Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa
File:                     AS399861.roa (raw, json)
Hash identifier:          Hd6DW24zQGWIcRnsZsPreqCYGZHcxn8ijXONbwGZHmY=
Subject key identifier:   2F:13:4A:3E:44:84:F9:09:13:40:E9:EB:DB:77:E0:C5:68:F4:C8:53
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4BD5B0E156A439DB7A9417F1B8FE016ABFE6D54D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa
Signing time:             Sun 21 Sep 2025 04:29:45 +0000
ROA not before:           Sun 21 Sep 2025 04:24:45 +0000
ROA not after:            Sun 20 Sep 2026 04:29:45 +0000
asID:                     399861
IP address blocks:        23.95.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:b0:e1:56:a4:39:db:7a:94:17:f1:b8:fe:01:6a:bf:e6:d5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 21 04:24:45 2025 GMT
            Not After : Sep 20 04:29:45 2026 GMT
        Subject: CN=2F134A3E4484F9091340E9EBDB77E0C568F4C853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:aa:09:73:d7:bb:6d:5c:3f:fc:25:30:a5:
                    ca:8a:26:b1:8c:33:9e:a6:59:cd:c2:60:af:99:b8:
                    68:e0:a6:96:e6:57:c4:8c:e2:20:a1:ef:ca:3b:12:
                    84:b4:c6:ec:45:05:df:aa:6c:43:72:07:8a:b7:ce:
                    13:3d:a9:6d:8e:cf:80:76:44:5a:6d:d2:d5:c8:a8:
                    ec:69:5a:f5:bc:43:66:01:7a:60:39:f4:1b:0d:c0:
                    9a:4a:6f:30:4f:50:7d:ad:2f:f6:10:00:30:fe:04:
                    95:22:21:1d:39:3c:d5:c9:64:7a:eb:42:9d:b3:94:
                    72:dc:7b:b4:b6:ad:58:b1:d3:73:d6:f3:75:df:54:
                    b7:2e:3f:57:a3:df:7b:79:8e:1a:0e:20:59:4f:fc:
                    21:29:bd:33:3d:a7:b1:bc:40:e9:39:d4:9b:d2:e7:
                    36:3a:93:9b:9b:bc:71:ea:b2:7c:b1:d1:b1:c8:44:
                    04:34:2b:4e:1a:aa:49:3d:59:d3:7b:1b:3e:11:48:
                    fe:6c:7b:ae:91:d1:34:5a:85:a5:49:89:f6:12:d1:
                    de:be:e6:50:b1:5f:2e:24:35:f0:37:6e:65:76:cd:
                    af:c1:17:49:ef:d1:98:f0:ac:94:29:28:ab:57:16:
                    b8:79:15:70:fd:12:45:e6:6a:11:24:a2:b0:40:c9:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:13:4A:3E:44:84:F9:09:13:40:E9:EB:DB:77:E0:C5:68:F4:C8:53
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:55:44:24:8a:30:cb:8b:46:f7:34:92:ff:46:f4:e1:1d:14:
         8f:34:54:44:e8:cd:ff:bc:95:a6:69:c0:a2:90:25:f4:e2:08:
         25:d3:e1:67:d1:d9:e2:fa:62:85:a6:6c:4d:3a:a2:ba:94:68:
         ce:7b:a2:6c:07:4a:1a:f2:01:67:a6:16:46:3f:6c:6a:90:b6:
         c6:fe:b1:8c:44:53:ff:47:91:81:4d:b3:43:6b:7c:da:d6:6f:
         a8:c5:9d:c1:d8:ce:0d:63:13:89:94:d7:91:c9:ca:91:db:24:
         8f:df:cd:38:e6:6c:4b:e3:98:dd:4e:90:91:9a:c9:1a:e4:26:
         79:42:80:c9:7c:e6:e6:d2:d8:9f:d1:f7:22:5e:34:3e:26:d9:
         e7:56:fb:0a:51:8f:29:3e:08:54:d6:a1:6e:be:36:5b:10:21:
         7a:ab:9b:e1:9a:8b:a1:a3:71:e0:c1:0a:c5:e4:6e:ca:f0:73:
         cd:3b:97:d2:96:9b:f3:dc:59:41:c0:07:2c:b1:8a:36:5d:6f:
         73:7a:b8:65:ed:82:1e:fb:51:18:d2:5d:c4:a5:1b:6d:94:f0:
         0b:95:fb:33:30:10:b5:d2:78:a6:82:99:9f:7c:62:2e:13:ec:
         e5:76:cc:2e:53:cd:b1:90:e6:5d:78:97:e0:95:03:9a:8c:e5:
         f4:4f:7e:d7
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUS9Ww4VakOdt6lBfxuP4Bar/m1U0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTIxMDQyNDQ1WhcNMjYwOTIwMDQyOTQ1
WjAzMTEwLwYDVQQDEygyRjEzNEEzRTQ0ODRGOTA5MTM0MEU5RUJEQjc3RTBDNTY4
RjRDODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYiqCXPXu21c
P/wlMKXKiiaxjDOeplnNwmCvmbho4KaW5lfEjOIgoe/KOxKEtMbsRQXfqmxDcgeK
t84TPaltjs+AdkRabdLVyKjsaVr1vENmAXpgOfQbDcCaSm8wT1B9rS/2EAAw/gSV
IiEdOTzVyWR660Kds5Ry3Hu0tq1YsdNz1vN131S3Lj9Xo997eY4aDiBZT/whKb0z
PaexvEDpOdSb0uc2OpObm7xx6rJ8sdGxyEQENCtOGqpJPVnTexs+EUj+bHuukdE0
WoWlSYn2EtHevuZQsV8uJDXwN25lds2vwRdJ79GY8KyUKSirVxa4eRVw/RJF5moR
JKKwQMljzwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFC8TSj5EhPkJE0Dp69t34MVo
9MhTMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzM5OTg2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfUzANBgkqhkiG9w0BAQsFAAOC
AQEARFVEJIowy4tG9zSS/0b04R0UjzRUROjN/7yVpmnAopAl9OIIJdPhZ9HZ4vpi
haZsTTqiupRoznuibAdKGvIBZ6YWRj9sapC2xv6xjERT/0eRgU2zQ2t82tZvqMWd
wdjODWMTiZTXkcnKkdskj9/NOOZsS+OY3U6QkZrJGuQmeUKAyXzm5tLYn9H3Il40
PibZ51b7ClGPKT4IVNahbr42WxAhequb4ZqLoaNx4MEKxeRuyvBzzTuX0pab89xZ
QcAHLLGKNl1vc3q4Ze2CHvtRGNJdxKUbbZTwC5X7MzAQtdJ4poKZn3xiLhPs5XbM
LlPNsZDmXXiX4JUDmozl9E9+1w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:02 2025 by rpki-client