Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa
File:                     AS401838.roa (raw, json)
Hash identifier:          i2endQZ6NJHCz+VDSJsH1YS7iHgVOMoiE9/RXAk+hUI=
Subject key identifier:   68:D0:30:71:2B:A5:84:6B:F0:44:F3:29:AF:69:5C:DA:0A:EB:8D:8E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0A402B498FCCE87CDD294129CD5789E5470ECFC6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa
Signing time:             Sun 20 Jul 2025 04:40:33 +0000
ROA not before:           Sun 20 Jul 2025 04:35:33 +0000
ROA not after:            Sun 19 Jul 2026 04:40:33 +0000
asID:                     401838
IP address blocks:        192.228.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 06:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:40:2b:49:8f:cc:e8:7c:dd:29:41:29:cd:57:89:e5:47:0e:cf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 20 04:35:33 2025 GMT
            Not After : Jul 19 04:40:33 2026 GMT
        Subject: CN=68D030712BA5846BF044F329AF695CDA0AEB8D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:b8:85:db:e2:a0:97:ca:9b:aa:ce:ff:be:
                    20:fc:96:1c:8e:ed:b9:9d:a4:d5:6d:b8:b7:52:a9:
                    ed:7e:60:6b:22:6b:d8:99:62:59:d2:df:b1:06:5a:
                    48:d8:13:06:c8:12:19:58:34:24:16:ab:d1:25:c8:
                    7e:59:b9:70:c2:e3:99:c4:f8:c9:d6:d7:46:a2:79:
                    53:5d:db:73:c2:6c:cf:af:9d:8d:b0:c0:62:5a:c4:
                    b4:56:e7:ca:52:90:ac:46:db:56:8d:2b:82:5a:ee:
                    98:b3:5f:39:78:c0:00:8c:ea:52:a2:26:b1:23:41:
                    5e:7c:4c:1e:cb:5e:71:f0:88:22:a5:28:bf:ed:ed:
                    df:0e:90:56:1d:f5:0c:20:66:8c:70:3e:c1:a9:bf:
                    fb:5e:dc:5c:c5:9b:c0:6f:51:a9:ca:c7:f0:cb:26:
                    18:f3:a8:9d:14:2c:bc:58:a5:53:e3:f3:a4:c1:6c:
                    0d:c6:a4:a7:f9:67:08:b1:57:69:22:0f:55:ad:7a:
                    a6:5f:91:9a:a6:49:19:59:95:c4:3b:17:b7:0d:b7:
                    38:fc:be:99:72:ce:4e:7a:36:2e:61:8f:70:52:b6:
                    b0:fe:e8:2c:60:5e:11:ab:95:44:29:1b:1c:6e:ed:
                    fd:eb:f8:7d:47:1c:ad:28:fa:cf:71:94:de:7e:51:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:30:71:2B:A5:84:6B:F0:44:F3:29:AF:69:5C:DA:0A:EB:8D:8E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:21:25:3a:79:69:c2:19:cc:f0:4b:ed:54:ca:3b:3e:76:87:
         7d:7b:3f:81:cc:78:65:47:a7:8b:58:70:6d:0d:5e:f7:13:58:
         b1:a7:f0:c9:34:29:8f:d4:2b:f5:31:5e:86:af:91:54:a2:0d:
         fa:7e:ad:91:1e:63:eb:c8:ba:d5:0f:35:59:87:fe:99:8b:9e:
         1d:32:36:5d:7e:7e:a1:fa:ae:e0:bb:6d:93:0e:8a:0e:9f:d7:
         51:79:85:24:20:5e:d0:84:75:81:7c:52:e5:8f:4e:8f:2d:d7:
         03:f6:40:70:12:27:2f:79:4b:38:61:cd:d4:1b:2c:8d:cf:3b:
         45:0f:14:ed:5a:00:31:a3:56:4b:0d:ee:c9:67:db:d9:fe:15:
         fa:39:3c:15:09:f2:9f:49:24:10:b8:36:89:47:e0:c7:bb:7b:
         64:2f:f1:9f:38:32:9b:b3:83:41:14:1b:cd:de:fa:92:db:bf:
         0f:47:40:e5:86:cf:79:be:b7:3e:d0:0b:4b:53:fa:00:42:de:
         ef:74:14:b6:98:f6:d9:a5:dd:e8:18:db:70:f1:d7:b7:75:df:
         16:d4:de:57:81:f3:f7:c0:69:71:f8:ce:34:a1:02:f3:3c:cb:
         68:8b:80:06:02:9c:af:6f:5e:bd:58:e3:28:01:6a:b2:ed:ab:
         c4:20:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:23:46 2025 by rpki-client