Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          lZnLVAdWwUjkkG/n6OC01zyXkefUGQL4UJojH/EHeLo=
Subject key identifier:   B4:66:9C:20:81:02:46:D7:2A:52:87:0E:01:59:CD:B6:93:63:AA:D0
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       68906E57054851617FE724874D04B38FB3601C46
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa
Signing time:             Sat 18 Oct 2025 06:30:39 +0000
ROA not before:           Sat 18 Oct 2025 06:25:39 +0000
ROA not after:            Sat 17 Oct 2026 06:30:39 +0000
asID:                     396356
IP address blocks:        75.102.48.0/24 maxlen: 24
                          205.234.163.0/24 maxlen: 24
                          205.234.184.0/24 maxlen: 24
                          205.234.185.0/24 maxlen: 24
                          205.234.186.0/24 maxlen: 24
                          205.234.187.0/24 maxlen: 24
                          205.234.222.0/24 maxlen: 24
                          205.234.223.0/24 maxlen: 24
                          205.234.224.0/24 maxlen: 24
                          205.234.225.0/24 maxlen: 24
                          216.246.0.0/24 maxlen: 24
                          216.246.1.0/24 maxlen: 24
                          216.246.2.0/24 maxlen: 24
                          216.246.24.0/24 maxlen: 24
                          216.246.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:90:6e:57:05:48:51:61:7f:e7:24:87:4d:04:b3:8f:b3:60:1c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 18 06:25:39 2025 GMT
            Not After : Oct 17 06:30:39 2026 GMT
        Subject: CN=B4669C20810246D72A52870E0159CDB69363AAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:a0:e7:3e:48:04:7f:00:e9:57:43:6c:d0:
                    26:e2:8d:32:4b:f3:d3:be:e1:8b:e5:62:bc:ad:e7:
                    b5:56:a9:2c:37:c9:75:f2:0b:c2:b6:3f:b5:12:9f:
                    22:ea:47:54:77:af:f4:c7:d0:a5:69:6a:58:c2:80:
                    59:b6:ee:89:89:ce:fe:de:5a:ff:46:45:e3:67:55:
                    a7:ea:ea:b8:ec:9d:c7:5e:e6:9d:7b:fc:ce:6d:05:
                    f1:28:e2:c6:0f:e7:dd:cd:99:e0:17:af:9d:cd:6d:
                    2b:72:e2:ae:fc:80:87:5a:4a:39:bb:5f:15:7b:b0:
                    7b:27:39:e6:d5:93:4b:39:8c:07:e9:29:33:8d:e1:
                    7a:69:84:b6:d8:2b:1d:9b:71:f4:b1:75:7c:99:d6:
                    4c:aa:1b:b3:1b:16:9b:b5:f7:14:be:81:35:5c:8b:
                    3a:5f:8c:50:a6:c1:9f:5c:9f:56:e8:bf:38:1b:27:
                    21:ad:22:85:1e:f1:d6:f4:e4:ed:a3:81:f4:d2:2d:
                    aa:fd:a3:ac:3f:8c:34:f0:9d:69:eb:c8:bd:61:9d:
                    b8:64:e9:d9:98:38:ca:91:70:f2:73:79:37:32:9a:
                    7b:b9:58:8d:ad:78:f3:cc:89:c5:1b:2b:b2:3e:a3:
                    5a:46:df:73:35:09:bb:1d:65:29:dc:d4:81:c1:ba:
                    6a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:66:9C:20:81:02:46:D7:2A:52:87:0E:01:59:CD:B6:93:63:AA:D0
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.48.0/24
                  205.234.163.0/24
                  205.234.184.0/22
                  205.234.222.0-205.234.225.255
                  216.246.0.0-216.246.2.255
                  216.246.24.0/24
                  216.246.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:07:d3:ac:9e:8b:61:d7:ad:23:13:a3:51:8e:fd:20:a2:20:
         ad:ab:20:3b:97:8f:b6:35:6c:6a:9e:e2:09:39:6f:24:d1:b1:
         f6:c9:c8:55:78:19:8c:6c:66:48:29:b2:78:21:41:48:9a:f8:
         34:1b:6d:4f:d7:63:b2:d6:ef:c9:45:34:1f:3b:4b:4e:a5:b3:
         bc:f7:9c:45:76:50:f2:e2:15:08:7d:7c:f5:d4:00:8c:8d:39:
         e5:6b:88:ab:d8:f9:9e:51:fc:2d:8b:f0:23:4a:52:c2:ef:37:
         9a:6c:b5:15:0f:1c:69:4d:e6:82:b1:97:46:b1:dd:ab:7c:5b:
         f6:9e:3d:b8:67:a8:a6:38:e5:14:69:86:38:68:22:68:5d:98:
         62:db:83:eb:d4:16:49:72:bb:83:b7:1d:8e:a0:e6:8a:4e:22:
         dd:2f:df:35:42:95:4d:3d:a0:c9:03:53:d3:a3:5b:96:62:e3:
         83:a2:84:8a:cf:2a:d0:88:aa:c8:87:a0:ad:cf:c7:86:66:86:
         bb:79:f3:58:4c:c2:bf:fd:6e:c5:63:aa:b8:6b:49:62:5e:55:
         51:d5:27:6a:5e:5b:3a:9f:12:30:81:83:60:76:02:fa:77:98:
         72:bd:fe:29:9a:9d:45:3b:d4:ae:d3:0b:a8:29:aa:5d:a2:75:
         93:e3:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:55 2025 by rpki-client