Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203106.roa
File:                     AS203106.roa (raw, json)
Hash identifier:          /wd3zk1bfP3qPFcQaroAgHSXiviqhGejEad+aMyhXdc=
Subject key identifier:   B8:E1:E7:37:B5:D6:27:3F:85:91:6F:5E:12:31:5F:FE:0C:B1:AC:93
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       250F9D63DDE3F71D31EB49B3072E7FFC702945B2
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203106.roa
Signing time:             Tue 26 May 2026 09:10:42 +0000
ROA not before:           Tue 26 May 2026 09:05:42 +0000
ROA not after:            Tue 25 May 2027 09:10:42 +0000
asID:                     203106
IP address blocks:        40.27.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 08:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0f:9d:63:dd:e3:f7:1d:31:eb:49:b3:07:2e:7f:fc:70:29:45:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 26 09:05:42 2026 GMT
            Not After : May 25 09:10:42 2027 GMT
        Subject: CN=B8E1E737B5D6273F85916F5E12315FFE0CB1AC93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:f3:3b:00:5e:84:87:42:1a:45:37:65:0f:
                    81:26:d1:04:8c:42:5d:d1:bf:41:52:76:ea:2c:92:
                    86:e6:d0:a5:8a:fb:1e:3a:8d:a9:8c:cc:57:81:ea:
                    5d:d1:1e:01:24:3f:2a:80:a5:ea:0e:6b:0c:ac:49:
                    6f:7c:61:ca:31:c0:b5:e3:9f:bc:1f:62:98:12:3b:
                    b9:35:c7:33:41:47:49:3f:76:dc:04:c9:a0:d8:41:
                    2d:f1:1b:a6:62:3f:37:0b:12:24:39:41:02:9c:79:
                    4d:c4:ce:cf:8a:fd:48:f2:93:eb:0f:97:9f:f0:3f:
                    1f:d1:ac:c1:5e:b5:21:d1:4e:2a:ee:93:b3:95:c1:
                    9a:a0:5a:dd:da:4a:d9:28:54:fd:7e:7a:8b:97:ad:
                    eb:16:5f:c7:4a:06:49:55:b9:ac:c7:39:a2:8b:31:
                    71:03:6e:da:2c:88:f9:70:cb:56:e6:3d:00:03:98:
                    60:92:d2:02:12:2c:e9:77:04:e8:ff:2f:25:98:e4:
                    39:63:b3:1b:6d:3d:f2:ce:de:d0:fb:08:da:85:1a:
                    95:b5:48:09:7d:5f:24:cb:0d:a3:80:66:5b:e8:a0:
                    10:99:30:a4:cd:8a:8e:bf:ea:1e:83:b1:14:a4:8b:
                    68:c6:af:50:5e:76:25:d9:e0:ea:f8:d3:b5:f3:30:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E1:E7:37:B5:D6:27:3F:85:91:6F:5E:12:31:5F:FE:0C:B1:AC:93
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203106.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:6c:bb:e0:69:57:de:02:39:ab:8b:31:66:79:0f:f4:4c:
         a3:36:45:85:c7:68:77:aa:ce:63:fe:ac:76:9c:1c:28:ca:37:
         36:67:39:5b:f7:11:b5:dc:b8:b6:90:6c:7a:80:d3:c9:a6:7c:
         e4:3c:c6:e2:3f:ca:21:92:2b:dc:cc:a9:46:61:c7:7e:b2:91:
         ba:7f:ef:8b:21:30:80:b2:b0:ab:2b:00:ac:02:e1:80:21:54:
         75:6d:ca:e6:f7:e5:52:11:92:b8:46:19:6d:fa:b7:6f:08:a7:
         aa:85:f4:c6:d0:c2:09:44:c4:a5:cd:c7:ab:dc:f0:62:68:d3:
         f1:95:29:6e:be:6e:d3:2f:9c:55:f2:18:39:67:92:06:53:c9:
         97:81:81:5f:6a:8f:48:b4:f7:be:0b:1a:e6:52:67:54:55:2e:
         d4:a2:46:85:8d:f9:db:99:d0:de:4d:d4:25:2c:4f:c5:10:b1:
         4a:90:63:30:40:21:01:ef:1a:18:84:81:24:f5:2e:7e:66:c2:
         3d:a6:03:c5:68:f0:8f:2e:bf:e5:e6:ad:9c:03:4c:48:62:98:
         05:51:b6:5f:a6:fb:a1:4e:87:88:05:62:f2:7f:3d:81:7b:74:
         86:bb:c5:f6:fe:80:28:8e:e3:79:d2:33:db:ca:54:e0:92:ab:
         c8:99:0f:3c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUJQ+dY93j9x0x60mzBy5//HApRbIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTI2MDkwNTQyWhcNMjcwNTI1MDkxMDQy
WjAzMTEwLwYDVQQDEyhCOEUxRTczN0I1RDYyNzNGODU5MTZGNUUxMjMxNUZGRTBD
QjFBQzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3HzOwBehIdC
GkU3ZQ+BJtEEjEJd0b9BUnbqLJKG5tClivseOo2pjMxXgepd0R4BJD8qgKXqDmsM
rElvfGHKMcC145+8H2KYEju5NcczQUdJP3bcBMmg2EEt8RumYj83CxIkOUECnHlN
xM7Piv1I8pPrD5ef8D8f0azBXrUh0U4q7pOzlcGaoFrd2krZKFT9fnqLl63rFl/H
SgZJVbmsxzmiizFxA27aLIj5cMtW5j0AA5hgktICEizpdwTo/y8lmOQ5Y7MbbT3y
zt7Q+wjahRqVtUgJfV8kyw2jgGZb6KAQmTCkzYqOv+oeg7EUpItoxq9QXnYl2eDq
+NO18zARrwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLjh5ze11ic/hZFvXhIxX/4M
sayTMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzIwMzEwNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgb5jANBgkqhkiG9w0BAQsFAAOC
AQEAlbVsu+BpV94COauLMWZ5D/RMozZFhcdod6rOY/6sdpwcKMo3Nmc5W/cRtdy4
tpBseoDTyaZ85DzG4j/KIZIr3MypRmHHfrKRun/viyEwgLKwqysArALhgCFUdW3K
5vflUhGSuEYZbfq3bwinqoX0xtDCCUTEpc3Hq9zwYmjT8ZUpbr5u0y+cVfIYOWeS
BlPJl4GBX2qPSLT3vgsa5lJnVFUu1KJGhY3525nQ3k3UJSxPxRCxSpBjMEAhAe8a
GISBJPUufmbCPaYDxWjwjy6/5eatnANMSGKYBVG2X6b7oU6HiAVi8n89gXt0hrvF
9v6AKI7jedIz28pU4JKryJkPPA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:01:30 2026 by rpki-client