Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401725.roa
File:                     AS401725.roa (raw, json)
Hash identifier:          Q+uQsrhmhLmtar4gHc4Kfk4uyYUVwR4+/8xSqOb3ovY=
Subject key identifier:   66:B8:D5:FC:CD:1F:AB:A5:AF:BF:5F:49:94:40:13:50:F8:3C:A4:FB
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       50627CE231401732C0A8EA84A0911582FB47DB58
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401725.roa
Signing time:             Fri 09 Oct 2026 14:36:20 +0000
ROA not before:           Fri 09 Oct 2026 14:31:20 +0000
ROA not after:            Fri 08 Oct 2027 14:36:20 +0000
asID:                     401725
IP address blocks:        40.27.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:62:7c:e2:31:40:17:32:c0:a8:ea:84:a0:91:15:82:fb:47:db:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct  9 14:31:20 2026 GMT
            Not After : Oct  8 14:36:20 2027 GMT
        Subject: CN=66B8D5FCCD1FABA5AFBF5F4994401350F83CA4FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:2f:37:07:07:25:54:31:4b:b5:6c:03:49:
                    03:44:53:e7:a0:00:21:62:26:36:a0:ee:c9:87:d3:
                    13:be:8e:3f:25:9d:5f:af:0a:91:5a:7c:77:0d:12:
                    71:c2:bb:72:9e:e7:94:03:de:b4:37:2b:0e:98:e1:
                    77:88:5a:cb:b8:79:80:8c:a5:1a:e5:4a:09:da:a6:
                    1f:fd:e4:c8:7b:be:f3:d1:38:4a:f8:8c:2a:27:90:
                    1c:9d:5f:ab:94:fe:32:24:0c:6f:1e:93:7c:ed:c5:
                    91:45:ec:84:a4:a4:6b:dd:11:ba:16:f8:c1:33:7b:
                    60:ee:73:a2:1d:d7:96:2b:6b:65:c0:09:70:1e:23:
                    12:2e:6c:cb:19:7a:8e:26:20:1c:3e:45:8e:0e:21:
                    06:25:bc:f5:10:e7:1a:b3:cb:64:3f:8c:a1:26:88:
                    f3:e5:d9:26:ac:da:49:db:09:93:54:42:4b:77:73:
                    f3:17:b8:e6:6a:23:ae:f8:51:68:f2:a3:94:48:64:
                    4f:af:66:76:f3:3d:07:ea:96:c5:30:37:63:b4:14:
                    3d:16:d4:58:4c:d7:f6:c2:98:e0:f2:f4:e7:96:07:
                    84:64:82:d7:4f:3f:e2:7d:40:da:3a:d1:2c:25:72:
                    28:b6:a6:c6:99:4f:1a:cf:98:36:82:b5:35:96:57:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:D5:FC:CD:1F:AB:A5:AF:BF:5F:49:94:40:13:50:F8:3C:A4:FB
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401725.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:98:3d:c7:ca:47:70:41:1a:8b:d3:ef:47:8d:c4:f9:6a:
         67:b6:24:56:ec:6b:28:f2:e7:01:3c:ec:43:63:27:11:cb:44:
         df:54:d7:c6:21:fb:ef:c2:65:10:6b:0e:44:34:de:be:aa:67:
         1e:59:a9:eb:8e:4e:6b:33:df:c7:8e:65:36:fd:4c:6e:75:26:
         6c:50:fb:ac:4c:c0:9a:99:0c:1b:a1:65:d0:8a:73:64:16:68:
         86:f1:c7:a4:ad:f0:cd:e1:e8:eb:76:66:55:e4:d5:f0:63:ed:
         ba:c0:3c:f2:de:83:46:c0:27:64:df:13:a7:8f:83:8c:ff:48:
         36:e6:7b:6d:62:1a:af:eb:55:ca:0a:99:19:da:64:45:df:23:
         8e:40:89:87:36:00:dc:3e:6c:22:d1:b5:e2:a6:b4:34:b6:43:
         eb:9b:5b:dd:fb:45:b8:68:27:61:b1:98:1a:82:bb:36:93:ab:
         ce:3c:69:db:24:5d:ba:18:f9:90:c3:b1:92:50:b9:da:8e:69:
         c6:d0:9e:b9:79:cc:7d:3c:48:ce:97:04:1f:c8:dd:a2:7c:52:
         7f:3b:1d:87:7a:0e:fa:f2:6a:4d:b1:03:85:2f:c4:46:6d:fd:
         cb:ca:f4:83:ff:01:14:38:3a:f5:cb:f7:4f:ca:1a:5c:db:56:
         77:a6:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:38:01 2026 by rpki-client