Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS46475.roa
File:                     AS46475.roa (raw, json)
Hash identifier:          zxqE+R8FQMRWjitKfldql2uJpVJQJWpRE15O1zBF2pg=
Subject key identifier:   60:7E:C4:C3:8F:18:A4:E2:CE:7E:2E:05:20:47:00:AE:06:6D:E0:97
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       03C5CDEF89BE007C077FAA6D64442E0A70D4A0D8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS46475.roa
Signing time:             Thu 07 May 2026 18:26:12 +0000
ROA not before:           Thu 07 May 2026 18:21:12 +0000
ROA not after:            Thu 06 May 2027 18:26:12 +0000
asID:                     46475
IP address blocks:        40.27.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 15:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:cd:ef:89:be:00:7c:07:7f:aa:6d:64:44:2e:0a:70:d4:a0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May  7 18:21:12 2026 GMT
            Not After : May  6 18:26:12 2027 GMT
        Subject: CN=607EC4C38F18A4E2CE7E2E05204700AE066DE097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:f2:00:5d:87:ba:57:f5:56:65:ed:a5:58:
                    59:90:3b:7e:2c:28:c7:78:17:a4:e2:29:70:68:37:
                    ec:33:e4:e7:43:d2:75:5a:23:1b:85:cc:a2:1f:77:
                    58:7f:f6:c3:04:b8:ee:c7:c3:01:7f:43:6e:a8:c3:
                    4b:d2:f9:32:94:33:a0:fc:58:7f:87:13:da:af:cf:
                    33:3e:1d:e8:b9:c7:18:84:a2:3c:de:6d:ff:39:a9:
                    e6:d4:8a:0c:e6:f6:74:34:79:bf:3c:17:fa:69:4f:
                    6e:d2:22:17:ea:50:98:63:99:e9:9c:a3:76:91:2e:
                    97:7a:a2:29:7c:d7:d8:6c:31:33:24:1a:8f:07:e0:
                    4f:13:ba:ab:21:28:6e:96:a7:19:b2:e9:96:14:9f:
                    1d:0c:c2:5f:58:b9:69:59:72:ca:4c:6b:07:ad:75:
                    44:db:6e:20:07:26:d4:c4:ee:dc:6e:de:f8:d8:0f:
                    ea:64:c8:d5:b9:9a:c9:f7:9a:bc:27:15:c9:c8:3b:
                    9e:95:1f:fc:bb:46:00:d9:e7:ab:89:d6:dd:fc:30:
                    70:dd:12:73:52:0c:38:a5:6a:3f:fa:80:84:60:a2:
                    44:46:9f:0e:ab:7b:50:95:c8:8e:a6:2f:87:fd:f6:
                    b9:a0:c7:d0:72:97:6c:03:6b:07:76:7f:8e:97:26:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:C4:C3:8F:18:A4:E2:CE:7E:2E:05:20:47:00:AE:06:6D:E0:97
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS46475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:82:46:2d:32:62:7c:70:e2:c7:41:27:8b:03:6b:20:40:
         4c:3e:9f:11:37:a7:7a:ba:3d:b7:d2:28:ec:f3:73:ba:fa:b2:
         9d:66:86:8b:79:85:af:63:5e:37:bd:43:c7:04:a4:9e:08:8c:
         4f:18:8c:ec:7c:73:8f:8e:70:d3:2f:79:90:89:46:4f:07:b6:
         8b:6c:f8:80:fb:ac:2c:29:05:22:1e:c6:b7:e5:33:53:59:3e:
         50:78:68:e1:70:7c:2d:cb:42:fd:c5:b0:a2:a9:2d:bf:60:3a:
         37:5e:f7:29:43:3f:f4:4b:77:73:85:33:3c:6a:f2:85:38:94:
         43:06:84:88:5c:f8:f1:9a:13:f1:0a:ef:fb:49:ba:48:38:5f:
         e4:b0:d8:a0:53:24:72:37:e4:e2:e1:47:d5:92:5b:e6:c1:64:
         45:22:ad:ff:b7:fe:c6:aa:ed:ed:3b:da:29:d8:eb:7c:9a:e5:
         d9:30:dc:4a:35:d8:b4:a9:0c:a8:38:a0:75:4e:aa:9e:7f:65:
         c0:75:65:42:12:b4:ce:f5:82:57:92:88:e4:12:4f:7a:64:ad:
         56:dc:1b:35:ee:60:5c:25:0a:3f:e1:78:c4:f0:2c:8e:0b:95:
         e8:e2:47:46:66:89:68:e8:fc:d7:2a:92:a7:ad:50:f1:a5:38:
         f4:2c:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:51:54 2026 by rpki-client