Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa
File:                     AS4826.roa (raw, json)
Hash identifier:          Njcm0ERYlU295Y2Qhc39IW5mATCN4U0JxNibua+wYJw=
Subject key identifier:   0D:92:BA:BD:45:A2:84:40:F1:6B:A5:6C:E1:54:F3:99:40:D2:C4:90
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5F970CC27ACA9C698524DB656CA3319D7EE82AC5
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa
Signing time:             Tue 30 Sep 2025 14:07:54 +0000
ROA not before:           Tue 30 Sep 2025 14:02:54 +0000
ROA not after:            Tue 29 Sep 2026 14:07:54 +0000
asID:                     4826
IP address blocks:        40.27.160.0/22 maxlen: 24
                          40.27.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:97:0c:c2:7a:ca:9c:69:85:24:db:65:6c:a3:31:9d:7e:e8:2a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 30 14:02:54 2025 GMT
            Not After : Sep 29 14:07:54 2026 GMT
        Subject: CN=0D92BABD45A28440F16BA56CE154F39940D2C490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:0e:69:0d:9f:5e:6b:25:70:c5:83:0d:33:
                    af:b2:e6:c3:c1:57:37:ec:16:7e:32:16:f9:88:bd:
                    cf:10:29:a9:ea:9c:f1:e4:47:f3:31:8a:c8:3b:88:
                    d6:b7:07:c1:7f:3d:d6:77:18:9a:36:59:7c:0e:ee:
                    1b:ec:8e:7a:b9:b9:53:8c:0b:26:43:6d:49:88:43:
                    f6:29:73:2b:0f:38:40:5b:50:a6:7a:f5:38:d4:f7:
                    cb:07:d2:28:42:18:37:0e:65:b7:aa:41:5f:69:fd:
                    f6:47:09:10:3d:c8:3a:32:f6:6f:b3:58:f1:ee:8b:
                    f8:e9:9e:10:6e:08:28:8c:09:13:07:7c:a7:15:4b:
                    a6:51:c9:2e:70:ce:4d:1b:ec:8e:80:24:07:89:fc:
                    25:24:18:20:63:5e:4f:20:64:57:14:f7:6f:96:83:
                    a8:19:79:8f:38:89:3c:16:83:59:60:a4:ac:2b:3f:
                    34:c2:a2:17:5e:06:71:a7:ad:e2:35:0d:40:d3:d6:
                    a7:3d:dd:f2:ff:c2:1f:5e:38:32:8f:b1:51:a8:4f:
                    76:37:0d:28:62:c6:00:06:aa:1e:a5:cf:81:c7:24:
                    07:e4:a3:90:aa:b8:20:21:55:45:1c:19:0e:ba:1d:
                    fe:cd:21:4d:a2:28:d0:94:29:c6:26:d7:ce:07:9b:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:92:BA:BD:45:A2:84:40:F1:6B:A5:6C:E1:54:F3:99:40:D2:C4:90
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.160.0/22
                  40.27.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:27:da:d3:97:48:32:82:f9:f3:11:12:15:51:91:6f:cb:ca:
         57:3b:2a:4e:45:df:ec:07:b0:54:c2:42:84:c7:82:fa:2d:49:
         4a:62:eb:19:13:9a:7a:b5:c6:36:db:b2:b4:c1:6b:e0:ed:50:
         97:b7:ea:1f:81:47:dd:95:89:9f:27:a7:be:1a:d9:55:d5:12:
         02:b1:23:40:07:7c:b2:96:fb:8a:f2:9f:64:46:86:78:96:62:
         e4:f6:fb:b9:d1:7c:01:e5:e4:90:92:e5:06:47:9d:ff:f2:e0:
         37:0d:2b:ee:f0:45:0d:b5:db:28:c5:fd:f8:14:72:5c:13:5d:
         b1:db:bc:57:b1:6d:c7:23:37:b4:64:bd:86:e3:86:3d:25:d3:
         4e:49:9f:ad:6f:e1:37:00:3a:f7:68:ae:f2:fc:49:b1:9b:99:
         f0:8b:78:aa:e3:fe:16:fd:36:aa:df:54:70:5c:22:01:aa:45:
         ef:7d:fb:14:0f:2a:87:98:6e:3a:0d:13:8d:2f:25:67:2f:05:
         2e:63:24:8b:94:ba:42:fa:43:60:da:e3:f0:a6:e9:39:dc:5a:
         bb:19:80:49:d5:be:0b:58:c9:77:1d:0d:2a:4a:ed:62:b4:46:
         eb:df:7c:54:f6:bf:14:8a:3f:bf:fb:7b:2c:c6:59:c8:a0:19:
         44:6e:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:59 2025 by rpki-client