Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS394305.roa
File:                     AS394305.roa (raw, json)
Hash identifier:          2QTSAeOHSSyql00TLeEn4R/DCSSNeb99tL9NTpEU2RA=
Subject key identifier:   6E:E6:3D:A3:08:2C:61:8F:15:E2:3C:9F:C6:CE:36:DF:0C:49:90:3D
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       1AE732F5369CD346E7FA78E3A96EEB80FAF99110
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS394305.roa
Signing time:             Wed 06 May 2026 07:17:20 +0000
ROA not before:           Wed 06 May 2026 07:12:20 +0000
ROA not after:            Wed 05 May 2027 07:17:20 +0000
asID:                     394305
IP address blocks:        216.75.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:32:f5:36:9c:d3:46:e7:fa:78:e3:a9:6e:eb:80:fa:f9:91:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:20 2026 GMT
            Not After : May  5 07:17:20 2027 GMT
        Subject: CN=6EE63DA3082C618F15E23C9FC6CE36DF0C49903D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e4:9c:58:b7:a0:18:7a:2a:4a:02:b7:62:3c:
                    45:07:62:ed:ad:c3:16:6d:95:e7:28:41:f8:5f:e9:
                    e1:7b:98:28:d7:28:34:45:40:8a:46:90:50:a3:66:
                    74:69:39:76:94:25:a9:01:f8:e6:72:f1:60:9c:fb:
                    57:ce:73:2d:b5:13:f6:a1:43:8f:6d:88:51:2d:05:
                    d3:7e:d3:cb:e0:a8:29:a4:80:ce:d2:c3:58:a6:9b:
                    08:94:b6:c2:01:3a:f1:09:a4:28:5d:7c:15:ed:65:
                    3d:81:f6:69:90:ce:ff:7b:de:d0:6f:6e:a9:31:73:
                    2c:d4:37:8d:be:fe:3d:f0:fe:84:63:8b:10:99:17:
                    f3:5b:48:59:d6:36:c7:0f:36:25:94:8c:d5:a0:b8:
                    a2:93:d3:4a:b1:e6:91:a7:c5:62:70:98:27:75:30:
                    c8:a5:60:be:9e:20:c3:5d:39:22:2c:f6:22:1e:ed:
                    93:bc:d5:5a:5f:a3:a0:77:18:35:e2:f9:1f:b5:75:
                    62:66:a9:67:11:04:7e:35:fe:b2:c3:e2:97:f9:61:
                    cf:eb:84:f7:d6:fc:42:4e:cf:e1:f2:9f:80:e4:8f:
                    81:ec:60:3f:1e:43:a2:19:7d:c9:a6:ea:df:ff:10:
                    65:50:fa:de:74:c1:bd:ad:be:4b:85:0b:33:28:b4:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:3D:A3:08:2C:61:8F:15:E2:3C:9F:C6:CE:36:DF:0C:49:90:3D
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS394305.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:78:11:bd:3e:fc:91:e6:5b:40:11:4c:f7:d9:99:07:a3:5a:
         ac:a8:54:35:56:a1:15:ff:2c:3c:d6:95:fe:69:12:80:20:6d:
         0a:8d:ca:03:89:cf:f6:2e:6e:2a:23:35:b4:1a:c6:9e:f9:54:
         75:e1:a4:2a:a2:eb:bb:70:37:d8:34:56:92:5c:a4:ef:7b:0a:
         49:f1:41:04:b0:f6:ab:90:77:49:c2:ae:14:93:f9:4f:f6:c3:
         f2:fa:ba:5e:1f:0b:61:7e:27:7d:ec:d0:3a:ac:5e:61:62:dd:
         f1:0b:81:89:8f:fc:21:77:e7:e7:d0:22:08:b7:8c:4e:af:f4:
         0b:08:fc:9a:2e:66:2d:11:15:19:93:12:b9:6b:b6:86:8f:3a:
         f8:36:fa:f7:a9:09:63:10:d2:5b:ed:80:f9:e5:4f:81:d6:a2:
         6a:89:2e:f9:5d:2c:ed:d2:8c:b7:76:df:e2:84:b9:70:ff:16:
         4c:d7:2d:18:2c:69:42:77:68:0e:4f:4a:03:6b:cf:36:e6:8d:
         fe:d3:b3:89:79:b0:d7:02:e9:3e:86:64:df:c2:35:0f:4f:49:
         37:f8:a2:c3:45:95:bc:16:96:d4:35:be:3b:f5:90:69:4b:38:
         3b:15:5c:b7:ad:48:f1:07:0e:23:15:0e:93:0b:2b:53:12:10:
         8b:e2:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:32 2026 by rpki-client