Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399838.roa
File:                     AS399838.roa (raw, json)
Hash identifier:          5lt1rdqP/RHS+wATS55zLu2qubLbqfXfeUfQxcN96qY=
Subject key identifier:   02:45:36:EF:76:84:CD:BA:05:DD:40:FC:90:45:D2:5A:9A:07:E0:86
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       74C2B56DC181CF055EEDC71D8B1A721FAE07E956
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399838.roa
Signing time:             Tue 24 Mar 2026 06:19:04 +0000
ROA not before:           Tue 24 Mar 2026 06:14:04 +0000
ROA not after:            Tue 23 Mar 2027 06:19:04 +0000
asID:                     399838
IP address blocks:        40.183.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c2:b5:6d:c1:81:cf:05:5e:ed:c7:1d:8b:1a:72:1f:ae:07:e9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 24 06:14:04 2026 GMT
            Not After : Mar 23 06:19:04 2027 GMT
        Subject: CN=024536EF7684CDBA05DD40FC9045D25A9A07E086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:9c:6b:01:22:ab:47:ab:3b:e5:07:69:79:
                    c4:b0:73:f3:9b:7b:21:15:23:53:5c:ed:36:c3:a5:
                    35:57:5e:90:d1:95:5a:07:89:cf:83:95:e8:59:ca:
                    45:d1:b1:b5:8e:78:0d:45:bf:7b:39:93:29:a6:47:
                    86:58:14:a2:b9:f9:8d:32:66:14:47:99:83:5b:8e:
                    e6:cc:c7:8b:cc:4b:8a:44:8b:64:b0:f7:aa:ae:f4:
                    45:a5:84:20:c1:7b:85:58:d3:e5:49:79:49:a6:24:
                    b1:e0:a1:14:ae:9b:91:97:6f:a8:ba:f7:32:4c:f6:
                    f4:8d:40:5c:34:75:65:22:c2:b3:ee:0a:2c:f6:e4:
                    1c:dd:44:6e:1a:31:f3:52:3d:9d:c8:7d:e3:94:f1:
                    e7:7d:e1:7f:c0:63:49:39:d2:6a:6d:0e:e0:b5:82:
                    f0:86:51:f8:7f:bb:b4:77:86:73:8a:44:8d:63:24:
                    98:01:d9:74:e6:a6:e8:b6:33:3b:d3:29:0c:76:49:
                    e3:12:8f:76:3d:6a:48:9a:14:96:86:77:2c:45:1a:
                    ba:ac:55:9c:7e:4a:78:e7:76:70:ba:85:51:ef:dd:
                    70:88:67:a8:1a:e3:6e:7e:1b:8a:20:a9:4c:87:7b:
                    3b:3a:f7:ff:87:86:8d:8e:da:b0:ab:05:33:56:0c:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:45:36:EF:76:84:CD:BA:05:DD:40:FC:90:45:D2:5A:9A:07:E0:86
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f7:3c:82:21:b5:f6:dc:f2:89:43:90:49:01:89:9d:fd:ce:
         79:b7:73:ab:5b:bf:dc:5f:b7:f7:83:d6:10:e7:4a:b5:fc:22:
         b0:17:4f:6c:32:b0:01:e2:b4:39:73:08:ea:03:90:10:1c:db:
         cf:59:c8:a6:2d:c8:a2:2d:76:40:c5:97:57:5b:73:32:b3:2a:
         e7:03:ad:3f:cb:98:01:76:52:6c:bf:f2:94:67:d4:7b:1d:c4:
         45:bf:2a:19:60:fd:00:ba:43:fe:ac:cd:ad:b2:e9:3d:7b:3d:
         ff:5f:c9:dd:bf:e1:59:c3:7d:f8:51:f1:f4:be:b4:b8:76:4d:
         41:28:dd:9e:b4:f9:27:8d:d1:96:db:8f:ab:c9:04:ab:97:c7:
         9e:9f:81:9a:55:29:b3:7d:b1:8a:c7:fd:67:01:4b:8e:d0:d9:
         a7:49:90:42:1f:57:70:6a:4a:de:f6:03:89:bc:37:8b:e4:47:
         eb:be:8d:26:0a:06:67:aa:84:3e:23:b4:2f:03:07:4f:d9:ce:
         fa:b5:34:74:79:0a:3b:71:a0:e1:48:7a:8b:6f:6d:92:38:b6:
         96:bf:89:15:33:f9:77:79:09:b3:eb:75:f9:d5:0c:bf:01:02:
         3b:9a:05:40:7c:2a:f0:a4:6b:53:78:01:43:6a:09:20:51:a5:
         cd:20:2f:25
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUdMK1bcGBzwVe7ccdixpyH64H6VYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzI0MDYxNDA0WhcNMjcwMzIzMDYxOTA0
WjAzMTEwLwYDVQQDEygwMjQ1MzZFRjc2ODRDREJBMDVERDQwRkM5MDQ1RDI1QTlB
MDdFMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsqcawEiq0er
O+UHaXnEsHPzm3shFSNTXO02w6U1V16Q0ZVaB4nPg5XoWcpF0bG1jngNRb97OZMp
pkeGWBSiufmNMmYUR5mDW47mzMeLzEuKRItksPeqrvRFpYQgwXuFWNPlSXlJpiSx
4KEUrpuRl2+ouvcyTPb0jUBcNHVlIsKz7gos9uQc3URuGjHzUj2dyH3jlPHnfeF/
wGNJOdJqbQ7gtYLwhlH4f7u0d4ZzikSNYySYAdl05qbotjM70ykMdknjEo92PWpI
mhSWhncsRRq6rFWcfkp453ZwuoVR791wiGeoGuNufhuKIKlMh3s7Ovf/h4aNjtqw
qwUzVgymewIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAJFNu92hM26Bd1A/JBF0lqa
B+CGMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzM5OTgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACi3ZjANBgkqhkiG9w0BAQsFAAOC
AQEAc/c8giG19tzyiUOQSQGJnf3Oebdzq1u/3F+394PWEOdKtfwisBdPbDKwAeK0
OXMI6gOQEBzbz1nIpi3Ioi12QMWXV1tzMrMq5wOtP8uYAXZSbL/ylGfUex3ERb8q
GWD9ALpD/qzNrbLpPXs9/1/J3b/hWcN9+FHx9L60uHZNQSjdnrT5J43RltuPq8kE
q5fHnp+BmlUps32xisf9ZwFLjtDZp0mQQh9XcGpK3vYDibw3i+RH676NJgoGZ6qE
PiO0LwMHT9nO+rU0dHkKO3Gg4Uh6i29tkji2lr+JFTP5d3kJs+t1+dUMvwECO5oF
QHwq8KRrU3gBQ2oJIFGlzSAvJQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:16:38 2026 by rpki-client