Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401186.roa
File:                     AS401186.roa (raw, json)
Hash identifier:          CDXD/MR0K1kATy8Xbjh2dDujaAClaeUJn+n6awINNyc=
Subject key identifier:   C2:8D:BD:CC:3B:31:C9:81:A5:CE:5E:B2:5B:B5:15:4D:F3:62:5E:F9
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       76AE3D9D7FF4E0D564E82D7C83D406F3135619BB
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401186.roa
Signing time:             Tue 06 Oct 2026 11:36:20 +0000
ROA not before:           Tue 06 Oct 2026 11:31:20 +0000
ROA not after:            Tue 05 Oct 2027 11:36:20 +0000
asID:                     401186
IP address blocks:        40.183.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ae:3d:9d:7f:f4:e0:d5:64:e8:2d:7c:83:d4:06:f3:13:56:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct  6 11:31:20 2026 GMT
            Not After : Oct  5 11:36:20 2027 GMT
        Subject: CN=C28DBDCC3B31C981A5CE5EB25BB5154DF3625EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:ef:ac:84:0a:3b:3b:96:5a:4b:df:61:cb:
                    35:e3:fa:9e:e3:99:6e:fb:f5:46:2f:6c:9d:3f:04:
                    87:3b:7d:4e:85:ba:1c:2f:69:75:86:da:f9:ae:b4:
                    d0:f0:ad:61:fc:71:2a:05:b2:be:a6:2d:48:65:32:
                    d1:c5:a3:fc:f1:7e:74:ef:c6:67:fb:a0:b4:9b:ed:
                    2c:56:7b:e5:fb:37:de:22:7b:c0:79:91:3e:f6:12:
                    d9:bf:05:87:b5:67:3a:a7:8e:93:fa:d1:d1:99:0e:
                    95:05:ca:a9:ea:64:2a:e5:2e:bf:ae:b5:89:fc:e0:
                    04:8e:f2:41:05:45:cc:0c:ff:12:dc:2b:85:b0:31:
                    7c:a6:b3:2f:ea:69:3b:f6:77:ed:71:d0:a3:91:61:
                    35:4e:00:83:4c:3c:7d:91:8c:11:0b:c6:91:c5:50:
                    2d:fd:9a:ab:ec:cd:2f:61:b1:d8:08:b7:cb:41:13:
                    73:e5:47:21:08:50:58:c4:f0:8c:21:8f:13:d3:c2:
                    d4:42:f5:38:3c:a7:6d:81:53:42:9f:3f:ef:7b:d1:
                    33:c5:9a:52:01:38:69:f7:40:09:14:24:5e:b2:e2:
                    96:4f:7a:60:1f:2c:d4:2f:45:e9:e7:a6:ee:78:23:
                    06:d2:dc:eb:2a:cc:5f:aa:cb:fa:ba:ee:2f:4e:27:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8D:BD:CC:3B:31:C9:81:A5:CE:5E:B2:5B:B5:15:4D:F3:62:5E:F9
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:59:36:70:03:12:f5:c8:6a:93:04:86:80:c9:9e:3a:d9:02:
         27:29:e9:88:94:0d:95:ce:4e:47:da:eb:42:cc:72:02:d3:51:
         61:fd:43:95:e4:de:c9:54:ec:eb:3c:56:43:04:b0:db:6f:db:
         7c:5a:9b:6e:ed:d2:e6:eb:55:0e:46:99:79:20:d8:ac:57:41:
         c5:9b:c1:dd:69:4a:cc:11:6a:0a:95:bc:a7:c3:70:35:81:b8:
         1c:21:ee:46:81:79:90:57:ca:e2:33:44:2a:23:75:50:71:40:
         64:c6:12:fe:0f:1e:d6:35:ba:d7:68:66:3c:c7:5a:d2:dc:db:
         d3:1b:ea:22:49:22:ae:5e:da:83:59:a4:0b:5e:25:a8:db:31:
         ec:05:4b:e3:c1:f9:93:2c:e5:c1:03:a0:c0:14:59:06:91:da:
         44:7c:eb:3f:6b:fb:1c:ae:19:c1:61:7e:b8:fc:0e:01:df:ac:
         df:40:77:5b:91:a2:01:18:57:16:88:98:61:97:c8:91:69:bb:
         f1:d1:ac:79:ba:7e:80:e0:e1:4e:34:6d:07:bb:5f:c4:01:28:
         30:90:85:a0:22:6b:21:b8:4e:05:fa:cc:a4:a3:27:f9:a3:91:
         ad:8c:a9:06:1a:fe:f3:d0:00:8a:34:0c:90:26:44:7c:cf:c7:
         7b:6d:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:37:58 2026 by rpki-client