Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30088.roa
File:                     AS30088.roa (raw, json)
Hash identifier:          Vjtc4qRbSDkAzR5OUngC7+AlLokW4utHKLfiRl9p2uU=
Subject key identifier:   F1:3C:EB:99:63:5F:F8:B5:7F:87:2B:0F:A3:EA:D6:6B:56:20:B6:30
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       551F34CAD7A813F7058D2B7A0257548AB2C217CC
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30088.roa
Signing time:             Mon 07 Sep 2026 09:17:24 +0000
ROA not before:           Mon 07 Sep 2026 09:12:24 +0000
ROA not after:            Mon 06 Sep 2027 09:17:24 +0000
asID:                     30088
IP address blocks:        40.223.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 10:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1f:34:ca:d7:a8:13:f7:05:8d:2b:7a:02:57:54:8a:b2:c2:17:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep  7 09:12:24 2026 GMT
            Not After : Sep  6 09:17:24 2027 GMT
        Subject: CN=F13CEB99635FF8B57F872B0FA3EAD66B5620B630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:b2:2a:1f:19:f4:70:68:a9:65:f3:ea:c7:
                    51:fa:7d:7f:fb:f7:5c:12:59:ad:ae:6a:7c:11:c0:
                    71:40:d9:ae:86:fc:9f:bc:7e:c7:e7:ca:15:09:7e:
                    51:db:0f:d1:47:92:a8:87:6c:22:60:80:62:b4:60:
                    fd:4f:59:fb:3f:1e:03:39:3e:60:84:49:7d:87:78:
                    a2:6e:0b:ee:bd:f9:64:eb:81:36:e9:6b:e7:b1:ed:
                    8a:69:4c:0c:6f:27:f4:1b:43:1b:3c:60:1b:be:74:
                    20:63:45:00:67:a1:f4:c0:8d:94:9d:87:94:09:c0:
                    be:e4:18:cb:d0:92:46:8c:35:2f:04:9c:fc:e1:86:
                    1d:aa:be:c6:da:87:cd:26:5f:33:f6:ad:da:6f:ae:
                    c5:e0:d8:e0:1e:d9:65:e6:1a:49:00:46:d3:03:e5:
                    ff:a4:d2:59:ce:32:97:e4:0c:62:8d:d5:71:31:c8:
                    a4:6b:c6:ae:57:b5:af:ab:40:d7:97:a7:74:f7:63:
                    4a:80:56:bc:59:49:8c:3b:b2:dc:b4:40:3c:fd:73:
                    8e:cb:62:10:5c:ac:1d:e2:e1:c3:64:3b:32:48:21:
                    a2:ae:70:54:19:41:cb:26:01:e3:22:63:e0:2f:f7:
                    47:e4:a1:44:d5:23:f1:07:2a:eb:99:aa:47:44:8e:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3C:EB:99:63:5F:F8:B5:7F:87:2B:0F:A3:EA:D6:6B:56:20:B6:30
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30088.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:65:fd:55:35:5f:86:6d:ef:9a:f2:a9:d3:04:11:56:5a:0e:
         bc:2e:73:33:2f:9b:df:76:a8:6d:fc:a1:09:6d:7b:c0:39:1f:
         2d:8e:ed:84:bf:9e:1d:7c:a2:02:7c:3f:72:7a:c3:9b:bf:d2:
         f4:23:f0:d8:4c:83:89:9b:ac:df:6b:4e:cb:f7:3b:8b:ef:19:
         b0:95:5d:8f:b5:dc:2e:ef:d9:53:9f:45:58:9f:15:39:fa:96:
         bf:f8:f3:d8:b4:41:96:3d:d5:fd:e4:9e:00:db:dd:60:34:94:
         e2:74:d1:0f:44:87:55:7c:1b:fe:33:93:79:33:27:f1:ed:7a:
         d5:5d:e2:e3:78:90:a0:cf:e0:9a:c0:a0:75:46:e7:21:7a:f2:
         65:a2:ee:c4:0e:f8:3d:36:02:ba:bb:34:61:6c:6a:9b:3d:65:
         5b:f8:10:40:f4:aa:1b:ad:59:8c:dc:3d:a3:ce:45:71:c1:6b:
         cb:49:7c:e9:00:0d:97:59:61:5f:77:72:7c:87:6e:04:94:d7:
         f3:02:c1:60:5d:15:b5:6f:15:e5:ba:47:f3:de:5a:02:ec:82:
         2d:90:f5:e6:ee:60:a2:24:bf:96:7c:80:61:e2:8d:54:eb:a9:
         84:ae:1b:ee:02:c5:2f:3b:4d:d6:fa:c6:e9:5d:ce:66:11:3b:
         54:1d:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:45:59 2026 by rpki-client