uv4Bf4PDB/+mnckNnWXytxEdYfKciPI4Kg3oTkvH+/oiWfBpcJbSRqGlC8NemAGX
L/o21xNRQFzW/lyq/2CiKY0q
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:51 2026 by rpki-client