Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401322.roa
File:                     AS401322.roa (raw, json)
Hash identifier:          rHcnnCZdQO4itHwttrW0+JsiLoWABBCZu+ak/MLbv1E=
Subject key identifier:   E2:68:F1:4D:B7:FB:2B:28:AB:CE:4F:2D:08:9A:D8:1B:96:C2:CA:D0
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5DCA6A7E8AF5266F5B76D870649268ED581EC852
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401322.roa
Signing time:             Thu 26 Mar 2026 04:33:37 +0000
ROA not before:           Thu 26 Mar 2026 04:28:37 +0000
ROA not after:            Thu 25 Mar 2027 04:33:37 +0000
asID:                     401322
IP address blocks:        40.183.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 10:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ca:6a:7e:8a:f5:26:6f:5b:76:d8:70:64:92:68:ed:58:1e:c8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 26 04:28:37 2026 GMT
            Not After : Mar 25 04:33:37 2027 GMT
        Subject: CN=E268F14DB7FB2B28ABCE4F2D089AD81B96C2CAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:71:5c:8a:4c:9c:c0:4f:a6:b9:e0:b6:6f:
                    d7:e9:b9:00:97:53:d2:4d:db:a6:83:b3:fe:00:c0:
                    5d:27:f6:99:01:3d:5f:7c:07:4a:3f:e5:56:b1:77:
                    ff:86:e2:d3:36:1f:f3:57:03:0d:06:63:ab:51:6f:
                    5e:aa:7e:63:37:6a:87:0d:63:13:4f:6e:60:a9:9e:
                    a0:5e:63:75:31:14:2e:83:15:5f:0d:5c:17:6a:43:
                    b7:2c:a9:46:6d:81:13:7e:e7:f6:6c:b2:4d:c6:8f:
                    97:9c:4e:1f:af:b3:ad:cc:e9:a7:85:be:a3:d1:4b:
                    42:6e:40:ff:0d:51:74:b0:c8:dd:c3:9b:eb:0f:3e:
                    3a:9e:24:e3:b3:91:0f:7e:d2:a1:45:fe:a2:3b:29:
                    69:b1:28:19:3a:ec:05:40:7a:7d:3e:66:24:3d:99:
                    29:15:12:05:ed:9a:ed:4e:67:db:2b:a1:0c:0c:3f:
                    88:2d:dd:dd:5c:c7:aa:1b:be:37:a8:ef:eb:82:05:
                    6c:1d:71:2d:80:e6:e5:b8:9d:57:dd:59:98:22:33:
                    d9:68:76:ae:87:22:eb:c2:03:c7:af:b2:3b:b1:48:
                    c8:a9:48:bf:df:23:a5:2d:b5:40:c8:61:f8:c5:7e:
                    9e:80:4b:c0:9f:ab:82:d1:46:3e:58:55:de:02:7c:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:68:F1:4D:B7:FB:2B:28:AB:CE:4F:2D:08:9A:D8:1B:96:C2:CA:D0
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401322.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ed:71:e5:c5:35:9d:18:20:45:19:70:d4:4f:71:6e:be:4c:
         1b:f8:b0:b8:fb:1a:25:7a:1e:ce:03:aa:f3:1b:18:9a:0b:3a:
         41:6e:f0:c8:96:85:33:15:fb:75:22:d5:8e:fb:13:5f:aa:c2:
         9b:61:c2:84:c5:ce:38:21:e3:36:44:a7:c2:5d:65:0c:ad:19:
         61:f6:fd:82:37:99:60:1b:83:e1:53:d1:2d:e4:48:f0:37:4e:
         8a:81:57:70:74:fe:58:35:47:8e:e3:f0:fa:0c:44:17:8c:5c:
         a3:a6:08:f9:f4:4d:d8:1d:69:c6:ed:9d:cc:f9:b5:24:ef:0f:
         1f:82:59:9b:20:b1:12:67:03:3f:01:e0:56:d1:11:20:0b:1e:
         9c:7b:1e:ca:70:a5:80:bc:26:60:d6:b5:57:d8:83:6b:5b:80:
         5f:aa:a0:70:87:27:bd:5f:f9:e1:06:55:06:ab:b3:d8:27:f4:
         bf:c1:a4:2e:73:ca:b6:e0:4a:57:31:25:3c:1c:25:90:23:2c:
         75:95:91:75:9b:c1:c5:4c:78:03:fa:42:96:ec:cb:00:6d:0d:
         8a:c4:10:63:1c:ec:6d:37:27:1e:d6:20:6a:86:b7:69:69:0c:
         bd:a8:e8:a5:49:94:fb:64:2f:36:88:7a:f3:7b:00:24:68:7f:
         39:8d:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:58 2026 by rpki-client