Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS394303.roa
File:                     AS394303.roa (raw, json)
Hash identifier:          iQ7RswP/G6My/pVA/x5DNO/IOx1INffsQYHuyx5pS9U=
Subject key identifier:   0D:89:24:74:72:A6:87:0F:B5:CA:EB:62:9F:6B:0B:A5:F9:5A:3A:75
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       04460178A1F3FDE6EEB13A1F43D83F10C03902B7
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS394303.roa
Signing time:             Tue 06 Oct 2026 14:15:21 +0000
ROA not before:           Tue 06 Oct 2026 14:10:21 +0000
ROA not after:            Tue 05 Oct 2027 14:15:21 +0000
asID:                     394303
IP address blocks:        50.31.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:46:01:78:a1:f3:fd:e6:ee:b1:3a:1f:43:d8:3f:10:c0:39:02:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct  6 14:10:21 2026 GMT
            Not After : Oct  5 14:15:21 2027 GMT
        Subject: CN=0D89247472A6870FB5CAEB629F6B0BA5F95A3A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:de:19:86:08:34:b9:c5:d2:01:fa:32:a9:4a:
                    0e:98:fc:10:2d:c9:4c:a5:ce:1a:6a:8a:66:c4:73:
                    22:bc:08:c4:de:24:2d:2d:2f:cc:49:80:8a:6e:ca:
                    70:93:4f:36:19:a0:cf:64:01:62:56:e4:c7:af:43:
                    7d:ad:7c:e9:20:3d:2e:70:ef:4a:66:af:8b:41:54:
                    1d:34:80:c3:c5:d3:98:d5:cc:ad:02:be:f2:3c:c5:
                    5d:06:c6:42:e5:1c:e7:2e:05:82:6f:f5:10:c8:87:
                    78:ec:94:9c:4a:8e:7c:94:37:e6:0e:8c:31:d2:56:
                    5b:43:c4:cd:48:4b:6d:e5:ea:36:10:74:f1:18:fc:
                    a8:5b:d0:fe:8c:45:51:ca:e1:53:55:eb:3e:60:49:
                    3f:41:d7:6b:41:63:65:13:8c:10:af:c8:4d:4c:9d:
                    37:15:5d:ad:e4:f0:b9:4f:b2:3b:4b:6f:bc:83:d0:
                    8d:3b:b0:c8:57:e9:6d:7a:5e:9c:f8:05:df:ce:22:
                    14:f0:fb:0f:9e:d2:c0:2e:47:e3:3f:f7:74:af:34:
                    10:c2:2c:71:41:6a:a5:d9:18:a5:9e:8f:1d:4a:c2:
                    a8:ae:cd:df:56:f0:96:2e:4d:5e:d4:cd:27:6c:e4:
                    11:f3:38:2b:e9:9e:2e:9a:fd:58:2a:0f:a0:cf:c3:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:24:74:72:A6:87:0F:B5:CA:EB:62:9F:6B:0B:A5:F9:5A:3A:75
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS394303.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:61:cb:1b:87:75:be:85:70:48:ce:cc:ff:3a:2e:06:d6:46:
         23:85:8f:b0:d1:ef:b2:cb:d6:8a:39:f9:31:5c:f8:b1:f3:14:
         55:40:ba:eb:ad:fd:33:ec:35:6e:78:1d:12:9f:7b:4d:df:1f:
         58:85:2f:93:72:85:ee:7a:e5:c2:48:ba:b3:b0:0c:5a:15:32:
         3e:48:63:c5:2b:32:8a:cc:3c:fc:43:7b:e1:bf:11:68:a7:8f:
         1c:23:48:b0:e8:5e:31:bf:dc:89:23:5d:6f:0a:e0:d4:92:fd:
         9a:23:35:cb:03:92:d7:7c:9e:e4:b6:e9:71:6f:67:bb:a2:d5:
         69:da:00:c2:a4:bd:ab:ff:3c:ee:ef:a7:5b:f7:8d:b8:20:08:
         16:46:0c:60:79:61:71:a7:8b:2e:1e:05:d0:a9:7c:1b:35:45:
         cf:51:51:dc:33:11:85:56:04:72:15:59:2e:da:b8:d2:c5:1f:
         0d:f2:eb:38:e2:84:d4:07:ad:35:ab:ba:98:05:47:02:ed:1b:
         d2:0f:ca:78:57:a7:cd:10:14:3e:4d:9f:0b:b8:5a:b4:49:0b:
         7e:72:8b:dd:46:cd:2a:0b:52:22:32:8c:7f:bd:d5:f5:bc:91:
         f0:27:bb:7e:1e:95:98:47:4c:a1:30:fc:e2:d8:c0:b4:75:40:
         75:31:69:e3
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUBEYBeKHz/ebusTofQ9g/EMA5ArcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjYxMDA2MTQxMDIxWhcNMjcxMDA1MTQxNTIx
WjAzMTEwLwYDVQQDEygwRDg5MjQ3NDcyQTY4NzBGQjVDQUVCNjI5RjZCMEJBNUY5
NUEzQTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl94Zhgg0ucXS
AfoyqUoOmPwQLclMpc4aaopmxHMivAjE3iQtLS/MSYCKbspwk082GaDPZAFiVuTH
r0N9rXzpID0ucO9KZq+LQVQdNIDDxdOY1cytAr7yPMVdBsZC5RznLgWCb/UQyId4
7JScSo58lDfmDowx0lZbQ8TNSEtt5eo2EHTxGPyoW9D+jEVRyuFTVes+YEk/Qddr
QWNlE4wQr8hNTJ03FV2t5PC5T7I7S2+8g9CNO7DIV+ltel6c+AXfziIU8PsPntLA
LkfjP/d0rzQQwixxQWql2Rilno8dSsKors3fVvCWLk1e1M0nbOQR8zgr6Z4umv1Y
Kg+gz8NfZQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFA2JJHRypocPtcrrYp9rC6X5
Wjp1MB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzM5NDMwMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjIf/DANBgkqhkiG9w0BAQsFAAOC
AQEAY2HLG4d1voVwSM7M/zouBtZGI4WPsNHvssvWijn5MVz4sfMUVUC66639M+w1
bngdEp97Td8fWIUvk3KF7nrlwki6s7AMWhUyPkhjxSsyisw8/EN74b8RaKePHCNI
sOheMb/ciSNdbwrg1JL9miM1ywOS13ye5LbpcW9nu6LVadoAwqS9q/887u+nW/eN
uCAIFkYMYHlhcaeLLh4F0Kl8GzVFz1FR3DMRhVYEchVZLtq40sUfDfLrOOKE1Aet
Nau6mAVHAu0b0g/KeFenzRAUPk2fC7hatEkLfnKL3UbNKgtSIjKMf73V9byR8Ce7
fh6VmEdMoTD84tjAtHVAdTFp4w==
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:04 2026 by rpki-client