Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203054.roa
File:                     AS203054.roa (raw, json)
Hash identifier:          X4pf7DaKcQ4GY8jnZjmizuTG0Q12/3GcADcyMyPDUSA=
Subject key identifier:   15:F9:42:91:57:8F:CE:D3:A0:EF:77:F7:34:9C:69:B7:49:40:35:83
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       7DFC2FF0A89DE431AB48B54C0B19BE7AB548B71C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203054.roa
Signing time:             Sat 28 Mar 2026 04:29:57 +0000
ROA not before:           Sat 28 Mar 2026 04:24:57 +0000
ROA not after:            Sat 27 Mar 2027 04:29:57 +0000
asID:                     203054
IP address blocks:        40.183.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 10:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fc:2f:f0:a8:9d:e4:31:ab:48:b5:4c:0b:19:be:7a:b5:48:b7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 28 04:24:57 2026 GMT
            Not After : Mar 27 04:29:57 2027 GMT
        Subject: CN=15F94291578FCED3A0EF77F7349C69B749403583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:3f:51:43:9e:16:66:80:f8:d3:d0:0e:c3:
                    38:6c:dd:82:b9:b8:74:44:6a:d4:fb:5b:b1:c4:64:
                    06:3d:73:b6:cc:9e:44:87:d9:9b:e6:64:86:9b:f5:
                    32:05:a0:2e:13:dd:59:a0:bf:e3:5a:45:12:19:5c:
                    84:fc:bc:16:cd:1f:1d:f4:97:28:07:6a:2c:a3:71:
                    41:c7:c8:98:88:73:55:fd:c2:45:4d:ff:54:6e:a1:
                    c5:75:88:1f:ee:99:38:91:fb:d3:c7:2c:45:8c:eb:
                    7d:8a:fe:85:0b:d0:fd:2c:d2:f5:05:fb:45:5e:b7:
                    ac:ce:74:e6:ac:41:b3:91:2a:11:d9:65:29:ff:4c:
                    e2:a2:a7:1e:95:eb:bf:29:af:6d:3c:60:99:ad:04:
                    f6:6d:33:e1:c9:38:59:39:c2:45:9f:a1:04:85:2c:
                    3d:05:e9:53:59:e0:32:9c:a2:14:7f:a7:59:0d:a0:
                    8f:f0:53:c3:4f:0d:25:f2:6c:c8:46:17:20:38:1c:
                    3d:47:bb:49:4d:ba:b8:9c:3b:5c:40:67:97:15:84:
                    94:bd:09:c9:40:37:f1:ec:6e:fd:3b:b0:a7:57:b6:
                    bf:72:18:69:1c:fc:75:56:2b:bc:34:ec:d2:91:3a:
                    ea:d5:ec:4d:13:eb:4d:74:e9:99:59:92:27:63:34:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:42:91:57:8F:CE:D3:A0:EF:77:F7:34:9C:69:B7:49:40:35:83
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:09:79:d6:f7:f5:f5:5a:b5:5d:cc:4d:42:c1:d3:c5:51:
         a2:32:02:f0:9d:c8:16:9e:c8:92:2a:a2:f9:a7:55:e9:b2:59:
         c3:ca:02:07:98:86:1d:9c:2b:ca:94:9b:05:3e:96:98:24:d1:
         fb:d4:7b:2c:ff:1b:9f:f9:31:0e:8e:8c:6a:3f:19:24:c0:4c:
         7e:9e:2c:e7:e9:c6:e9:47:e7:df:c6:90:68:61:ba:f4:e1:d5:
         4e:42:a3:b4:13:21:0a:08:55:e6:31:df:7e:87:6a:84:5e:d4:
         5e:eb:d4:cd:72:b7:d0:70:2c:72:1a:8a:65:a4:53:1b:54:99:
         55:14:97:df:15:9a:5e:26:4b:f2:66:de:30:6c:af:50:8f:34:
         7c:c5:46:26:82:e5:47:90:72:6d:dc:02:95:c4:64:7c:4d:3c:
         8c:11:ee:22:89:2f:5b:7d:0f:6f:b4:21:fc:ca:fe:ab:95:2b:
         27:7d:b7:ee:32:ef:77:6f:5b:8a:53:f3:4d:46:c8:08:41:b3:
         31:44:83:c9:d5:70:94:43:5b:fd:4e:66:3d:d8:72:ae:c1:0d:
         4b:51:a8:98:ef:13:83:66:2f:03:c4:78:77:f3:36:ff:02:b9:
         78:f7:81:83:d1:ea:71:fb:d8:50:e4:46:b0:23:56:9d:27:79:
         80:e5:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:58 2026 by rpki-client