Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS49484.roa
File:                     AS49484.roa (raw, json)
Hash identifier:          G/ScCHI2m947UYpQNio31BdEQ5gw0ngd8xTdpJMEb+8=
Subject key identifier:   2F:7B:EB:54:9E:6F:50:94:B1:90:AD:49:1A:3D:C9:35:41:F9:7E:EB
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       32B6CD575090DBDC4C4868B4611DC434B2FC0A0B
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS49484.roa
Signing time:             Thu 12 Mar 2026 21:35:54 +0000
ROA not before:           Thu 12 Mar 2026 21:30:54 +0000
ROA not after:            Thu 11 Mar 2027 21:35:54 +0000
asID:                     49484
IP address blocks:        66.225.239.0/24 maxlen: 24
                          204.93.164.0/24 maxlen: 24
                          204.93.186.0/24 maxlen: 24
                          204.93.201.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.244.0/24 maxlen: 24
                          216.246.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b6:cd:57:50:90:db:dc:4c:48:68:b4:61:1d:c4:34:b2:fc:0a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Mar 12 21:30:54 2026 GMT
            Not After : Mar 11 21:35:54 2027 GMT
        Subject: CN=2F7BEB549E6F5094B190AD491A3DC93541F97EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:72:84:a0:a7:1f:50:de:84:0c:53:8f:67:
                    02:c7:22:49:16:19:8c:fe:6f:d3:21:93:91:28:8a:
                    4c:25:15:66:45:da:f6:69:3b:a8:51:76:f2:9f:4e:
                    26:d0:f3:9b:ac:eb:1d:af:e8:09:5a:74:fe:f5:93:
                    46:f7:86:3d:ba:36:8f:3d:86:8f:ff:84:b5:52:d6:
                    3a:09:f5:aa:0e:2c:78:74:e6:68:a9:e1:a7:4c:47:
                    bf:e3:f4:47:2a:94:74:01:24:4f:81:ba:f9:89:23:
                    53:f4:f6:b1:52:fd:dc:a6:c6:b9:9a:96:a5:37:9b:
                    db:53:d5:da:c4:e0:9c:db:e8:f2:49:5f:f3:5c:2f:
                    dc:55:66:31:07:03:5e:2e:58:11:c3:07:4a:bb:b1:
                    c6:c5:37:e5:9e:14:e6:d2:0a:ca:8e:40:d3:40:cd:
                    97:da:d5:98:da:f7:43:b7:b2:6a:ef:bb:9f:d4:1e:
                    8e:98:21:37:ff:96:fb:05:7c:c4:4d:8c:cc:33:01:
                    75:c1:1d:69:29:71:3c:2a:24:46:7a:4c:ac:e6:6a:
                    9e:92:03:c9:c3:e6:21:a2:fa:04:f8:ba:3c:dd:4a:
                    56:07:78:ee:52:b0:5b:57:e5:23:9c:1b:09:02:14:
                    6f:c8:c7:53:7b:59:20:c1:10:82:a7:1e:a4:51:db:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7B:EB:54:9E:6F:50:94:B1:90:AD:49:1A:3D:C9:35:41:F9:7E:EB
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS49484.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.239.0/24
                  204.93.164.0/24
                  204.93.186.0/24
                  204.93.201.0/24
                  205.234.156.0/23
                  205.234.244.0/24
                  216.246.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:48:46:3e:d0:ce:96:3d:c0:f0:27:06:a0:f1:f7:9b:95:45:
         c7:a4:3e:d1:2a:06:42:06:ac:30:93:4e:0f:89:b6:0c:d8:2d:
         f1:1e:12:e2:f6:85:03:85:cb:f1:a2:15:60:70:c6:2f:8d:78:
         71:46:83:75:e1:1d:e6:75:9b:65:e0:9d:f9:e4:9a:36:ba:80:
         b0:17:48:d8:ea:86:4b:a6:77:95:18:79:08:8a:e1:c0:e0:3d:
         0b:a9:73:a8:f1:c2:ab:75:47:de:2f:d0:d8:a5:a8:38:3d:37:
         d0:da:87:04:fa:24:dd:63:49:c5:03:70:d5:dd:9b:42:91:3b:
         e2:ed:67:5c:67:0a:af:f7:60:7c:c0:f8:ce:70:5d:8b:8e:5d:
         62:3a:41:37:5d:ea:04:9d:a0:e6:19:1d:69:a8:af:9d:df:41:
         30:a0:0e:a4:34:a9:56:c5:0c:68:d5:36:02:70:32:1f:9e:49:
         31:c4:fc:8e:e8:cb:63:7a:38:43:a5:50:9d:fb:6b:f6:b4:03:
         36:51:d2:58:4c:37:98:2e:64:de:92:d1:35:12:ae:d0:c8:bb:
         dc:55:75:be:e7:b1:7f:57:ce:8c:96:2c:ff:f3:0a:ed:1a:72:
         49:f7:a5:18:e7:ec:ef:5b:96:74:cf:8f:0c:e6:d1:c7:20:0e:
         27:9c:53:83
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIUMrbNV1CQ29xMSGi0YR3ENLL8CgswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjYwMzEyMjEzMDU0WhcNMjcwMzExMjEzNTU0
WjAzMTEwLwYDVQQDEygyRjdCRUI1NDlFNkY1MDk0QjE5MEFENDkxQTNEQzkzNTQx
Rjk3RUVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJlyhKCnH1De
hAxTj2cCxyJJFhmM/m/TIZORKIpMJRVmRdr2aTuoUXbyn04m0PObrOsdr+gJWnT+
9ZNG94Y9ujaPPYaP/4S1UtY6CfWqDix4dOZoqeGnTEe/4/RHKpR0ASRPgbr5iSNT
9PaxUv3cpsa5mpalN5vbU9XaxOCc2+jySV/zXC/cVWYxBwNeLlgRwwdKu7HGxTfl
nhTm0grKjkDTQM2X2tWY2vdDt7Jq77uf1B6OmCE3/5b7BXzETYzMMwF1wR1pKXE8
KiRGekys5mqekgPJw+YhovoE+Lo83UpWB3juUrBbV+UjnBsJAhRvyMdTe1kgwRCC
px6kUdvGuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC9761Seb1CUsZCtSRo9yTVB
+X7rMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzQ5NDg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG
CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAQuHvAwQAzF2kAwQAzF26AwQAzF3J
AwQBzeqcAwQAzer0AwQA2PZgMA0GCSqGSIb3DQEBCwUAA4IBAQCQSEY+0M6WPcDw
Jwag8feblUXHpD7RKgZCBqwwk04PibYM2C3xHhLi9oUDhcvxohVgcMYvjXhxRoN1
4R3mdZtl4J355Jo2uoCwF0jY6oZLpneVGHkIiuHA4D0LqXOo8cKrdUfeL9DYpag4
PTfQ2ocE+iTdY0nFA3DV3ZtCkTvi7WdcZwqv92B8wPjOcF2Ljl1iOkE3XeoEnaDm
GR1pqK+d30EwoA6kNKlWxQxo1TYCcDIfnkkxxPyO6MtjejhDpVCd+2v2tAM2UdJY
TDeYLmTektE1Eq7QyLvcVXW+57F/V86Mliz/8wrtGnJJ96UY5+zvW5Z0z48M5tHH
IA4nnFOD
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:22:09 2026 by rpki-client