Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS11426.roa
File:                     AS11426.roa (raw, json)
Hash identifier:          lN63PleVmu+rhuVXtpkhpen0O+V9I5KeQwEehWj6o7w=
Subject key identifier:   3C:5B:29:66:AF:8A:BD:01:5E:9E:8B:A2:85:09:EB:40:5B:5E:55:E3
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       277BDC3CD5547395EB2966A32445CC5E2FA7FFD7
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS11426.roa
Signing time:             Mon 16 Mar 2026 21:50:54 +0000
ROA not before:           Mon 16 Mar 2026 21:45:54 +0000
ROA not after:            Mon 15 Mar 2027 21:50:54 +0000
asID:                     11426
IP address blocks:        64.50.167.0/24 maxlen: 24
                          192.228.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7b:dc:3c:d5:54:73:95:eb:29:66:a3:24:45:cc:5e:2f:a7:ff:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 16 21:45:54 2026 GMT
            Not After : Mar 15 21:50:54 2027 GMT
        Subject: CN=3C5B2966AF8ABD015E9E8BA28509EB405B5E55E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:91:db:e9:4d:19:53:d2:4e:e3:86:7d:3b:
                    68:df:44:c5:5a:7c:f1:07:62:67:04:e9:27:b4:8b:
                    50:f0:de:4e:67:6b:bf:1c:3a:58:4e:6c:68:23:eb:
                    4a:35:9d:66:cd:63:17:8d:6a:c6:c9:5d:4d:55:92:
                    f5:7a:dd:fe:48:6b:f5:95:8d:ce:a3:38:11:3d:5d:
                    e6:78:55:31:68:a2:7d:bd:72:02:18:6f:43:fd:b5:
                    88:26:2c:f4:60:7d:92:27:92:5c:04:10:44:55:dd:
                    5e:f1:39:38:1a:3e:53:d5:9c:76:fe:7b:3b:ec:be:
                    92:42:94:1f:64:79:13:e2:83:79:32:0d:47:ef:f7:
                    9d:1b:a4:bf:85:fc:c3:4d:57:0d:eb:99:e4:cc:93:
                    c9:b6:e0:ce:2e:12:ba:f0:9d:78:fe:16:e4:63:06:
                    70:08:b6:a0:90:08:b0:b5:7c:9d:b2:82:18:61:80:
                    d4:a2:e6:a4:c6:18:ca:77:d3:78:9d:93:15:4d:9b:
                    e5:d0:c2:e5:95:17:cf:48:80:08:1b:51:3a:f7:db:
                    7b:ec:cc:a5:67:09:d5:af:dd:d6:4d:1b:fd:b7:98:
                    f9:69:aa:31:cc:f1:61:ca:4b:45:96:60:78:0f:44:
                    14:6b:5d:5e:9f:6e:02:72:79:9a:79:c7:47:58:68:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5B:29:66:AF:8A:BD:01:5E:9E:8B:A2:85:09:EB:40:5B:5E:55:E3
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS11426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.167.0/24
                  192.228.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7e:16:18:7d:8e:c8:6c:b6:21:32:9e:5b:4d:d4:4a:db:39:
         31:1b:72:3c:2f:91:6a:06:8a:d7:64:66:47:0a:42:cc:10:08:
         7b:43:43:54:6a:08:95:59:62:24:38:d0:78:80:2d:1c:8a:65:
         92:f4:69:c5:a0:1f:fa:d3:2a:c0:f0:04:3b:bf:fd:e1:cf:f8:
         69:b1:12:94:81:54:9c:26:d6:40:ca:ac:18:9e:c1:d2:83:45:
         22:51:ca:96:83:b5:b1:9a:83:ff:d2:ee:7b:96:53:49:e2:00:
         f4:50:53:ed:d1:3f:f0:2c:4a:ec:5f:f3:a5:81:5e:b8:82:98:
         19:3f:aa:e4:0c:d3:4b:1c:0b:6b:1b:a0:32:5a:de:4f:fc:c2:
         6e:84:54:b1:4f:4c:17:89:0b:6e:80:ba:b2:b4:75:aa:73:5c:
         d8:1b:3a:d9:73:65:4f:49:cf:ef:9f:87:b8:67:1b:0e:f9:51:
         a9:f4:3e:7c:5b:86:4c:bb:bf:b9:f1:27:30:97:fe:a9:d3:e6:
         7c:01:f2:70:98:bb:0c:86:10:45:d3:23:ec:d0:df:56:a2:95:
         a2:d2:cb:ca:59:2d:e3:3c:53:79:3e:0f:5e:08:5f:2f:25:cd:
         05:3f:a3:b2:83:d6:d6:ca:cb:17:0f:14:95:7c:af:9f:fd:96:
         f1:63:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:46:21 2026 by rpki-client