Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          A359QtxL2w21NWfG81gpJKJRlPhJZftfTwzENbt2Hvk=
Subject key identifier:   68:93:9B:9D:90:26:6C:59:67:BD:77:04:52:53:3A:3C:23:AF:F9:CF
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5C34E0F79534EAF20DBA99FB7FE83480D8CBF28E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396356.roa
Signing time:             Thu 19 Jun 2025 09:39:36 +0000
ROA not before:           Thu 19 Jun 2025 09:34:36 +0000
ROA not after:            Thu 18 Jun 2026 09:39:36 +0000
asID:                     396356
IP address blocks:        40.183.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:34:e0:f7:95:34:ea:f2:0d:ba:99:fb:7f:e8:34:80:d8:cb:f2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 19 09:34:36 2025 GMT
            Not After : Jun 18 09:39:36 2026 GMT
        Subject: CN=68939B9D90266C5967BD770452533A3C23AFF9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:f9:62:b7:e3:a4:da:98:db:fc:4e:b3:f2:
                    5f:7f:df:83:a4:ed:b5:50:43:e9:a8:9a:24:6c:8c:
                    9e:19:c3:92:3f:55:07:0c:8c:67:8f:50:e4:6e:b8:
                    39:e5:71:f7:9b:a1:4a:c6:47:af:85:b5:30:7b:42:
                    cd:f7:1e:52:5d:ce:ce:5a:d8:bb:f4:08:2f:57:0b:
                    1d:37:35:d1:4c:69:bd:ed:be:4b:dc:80:6a:bb:19:
                    11:61:c2:67:df:6c:80:d3:84:75:90:ad:ee:5b:f1:
                    da:15:13:83:91:96:b6:d8:7a:af:96:a2:f1:f4:4b:
                    13:71:58:d9:63:32:6b:25:14:45:1f:39:03:da:37:
                    67:5f:e0:29:32:f4:11:18:d5:44:12:67:b5:c8:18:
                    22:c5:cf:ab:c2:4e:a4:a7:56:4b:8f:e2:b2:61:07:
                    fe:82:29:d8:03:fa:16:83:69:95:cf:95:f0:52:85:
                    f5:78:92:51:a4:a5:9c:b2:c1:6a:c4:e9:8d:f4:d7:
                    e8:eb:f5:db:74:1e:c8:cf:cc:44:ec:0b:fb:be:42:
                    4b:e6:f0:cc:fd:85:04:bc:5c:05:ee:9a:19:f5:a0:
                    99:2d:ff:8b:63:5f:59:81:93:8a:20:35:44:98:f1:
                    af:8d:93:53:c7:82:f7:8d:1a:8e:8a:99:9d:72:e2:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:9B:9D:90:26:6C:59:67:BD:77:04:52:53:3A:3C:23:AF:F9:CF
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:1f:a8:4d:cc:f3:cf:5a:30:25:ff:5f:87:5f:cf:16:fd:
         44:7c:b7:03:fa:03:20:00:54:9c:ba:de:a9:75:00:0f:e0:26:
         0f:99:a8:20:26:45:b9:4b:b1:ba:a1:52:e5:39:67:04:ca:03:
         7c:78:ad:f2:1a:de:95:b8:6b:aa:a0:de:a9:19:8f:4f:ce:f6:
         0f:64:91:47:b0:7b:66:9a:8d:51:b8:c8:e8:f3:02:bb:ba:b6:
         9c:d6:ab:44:52:7e:ae:b3:b2:e1:21:62:65:65:8b:ed:45:a3:
         08:12:a6:b5:bf:7c:62:bf:37:5a:4a:69:60:31:98:2a:ab:33:
         73:54:e3:35:3f:53:45:d2:da:bb:6c:10:2e:31:be:7e:01:8d:
         a2:db:94:d3:82:0b:18:10:c3:43:8e:3a:97:16:ea:a0:8e:ba:
         db:59:9a:e9:f2:21:1f:b3:ad:2d:6a:38:7b:e7:97:7f:7d:d6:
         0e:cf:b2:8c:16:37:67:00:cd:16:42:78:4b:96:6e:46:89:67:
         7f:10:e3:fc:84:dc:0a:04:ad:a2:a5:7f:97:64:bc:9b:7c:c3:
         74:4f:a1:64:ff:72:98:27:49:24:11:df:27:00:c5:8d:97:a4:
         d1:e1:8d:19:53:3f:40:d0:08:5e:96:95:5c:2e:1a:ce:43:9b:
         cd:4d:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:50:44 2025 by rpki-client