Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS146813.roa
File:                     AS146813.roa (raw, json)
Hash identifier:          e5NrA5omuNOMJwjvnmTJlsUhVg3dqn7p1qOU3GZQfpI=
Subject key identifier:   28:C4:5E:C4:20:A1:CB:C2:8E:5A:D0:4A:63:5C:D1:60:22:87:3D:BE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6ACACD12764EE56C3A0FA33BC8205D43044B8C29
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS146813.roa
Signing time:             Thu 24 Sep 2026 15:58:43 +0000
ROA not before:           Thu 24 Sep 2026 15:53:43 +0000
ROA not after:            Thu 23 Sep 2027 15:58:43 +0000
asID:                     146813
IP address blocks:        23.95.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ca:cd:12:76:4e:e5:6c:3a:0f:a3:3b:c8:20:5d:43:04:4b:8c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 24 15:53:43 2026 GMT
            Not After : Sep 23 15:58:43 2027 GMT
        Subject: CN=28C45EC420A1CBC28E5AD04A635CD16022873DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:27:bd:59:3a:a7:75:0d:a4:08:11:6a:77:
                    4d:e6:cb:9a:81:68:cb:bf:70:42:c4:d9:56:58:74:
                    21:69:07:d7:10:e0:3a:25:08:f5:3b:8b:82:1a:06:
                    ed:6c:2e:32:86:ae:a1:e7:da:95:46:04:f9:23:89:
                    3a:d9:72:02:d7:fb:c8:9b:51:87:6f:26:32:66:10:
                    ae:e7:da:66:e7:89:23:e1:57:8b:cd:61:4e:0e:71:
                    45:43:93:c5:45:6b:1c:3c:7e:34:cd:fa:63:75:0d:
                    16:70:58:0a:3f:66:68:85:7e:59:c5:c9:61:43:1b:
                    97:09:28:4e:a7:4d:1e:13:b9:3e:f0:63:b0:95:87:
                    b8:23:17:30:c1:66:5e:13:1e:e8:e8:b7:0c:71:fd:
                    3e:24:b7:f5:09:91:5f:69:2a:f6:e2:39:3d:d5:fb:
                    ea:d0:91:65:99:e9:a8:a8:69:fb:d4:18:50:a0:eb:
                    c1:7a:a5:ba:a6:1c:a0:44:a4:2b:98:12:88:ea:75:
                    24:70:4b:92:57:ee:f8:13:64:78:f5:23:b8:38:d9:
                    68:72:e8:38:fd:39:f5:63:9c:8b:d8:5e:45:ca:0a:
                    f8:4d:05:4b:04:bd:05:c8:0f:2c:ef:e5:8a:69:d4:
                    d0:ca:06:6f:5d:26:7a:fa:6b:ee:df:9e:97:7d:5a:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C4:5E:C4:20:A1:CB:C2:8E:5A:D0:4A:63:5C:D1:60:22:87:3D:BE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS146813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:21:3d:8e:d8:a5:b5:1b:c5:5d:a2:f0:3c:25:3e:ac:de:da:
         3e:aa:af:50:0e:7d:13:83:0c:76:5a:e2:0b:67:31:af:f0:76:
         a4:d2:6d:98:a1:af:86:9d:a5:29:7d:a4:65:98:48:0c:f8:9f:
         00:46:d1:d5:5f:9d:6d:ec:0b:ae:18:9d:8b:f4:ce:c6:f3:2f:
         4d:94:b5:79:a2:ce:95:83:6e:e5:f8:9a:25:bf:ea:ef:44:e0:
         1b:8d:6a:70:12:b2:78:82:19:9e:ec:37:54:4d:36:f6:4b:d6:
         16:81:f9:83:c1:bf:fb:e8:5b:38:d5:fd:e1:a5:76:95:49:61:
         cb:e7:f5:25:14:87:4b:12:ca:dc:18:31:d8:c1:57:85:74:10:
         ab:d0:7d:a2:06:98:12:b0:47:c4:67:f5:54:e6:03:b1:d2:0a:
         e9:04:f8:2d:31:3e:9d:ad:3f:e9:80:ce:88:3d:67:84:cb:24:
         7e:c9:f6:8f:79:93:47:23:4e:a3:5e:3e:25:07:c3:5a:79:a7:
         8e:5c:f4:d9:94:35:ef:69:b9:a2:fe:34:f7:16:3d:aa:36:28:
         05:41:53:56:b4:cb:9a:fc:3a:32:43:20:ff:c1:4e:ae:e9:be:
         bb:02:89:fe:72:60:63:70:08:a8:94:70:28:f7:30:be:c4:14:
         4d:ae:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:25 2026 by rpki-client