Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400304.roa
File:                     AS400304.roa (raw, json)
Hash identifier:          NANgCm3YkxAl/QdAvfaQoEI9eW65yJ4WkyfP8xfEpto=
Subject key identifier:   B4:40:9D:E2:A4:7A:E3:BA:51:DF:4D:56:3C:EC:06:92:50:25:3E:9B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5178F9718FDE5A215BBA8ABCD54B8567952A69A2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400304.roa
Signing time:             Wed 06 Aug 2025 15:29:44 +0000
ROA not before:           Wed 06 Aug 2025 15:24:44 +0000
ROA not after:            Wed 05 Aug 2026 15:29:44 +0000
asID:                     400304
IP address blocks:        23.95.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:78:f9:71:8f:de:5a:21:5b:ba:8a:bc:d5:4b:85:67:95:2a:69:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  6 15:24:44 2025 GMT
            Not After : Aug  5 15:29:44 2026 GMT
        Subject: CN=B4409DE2A47AE3BA51DF4D563CEC069250253E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:14:40:81:f1:ce:ee:73:f9:ed:33:aa:e8:
                    90:14:4c:8e:e3:83:68:8c:e0:4f:54:bf:64:9f:9f:
                    ee:8e:08:77:65:74:06:f5:6e:95:f6:0d:62:53:b0:
                    c4:6a:bf:0b:e1:93:14:f8:74:35:57:76:9c:27:86:
                    10:39:07:13:87:66:8e:11:c1:d2:17:44:ec:a4:30:
                    57:82:e9:45:ff:87:08:fd:61:e6:c1:f4:6f:b5:9b:
                    96:e3:91:4b:69:21:ca:1c:1e:99:66:1f:db:d2:3a:
                    54:25:ad:cf:25:af:80:96:e6:4a:23:d7:a1:71:31:
                    4c:26:85:13:9c:63:a6:db:58:41:5a:2b:60:d1:b0:
                    5f:b2:87:db:e4:68:95:53:ef:75:c8:54:6c:ef:c6:
                    75:0b:7a:7a:2d:c8:32:9c:de:af:2a:c9:74:6c:8e:
                    5a:c0:b7:30:bb:54:a2:d0:60:6b:7a:b4:1c:28:ef:
                    18:18:ef:ce:c5:42:17:2b:da:e2:97:31:ab:4a:e9:
                    4f:97:3c:3f:4b:b3:a9:73:df:42:3e:d1:ad:bf:14:
                    e1:19:91:4b:48:ec:63:32:ac:50:07:06:82:bc:9f:
                    74:eb:79:87:7c:01:0e:a2:2a:d9:10:8f:0b:6c:99:
                    42:ee:75:2f:c6:77:09:cc:d8:86:e9:29:a2:8a:3d:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:40:9D:E2:A4:7A:E3:BA:51:DF:4D:56:3C:EC:06:92:50:25:3E:9B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fa:a2:05:fc:5e:d8:fa:43:75:d3:d2:55:c0:ea:0d:78:e8:
         d2:62:58:c8:3a:43:1c:78:f2:ac:60:7b:32:85:74:1a:9e:be:
         ef:49:6b:4d:2c:e3:fc:35:6f:2b:4b:bf:f1:fa:79:6b:b0:02:
         65:6d:a1:56:ac:c7:ff:5e:10:90:ca:b9:b6:a7:7a:d3:19:d4:
         37:b0:f7:71:64:f2:4e:af:ad:3c:db:d0:69:9b:ed:d1:ab:19:
         31:37:8f:7f:00:b0:2e:21:cf:f0:bd:a6:a6:77:d8:a3:36:77:
         bb:58:0b:57:c8:bf:71:f0:5a:50:aa:21:75:7b:80:cb:d7:f7:
         8d:67:76:bd:c4:14:e6:70:bd:4a:51:6f:54:cc:42:b0:e9:36:
         6d:14:4a:40:62:f3:8d:16:7d:f6:55:79:bf:f3:4a:b4:aa:9c:
         bd:a5:8c:88:9b:6b:e1:ba:5e:3e:95:f7:32:07:3a:4d:de:c9:
         f1:bc:13:e5:d5:2c:56:21:b4:41:c3:2a:d8:5f:c6:a5:c3:67:
         44:a9:7c:65:57:ef:cc:0d:37:f3:ad:35:83:7f:15:5f:8b:47:
         0f:d0:27:50:5a:0c:36:31:32:af:e7:ff:0b:1c:83:20:b4:e7:
         14:77:30:4a:c7:14:60:56:55:cf:a6:ce:79:ac:05:68:e2:56:
         40:67:b0:6c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUUXj5cY/eWiFbuoq81UuFZ5UqaaIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA2MTUyNDQ0WhcNMjYwODA1MTUyOTQ0
WjAzMTEwLwYDVQQDEyhCNDQwOURFMkE0N0FFM0JBNTFERjRENTYzQ0VDMDY5MjUw
MjUzRTlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoakUQIHxzu5z
+e0zquiQFEyO44NojOBPVL9kn5/ujgh3ZXQG9W6V9g1iU7DEar8L4ZMU+HQ1V3ac
J4YQOQcTh2aOEcHSF0TspDBXgulF/4cI/WHmwfRvtZuW45FLaSHKHB6ZZh/b0jpU
Ja3PJa+AluZKI9ehcTFMJoUTnGOm21hBWitg0bBfsofb5GiVU+91yFRs78Z1C3p6
LcgynN6vKsl0bI5awLcwu1Si0GBrerQcKO8YGO/OxUIXK9rilzGrSulPlzw/S7Op
c99CPtGtvxThGZFLSOxjMqxQBwaCvJ9063mHfAEOoirZEI8LbJlC7nUvxncJzNiG
6Smiij3ZrwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLRAneKkeuO6Ud9NVjzsBpJQ
JT6bMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzQwMDMwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfszANBgkqhkiG9w0BAQsFAAOC
AQEAnvqiBfxe2PpDddPSVcDqDXjo0mJYyDpDHHjyrGB7MoV0Gp6+70lrTSzj/DVv
K0u/8fp5a7ACZW2hVqzH/14QkMq5tqd60xnUN7D3cWTyTq+tPNvQaZvt0asZMTeP
fwCwLiHP8L2mpnfYozZ3u1gLV8i/cfBaUKohdXuAy9f3jWd2vcQU5nC9SlFvVMxC
sOk2bRRKQGLzjRZ99lV5v/NKtKqcvaWMiJtr4bpePpX3Mgc6Td7J8bwT5dUsViG0
QcMq2F/GpcNnRKl8ZVfvzA038601g38VX4tHD9AnUFoMNjEyr+f/CxyDILTnFHcw
SscUYFZVz6bOeawFaOJWQGewbA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:20 2025 by rpki-client