Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa
File:                     AS203048.roa (raw, json)
Hash identifier:          /+IIRoOZpD0gbzDpkHM8fB3lcE+CaYaVFsDozIahV48=
Subject key identifier:   12:88:77:4B:BD:C0:88:81:9A:BD:6D:30:39:A6:9F:0A:68:1E:99:B5
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5F35E06E511D5247B8FBD54078766CC97CBC633C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa
Signing time:             Sun 29 Mar 2026 01:07:18 +0000
ROA not before:           Sun 29 Mar 2026 01:02:18 +0000
ROA not after:            Sun 28 Mar 2027 01:07:18 +0000
asID:                     203048
IP address blocks:        40.183.140.0/24 maxlen: 24
                          40.183.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 11:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:35:e0:6e:51:1d:52:47:b8:fb:d5:40:78:76:6c:c9:7c:bc:63:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 29 01:02:18 2026 GMT
            Not After : Mar 28 01:07:18 2027 GMT
        Subject: CN=1288774BBDC088819ABD6D3039A69F0A681E99B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:fe:a5:57:cd:d7:d8:ab:de:21:6f:d1:a7:
                    0e:6f:b7:86:8a:6d:b3:8c:b8:92:32:8b:29:55:69:
                    6b:f0:10:5a:d7:98:6a:2f:d4:6a:6f:fc:5b:d9:66:
                    0d:5b:c1:34:3c:f2:e6:44:ad:95:a6:c9:55:79:00:
                    73:43:fd:92:49:15:5b:15:a6:d5:97:80:17:05:cf:
                    df:49:d8:ca:f2:00:9b:9a:d9:21:ca:59:44:ee:c9:
                    2d:d5:b1:1e:94:25:f2:35:b0:63:54:74:96:c6:8e:
                    e4:2f:ca:ec:58:b4:2e:2a:39:ab:a1:69:b1:6b:2f:
                    b6:ae:13:2c:49:44:63:2a:a3:87:5a:bf:06:66:33:
                    78:32:6d:9e:02:88:02:6b:74:c6:96:18:16:68:57:
                    cb:aa:eb:97:a5:f4:1a:d6:8b:a0:60:51:33:5c:b8:
                    af:1a:46:c6:7e:7a:c0:f0:3b:91:da:d9:c0:32:52:
                    83:19:ec:8b:7d:b3:ce:94:93:8a:48:34:02:d0:0d:
                    a4:f5:41:af:c0:ed:4b:92:2a:2f:8e:5b:6b:4c:cc:
                    9f:57:3b:a5:8a:33:82:02:0c:b2:12:b7:66:4e:51:
                    7a:c3:6d:26:de:92:47:c5:26:78:30:a8:ce:95:55:
                    8c:a8:55:b8:d9:69:60:76:2c:91:86:3b:ba:a0:c3:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:88:77:4B:BD:C0:88:81:9A:BD:6D:30:39:A6:9F:0A:68:1E:99:B5
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.140.0/24
                  40.183.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:ae:07:40:b7:a5:3f:a5:f8:e9:7f:25:a4:33:6a:5e:3f:
         22:5b:d2:19:cb:d4:92:5d:51:f6:38:e7:fd:e6:ec:ee:23:13:
         c4:5c:b9:4f:c2:3c:38:b0:02:ce:39:e2:8d:44:8b:33:12:2b:
         f5:6a:c0:c1:4a:81:11:86:d1:78:be:ba:a1:d3:0f:97:74:43:
         b4:d5:1e:1a:1d:31:f5:f2:9d:1d:0c:1f:bd:48:2d:b5:94:5b:
         23:52:6e:43:a9:71:c8:0d:83:c6:6f:16:51:8d:0b:fb:60:a5:
         e1:a2:e7:48:bb:b4:eb:89:f6:6c:b8:4b:d0:a5:10:02:fc:48:
         cc:a9:1f:e9:16:e7:d9:16:1e:39:d1:33:b5:dd:bc:7a:59:98:
         4e:ec:21:c2:a3:2a:c9:3e:3d:12:da:ff:1d:dc:da:81:4b:1d:
         7a:1a:8c:16:90:7b:00:2f:16:e1:06:8b:4f:34:12:ac:23:46:
         46:f0:89:a7:5c:e3:7b:80:10:fb:37:7f:ff:ca:fa:e0:97:8c:
         0f:ec:61:51:da:dc:bf:11:fa:59:0e:8c:54:55:34:c5:52:6e:
         a8:3e:aa:ca:5c:18:51:58:5c:ae:5f:25:2c:e2:0d:57:8e:8c:
         c3:65:da:fe:aa:0b:53:35:cd:f8:03:2d:aa:0e:19:24:a0:ca:
         3c:ba:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:39 2026 by rpki-client