Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          QB2xbDsvZRdS2lEhRwCk/oG45986nBPI7MHbNgx93oI=
Subject key identifier:   8B:DD:E1:8B:88:88:90:A2:1D:DC:31:8B:54:1B:7F:0F:A4:4C:34:CB
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3C3366A0FC8293A3A83E746FAE1FD92BA9FB4734
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS174.roa
Signing time:             Fri 20 Mar 2026 15:38:50 +0000
ROA not before:           Fri 20 Mar 2026 15:33:50 +0000
ROA not after:            Fri 19 Mar 2027 15:38:50 +0000
asID:                     174
IP address blocks:        40.183.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:33:66:a0:fc:82:93:a3:a8:3e:74:6f:ae:1f:d9:2b:a9:fb:47:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 20 15:33:50 2026 GMT
            Not After : Mar 19 15:38:50 2027 GMT
        Subject: CN=8BDDE18B888890A21DDC318B541B7F0FA44C34CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:30:c5:57:79:da:c2:5e:a1:28:93:3b:f7:
                    47:ff:71:26:67:02:28:1f:98:33:ab:b0:8f:9a:2f:
                    b6:33:e1:bb:7c:f1:dd:80:b9:7e:d2:a8:7b:c3:84:
                    1b:3c:11:44:fb:1d:db:d0:8f:53:cc:0e:62:6c:58:
                    bd:8f:dc:93:04:e6:97:b9:dc:1a:ac:ff:c0:f8:25:
                    e1:ce:18:9d:37:7e:01:5c:49:a7:3e:d5:4a:44:07:
                    e6:56:af:cc:69:ae:2e:3b:7e:30:7a:9d:b2:a8:45:
                    a6:3d:df:d7:ff:0c:04:6b:eb:a6:a4:b0:42:6f:77:
                    9f:1c:00:4c:5d:c7:f6:ec:e4:2d:e7:8b:f4:e7:c1:
                    2a:ad:dc:da:5c:12:b1:2e:48:eb:b7:e3:86:75:bc:
                    56:0a:5a:f7:09:cd:4c:b3:62:b3:26:16:0c:09:14:
                    4d:bb:5d:bb:48:0e:04:11:39:5a:88:00:6a:c8:0a:
                    0c:aa:92:f2:b4:3f:b8:b7:59:63:04:74:63:86:b1:
                    19:0a:b9:76:47:39:82:32:1c:d5:ca:28:07:72:9d:
                    48:e8:56:dd:38:42:04:70:c2:93:6c:ef:0e:9f:71:
                    f6:3b:ef:2c:3b:1d:c6:f8:8f:61:43:e8:3c:10:40:
                    ab:e4:3d:3e:a9:a1:13:c5:e7:d8:e5:74:58:b1:bd:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DD:E1:8B:88:88:90:A2:1D:DC:31:8B:54:1B:7F:0F:A4:4C:34:CB
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:97:d3:29:f5:03:a8:d6:c5:6a:0a:72:18:12:07:2d:67:
         d9:23:59:cc:2f:3e:e2:61:b4:ca:68:4f:11:f1:da:ed:71:62:
         6c:59:80:60:e2:09:d5:b2:00:d0:eb:69:d0:94:ea:76:ba:c1:
         d6:a9:b7:ee:bc:4e:85:f0:d9:ce:5b:56:81:09:ce:88:12:4f:
         92:06:45:ab:87:74:9d:91:cf:98:8c:47:84:25:e0:34:f2:0c:
         a9:74:eb:17:a5:ca:fe:16:0d:b5:7b:05:c9:d7:42:5b:0a:a8:
         6a:53:6c:bb:39:a0:90:39:21:44:b2:61:6b:dd:64:c4:41:e9:
         ab:d8:23:ea:ce:50:be:0a:aa:0c:61:b1:cc:e3:92:69:32:5e:
         7b:88:25:98:b7:5f:85:7a:d3:1f:01:9b:6b:81:43:ec:4c:98:
         53:39:95:14:f3:82:68:21:fb:40:df:a3:3c:a2:94:2c:c6:e1:
         5b:9e:d7:e9:c5:f3:4f:3f:2b:7c:aa:f2:cd:70:1f:da:71:b1:
         95:6f:15:6f:72:65:ad:ce:02:06:2e:f7:63:85:1e:0f:41:2f:
         e8:2b:31:c3:20:96:de:13:bb:12:68:c7:fb:8d:a1:7a:03:62:
         c6:f0:63:6f:e4:6e:3f:4a:c3:b2:7e:98:c5:05:95:a4:a9:22:
         20:41:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:46 2026 by rpki-client