Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
File:                     AS401486.roa (raw, json)
Hash identifier:          B1AVeFfc+LwloBTM/ZtqpyzaePP2XniOMeJEiXMcZS0=
Subject key identifier:   AA:09:EB:6C:6D:53:B7:94:3E:6E:28:41:9B:8E:31:33:C4:01:D2:6F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       02CBA0433569A5660F9F87783EA403EAAF0C260E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
Signing time:             Wed 02 Jul 2025 16:25:03 +0000
ROA not before:           Wed 02 Jul 2025 16:20:03 +0000
ROA not after:            Wed 01 Jul 2026 16:25:03 +0000
asID:                     401486
IP address blocks:        74.50.10.0/24 maxlen: 24
                          74.50.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cb:a0:43:35:69:a5:66:0f:9f:87:78:3e:a4:03:ea:af:0c:26:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  2 16:20:03 2025 GMT
            Not After : Jul  1 16:25:03 2026 GMT
        Subject: CN=AA09EB6C6D53B7943E6E28419B8E3133C401D26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:9c:20:9c:e3:02:92:69:ad:b7:05:8b:23:
                    2e:bf:fd:22:65:4b:5c:38:81:27:a3:3c:e3:82:c8:
                    7b:4f:14:e3:70:65:ee:7d:14:d1:cb:d6:31:39:69:
                    13:54:a2:42:eb:5a:ed:91:a2:1c:24:62:23:0f:9d:
                    9c:b7:69:fe:6a:18:7a:14:cb:ad:80:38:8d:9d:3b:
                    20:62:7a:8a:9e:c8:8f:24:80:e7:a9:63:d3:f5:e0:
                    13:47:32:84:14:3a:3f:92:6e:03:f3:38:06:21:c9:
                    dc:3e:99:32:60:12:ae:a1:b8:91:16:f9:bc:cf:a2:
                    92:dc:34:a2:e2:18:90:19:bf:85:9e:7a:cb:bd:eb:
                    ea:3c:a3:d6:d9:1c:eb:a0:e2:e7:2a:92:6c:1b:c1:
                    2e:dc:37:61:10:60:35:81:ac:6a:37:b2:4b:09:2c:
                    5d:06:4d:dc:ab:b6:25:9d:1f:fd:6b:a1:64:48:01:
                    0d:20:cb:e1:7b:f8:1f:db:12:50:cc:9b:08:64:60:
                    54:8b:6c:50:cd:62:4c:73:8a:c2:b1:80:be:6a:fc:
                    4d:11:11:ce:de:32:41:68:29:a1:80:af:16:13:60:
                    01:cd:5e:73:d4:a5:98:af:86:25:4b:14:24:44:36:
                    74:be:a1:34:ae:ad:fb:b8:f8:17:68:c7:9e:e6:fc:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:09:EB:6C:6D:53:B7:94:3E:6E:28:41:9B:8E:31:33:C4:01:D2:6F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:61:4c:68:35:5f:03:15:14:3c:6d:d4:a9:99:b6:cb:da:e9:
         fd:0e:92:f5:dc:ea:00:f7:bb:91:c2:ff:98:bb:0f:df:a3:65:
         4a:25:71:09:a2:cf:e4:f5:d3:c7:b5:fa:ee:44:02:59:19:0e:
         c1:20:aa:1c:7e:4d:01:52:aa:b5:de:5b:f4:1c:0f:07:1a:92:
         b1:5a:56:c2:9e:74:d3:85:90:b6:7a:bf:af:7d:17:13:38:8f:
         05:37:9c:e1:2b:01:b7:14:ed:1f:0a:fe:00:1e:4c:b7:60:65:
         3b:a0:19:f7:35:d7:87:ec:90:03:79:b0:bc:5f:a5:87:1e:a1:
         2b:7b:d7:59:84:a7:4d:d7:67:24:de:83:94:eb:4a:4a:9d:62:
         05:bd:8b:24:82:20:45:62:ba:40:ff:ac:6f:2e:07:87:a1:42:
         bc:9e:d1:a7:7a:58:2e:e8:6f:2a:83:3f:1a:af:64:28:34:3f:
         a2:f7:39:e4:4a:e3:a6:f1:91:3e:0b:97:75:68:46:0f:e9:25:
         5b:b7:ba:f8:fb:33:e3:38:46:10:fd:64:86:29:7c:7d:37:d4:
         35:5e:56:bf:53:06:8c:aa:0f:22:f8:f2:1d:6b:1d:54:7b:43:
         15:de:5f:c8:a6:f3:d4:bc:10:aa:c3:85:d1:19:6e:91:8d:07:
         97:72:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:43:04 2025 by rpki-client