Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS399486.roa
File:                     AS399486.roa (raw, json)
Hash identifier:          RyOynjjUXKNse6rruMJwxmm/T2NDZLoEtni7gC0eCL0=
Subject key identifier:   2A:3A:E6:02:49:DC:30:47:D7:FE:69:1B:B4:0E:B3:E0:A5:58:32:A9
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       621C385E2DA6FC176FF8595DD2B5E0BB18C7A415
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS399486.roa
Signing time:             Fri 17 Oct 2025 19:30:38 +0000
ROA not before:           Fri 17 Oct 2025 19:25:38 +0000
ROA not after:            Fri 16 Oct 2026 19:30:38 +0000
asID:                     399486
IP address blocks:        66.225.254.0/24 maxlen: 24
                          205.234.144.0/24 maxlen: 24
                          205.234.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1c:38:5e:2d:a6:fc:17:6f:f8:59:5d:d2:b5:e0:bb:18:c7:a4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 17 19:25:38 2025 GMT
            Not After : Oct 16 19:30:38 2026 GMT
        Subject: CN=2A3AE60249DC3047D7FE691BB40EB3E0A55832A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:d6:a3:b4:32:f7:53:5e:f9:98:3a:63:cb:
                    32:97:c3:3d:6e:90:f4:20:1a:4b:f0:a8:69:fd:29:
                    51:8e:23:46:b9:86:e3:4e:ca:f4:92:08:f0:ed:02:
                    49:74:3b:4e:c8:49:2f:36:11:0f:ad:b5:2c:86:f1:
                    c4:7d:03:57:c3:ed:7d:05:02:62:4f:e4:12:00:46:
                    57:a1:0c:ed:3d:47:94:ff:5f:cc:a4:81:6f:c9:06:
                    2b:38:a6:fc:a6:e1:72:d9:3d:ea:cc:46:72:b3:8c:
                    f7:f4:67:9f:3c:f3:c7:a4:76:02:75:c2:87:a1:b7:
                    06:e2:ea:23:b4:97:91:1d:ac:a5:34:fc:92:9e:1a:
                    c4:e5:5a:a7:a7:c5:c6:7e:b6:64:77:f8:e2:e9:bc:
                    80:7c:26:83:31:04:b6:54:af:5d:03:7f:f3:a9:ed:
                    5a:92:f5:89:cf:e0:28:a5:64:fb:5c:f3:4b:2e:30:
                    8b:d4:9d:ba:be:85:46:46:2b:d7:5b:6e:71:68:a6:
                    45:17:33:38:62:48:f9:cd:d5:de:e3:6e:ba:47:37:
                    64:88:cd:08:a5:f9:68:d7:e0:b8:e2:2c:22:24:33:
                    47:85:30:9e:7d:ef:17:09:89:a2:a8:20:dc:76:92:
                    3f:e3:dc:36:ee:22:7f:5b:f6:2e:68:f4:bd:84:66:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3A:E6:02:49:DC:30:47:D7:FE:69:1B:B4:0E:B3:E0:A5:58:32:A9
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS399486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.254.0/24
                  205.234.144.0/24
                  205.234.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:86:f4:d4:e5:3f:7d:18:99:27:73:f4:0e:0d:ed:a7:38:b7:
         45:fd:7b:d7:14:91:83:68:b8:71:6f:7e:cb:89:1a:96:fb:7e:
         28:f0:e3:e1:55:ac:95:59:a4:1a:a9:56:38:e0:90:5e:62:9e:
         da:ba:ac:25:0a:29:0c:df:2f:31:d9:68:d9:76:01:8e:15:85:
         7a:54:c2:6d:34:c3:17:55:f8:63:b9:d4:09:55:fc:30:88:58:
         a8:16:b4:d8:8b:15:93:0e:02:14:74:ca:be:72:0b:b1:3c:bd:
         f5:2a:b0:3b:76:f6:c0:e9:89:3b:62:14:02:85:a9:2d:dd:ff:
         16:b6:6d:d3:12:6f:e5:7f:e0:ae:c5:09:fb:f7:cc:39:f6:15:
         0e:7f:40:7f:77:e2:8e:e3:e5:af:92:76:20:bf:1c:e0:60:40:
         63:84:30:ce:1b:e6:28:0d:5f:5e:cc:bc:04:64:25:b5:80:08:
         d5:25:1d:c6:e6:17:85:49:20:96:57:a0:50:0d:b1:6f:67:1d:
         81:13:27:fe:c0:27:b1:36:9a:14:27:86:2e:c9:2a:d1:7b:5b:
         cf:7e:d8:ae:f2:9f:d7:fd:66:77:c4:35:65:60:20:0a:66:ff:
         bb:11:cf:9b:4c:42:65:b5:b6:74:31:28:03:26:65:69:6d:36:
         b7:ff:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:27:57 2025 by rpki-client