Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa
File:                     AS203048.roa (raw, json)
Hash identifier:          WzmQF/DyUbi36tZWfZY317F9CrE1tjDcgxB8gcif0Ig=
Subject key identifier:   E9:E8:8F:A7:4F:69:C2:90:5B:95:2B:65:C4:6A:A6:1A:A5:11:47:DF
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       28307F4F611A4531900E351B57773C632ECB6DB1
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa
Signing time:             Wed 08 Jul 2026 05:32:15 +0000
ROA not before:           Wed 08 Jul 2026 05:27:15 +0000
ROA not after:            Wed 07 Jul 2027 05:32:15 +0000
asID:                     203048
IP address blocks:        40.27.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 00:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:30:7f:4f:61:1a:45:31:90:0e:35:1b:57:77:3c:63:2e:cb:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul  8 05:27:15 2026 GMT
            Not After : Jul  7 05:32:15 2027 GMT
        Subject: CN=E9E88FA74F69C2905B952B65C46AA61AA51147DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:fb:e8:ae:74:f9:fb:a4:37:66:71:dd:21:
                    5d:c8:92:51:a4:9b:54:cd:cc:ea:4e:a9:63:50:50:
                    c9:55:ff:97:21:79:16:31:6d:fc:b9:c6:ed:32:da:
                    53:96:d4:8f:90:5e:7d:8b:68:e6:71:f8:5e:1d:22:
                    b8:6b:08:f1:05:f7:6e:5c:0c:8c:50:5d:00:12:f2:
                    59:86:fb:37:51:8e:0c:32:15:3c:74:1e:b8:4d:a2:
                    81:67:32:34:f3:84:59:24:d0:84:df:f7:6c:c0:63:
                    d9:e2:6d:a7:5f:95:ec:09:23:9b:ae:15:ef:a8:43:
                    68:52:aa:c8:f9:52:71:68:18:e0:4a:9b:56:77:09:
                    94:3d:43:de:ca:dd:58:a9:52:89:ed:c3:e1:f8:80:
                    c4:0f:3c:82:93:20:e9:74:b0:2d:9b:7d:ed:52:07:
                    fe:a4:5b:86:46:b2:93:36:5f:b3:21:81:2a:f5:2f:
                    5e:3c:55:61:4a:b4:5a:3c:dd:81:4f:da:4d:30:26:
                    1c:af:b5:6e:9b:eb:33:c2:fc:66:28:af:7d:11:85:
                    dc:12:41:ff:f6:ed:22:d5:b8:7c:b5:54:51:52:f8:
                    d4:16:60:0e:a1:4d:3e:ef:0a:cb:68:8f:d1:f4:e8:
                    17:52:6a:52:ea:72:db:bc:03:d0:56:51:d2:08:4d:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E8:8F:A7:4F:69:C2:90:5B:95:2B:65:C4:6A:A6:1A:A5:11:47:DF
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b2:9d:74:fa:41:64:d0:2f:57:83:1b:ef:c0:5d:aa:a4:4d:
         6d:46:77:56:dc:73:3d:33:d4:ac:66:42:2c:48:fb:01:3b:b6:
         9b:be:9d:34:b5:13:a0:22:d2:e3:eb:44:5d:b8:37:78:0e:3f:
         c2:66:ce:8e:d2:41:74:0f:31:01:e5:52:c8:e4:9a:ab:8c:8b:
         d1:eb:94:41:c5:90:4b:2c:3c:79:4b:42:bf:e5:73:5c:5e:dd:
         22:44:3b:1a:36:02:d3:82:53:6d:47:96:32:89:3e:73:fc:f1:
         28:0b:ff:97:20:b1:08:09:ed:41:22:a9:28:fa:c9:e4:78:69:
         79:93:7c:d7:62:05:5d:3d:2d:00:38:b0:14:71:53:22:60:73:
         38:75:57:e8:08:b3:00:14:5f:52:8a:cc:01:43:1d:0a:bf:39:
         20:97:52:0e:0c:4c:e9:49:4f:a0:c8:b9:8a:ae:e7:5f:a5:b3:
         8e:f7:14:c3:7d:dc:cd:78:e0:b3:09:3b:e8:2b:3c:ec:18:3e:
         45:57:a1:94:e8:e6:93:d1:b5:d5:66:c6:21:ea:a1:1f:05:ef:
         b8:d1:8a:86:9b:63:8b:e2:05:22:c8:fd:93:1d:1d:e6:b2:ca:
         34:0c:d7:36:55:ea:0d:b5:32:32:c2:d5:31:1d:c5:cf:1a:18:
         5f:25:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:12:43 2026 by rpki-client