Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa
File:                     AS401838.roa (raw, json)
Hash identifier:          FBRHJ2DIuBPBnsmcfpjJCtJoWnzJX7fA3YtzLgaP2+g=
Subject key identifier:   DC:69:42:17:E5:89:EE:66:C9:07:5F:03:20:41:E0:DD:45:1A:6D:02
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0A6B9924CE6BAA3DE5A146B3B112790D2CD0FCBD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa
Signing time:             Mon 06 Jul 2026 18:14:01 +0000
ROA not before:           Mon 06 Jul 2026 18:09:01 +0000
ROA not after:            Mon 05 Jul 2027 18:14:01 +0000
asID:                     401838
IP address blocks:        67.210.102.0/24 maxlen: 24
                          192.228.113.0/24 maxlen: 24
                          192.228.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6b:99:24:ce:6b:aa:3d:e5:a1:46:b3:b1:12:79:0d:2c:d0:fc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  6 18:09:01 2026 GMT
            Not After : Jul  5 18:14:01 2027 GMT
        Subject: CN=DC694217E589EE66C9075F032041E0DD451A6D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:d4:17:03:dc:3a:d0:56:d5:dc:42:ea:e1:
                    e9:34:7f:c8:f7:e0:67:29:e3:aa:be:74:b5:a9:43:
                    2f:d9:8e:2a:94:25:7f:0b:ca:fe:e2:10:2d:a8:e8:
                    ec:21:56:c8:9f:d3:52:a4:1e:da:4a:b1:d0:54:e2:
                    13:d8:60:20:a7:07:dc:69:f8:b3:d5:3d:df:b1:a6:
                    06:5e:a0:88:76:a0:85:8b:50:c8:a4:d0:79:bd:ea:
                    b6:e0:a0:89:52:35:91:a7:2c:95:83:40:7e:1f:8c:
                    82:de:d0:92:38:13:3c:eb:6b:32:2c:6d:bf:cc:07:
                    a7:7c:d0:89:5d:22:c1:c2:42:de:8d:23:74:9c:09:
                    d4:6c:de:73:e7:b7:dd:da:51:ff:58:db:f7:2e:29:
                    17:dc:44:44:0b:89:73:19:4a:cf:fc:31:17:10:dc:
                    9f:6d:fc:87:db:fa:c7:76:9f:29:71:c2:06:b6:7f:
                    1b:41:30:f5:03:23:4b:93:a1:bf:45:cb:14:b7:67:
                    f6:09:f1:f5:fe:41:25:93:d3:b8:48:36:c5:36:fc:
                    ac:cd:40:98:c6:d2:87:e2:3f:0b:d9:51:57:b1:94:
                    1a:29:5f:26:8a:f7:db:4f:2b:f1:60:7e:af:13:48:
                    f6:3b:2f:50:aa:1f:e4:68:7d:68:c3:bd:0a:79:4b:
                    77:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:69:42:17:E5:89:EE:66:C9:07:5F:03:20:41:E0:DD:45:1A:6D:02
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.102.0/24
                  192.228.113.0/24
                  192.228.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:c5:71:ad:ea:94:ec:0b:c9:f2:e8:c5:06:65:fc:d6:75:
         a5:b6:b7:dd:bc:bb:a5:ac:6a:a6:54:d6:66:f1:85:5c:31:ba:
         32:47:fa:cd:79:76:00:ec:09:52:fb:59:41:70:e8:a5:11:d7:
         3f:68:25:6d:e8:b9:95:e9:6d:d2:2f:e5:f3:59:44:c1:db:95:
         ac:43:b0:94:5c:8a:ca:8f:0c:e1:3e:10:4d:ec:ee:a7:5e:bd:
         37:de:86:4e:25:cc:74:75:00:81:98:75:3e:92:6f:89:d8:45:
         76:08:58:93:de:08:b3:4a:ba:f2:73:bb:01:58:9f:53:b4:c4:
         b5:52:84:3a:6f:0b:8a:14:3e:81:52:c2:ae:ba:fa:9f:81:2d:
         96:43:1d:89:a1:9c:cf:33:e7:7e:03:df:9e:9d:43:00:a8:b6:
         34:a9:47:42:97:e8:e1:3f:84:5e:1a:01:4f:58:fd:78:ca:31:
         19:15:7b:a7:c8:62:cd:9c:d4:78:cf:46:26:52:a5:28:78:67:
         98:96:70:b8:79:8e:ec:93:0c:0b:38:6c:06:9b:c2:11:e7:9f:
         ee:6e:31:8e:f3:fe:17:07:90:ae:14:77:55:e4:35:d4:f2:33:
         7f:1c:b8:09:fc:b1:04:49:c5:9f:50:bd:f3:c7:cd:7c:f6:42:
         99:8f:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:16:31 2026 by rpki-client