Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa
File:                     AS396120.roa (raw, json)
Hash identifier:          NGdQJONbIiWGLZ+FeK0EQoEsQlg4NaPR0rg37OWHu6g=
Subject key identifier:   50:72:A6:1E:0F:8A:3D:DC:DF:45:F5:2A:92:96:D3:76:7D:80:AC:D5
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       31D4C02B12E2E075ADEB0B763BBA82EF1E32D363
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa
Signing time:             Mon 27 Apr 2026 18:26:00 +0000
ROA not before:           Mon 27 Apr 2026 18:21:00 +0000
ROA not after:            Mon 26 Apr 2027 18:26:00 +0000
asID:                     396120
IP address blocks:        40.183.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 15:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d4:c0:2b:12:e2:e0:75:ad:eb:0b:76:3b:ba:82:ef:1e:32:d3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 27 18:21:00 2026 GMT
            Not After : Apr 26 18:26:00 2027 GMT
        Subject: CN=5072A61E0F8A3DDCDF45F52A9296D3767D80ACD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:a0:83:10:90:7c:d4:14:20:6c:85:b3:db:
                    c1:b8:4b:37:a1:39:a7:4a:6a:5a:fb:5b:04:02:fc:
                    e0:26:21:a5:c2:99:65:38:ff:6a:00:26:42:c7:a6:
                    30:f7:c8:14:97:b7:cf:c9:c2:7e:b3:d0:88:23:58:
                    92:e9:db:23:22:df:4a:97:cd:c4:70:40:71:df:32:
                    bc:70:cd:24:7f:94:07:c5:37:ca:88:aa:5e:0d:a2:
                    4b:14:bc:ad:86:76:ac:d1:2d:e3:fb:88:42:8c:7d:
                    63:87:6c:a7:91:24:0f:e3:c8:2c:48:1c:7f:5c:cb:
                    19:8b:6b:e1:98:d0:6d:0d:e7:7d:07:42:3a:a8:0b:
                    52:8a:3d:3e:32:d3:b0:35:43:38:c8:b7:b1:3b:b1:
                    f8:97:48:32:1c:43:f5:c3:8c:74:fd:01:4c:c6:e7:
                    25:8a:d0:a5:3e:14:bb:81:7f:6b:ad:42:ab:8e:a3:
                    c5:e7:4b:c4:8b:4a:d3:79:8f:d6:83:ac:b5:bf:11:
                    db:8e:0c:a5:d5:28:a9:9e:b1:ca:ab:f5:7f:0e:cb:
                    9c:ef:46:fc:68:25:cd:6b:97:e0:0f:cb:2f:e4:49:
                    4e:82:fa:8d:2e:b9:0d:12:98:de:93:6e:ac:ad:ff:
                    fa:f5:8f:16:6f:e9:12:7b:20:66:a6:25:c8:fb:12:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:72:A6:1E:0F:8A:3D:DC:DF:45:F5:2A:92:96:D3:76:7D:80:AC:D5
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b7:fd:a1:85:fa:38:db:08:6b:9d:bb:c2:1e:b4:62:02:d4:
         33:80:d6:ca:5c:51:33:b9:84:29:50:1b:de:e4:25:47:f9:dc:
         dd:16:f3:6b:10:5d:08:4d:9d:11:3e:10:4e:b9:41:9f:f1:a9:
         53:60:f7:55:2c:be:67:b3:f5:0d:25:6a:40:00:3b:5b:05:14:
         59:55:62:af:4a:df:cd:9d:44:eb:75:cd:c8:c3:3a:68:45:bf:
         33:59:d2:3b:34:ad:10:ff:81:94:bb:51:ae:9f:67:4e:15:84:
         78:65:e1:1b:01:66:6d:0d:b9:c4:d5:9e:60:0d:25:c8:05:88:
         04:9f:3e:98:f1:1e:db:ed:13:19:3f:ff:15:eb:7c:5e:53:cf:
         53:17:bd:99:e8:ae:6e:5c:d5:05:45:c0:4a:88:32:4e:a1:ec:
         79:a4:60:c3:09:28:ac:d7:8c:5c:db:42:31:70:3a:9e:5f:b9:
         4f:4d:bc:3d:00:54:bc:0c:19:64:73:a0:03:8c:b5:ae:64:64:
         0a:55:de:cd:31:30:cb:1e:3c:82:93:70:42:48:2f:0f:2a:2d:
         2d:54:d9:08:15:51:60:0b:60:31:d7:48:ab:45:89:69:22:a3:
         f3:b2:00:a1:89:ed:8e:2e:1a:4e:84:04:30:a4:44:99:1f:93:
         d8:7f:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:04 2026 by rpki-client