Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS31898.roa
File:                     AS31898.roa (raw, json)
Hash identifier:          Va7EstzAiCT6pajR7S/cz/z2eV2nd/fqqOgnNn8/S6c=
Subject key identifier:   B3:3E:0D:73:93:79:39:8C:70:3A:73:FE:BC:30:6D:AB:9B:1C:71:D5
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4218A54B2C7B7C9A0305FB8ABA94110D37E20D28
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS31898.roa
Signing time:             Mon 06 Apr 2026 21:46:53 +0000
ROA not before:           Mon 06 Apr 2026 21:41:53 +0000
ROA not after:            Mon 05 Apr 2027 21:46:53 +0000
asID:                     31898
IP address blocks:        40.27.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 13:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:18:a5:4b:2c:7b:7c:9a:03:05:fb:8a:ba:94:11:0d:37:e2:0d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  6 21:41:53 2026 GMT
            Not After : Apr  5 21:46:53 2027 GMT
        Subject: CN=B33E0D739379398C703A73FEBC306DAB9B1C71D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:d5:73:4f:a4:04:6b:80:81:08:12:82:56:
                    0f:b5:45:35:20:90:ee:5e:c6:5d:bd:58:b9:14:b7:
                    8b:37:63:a4:14:34:36:03:7b:6c:0d:8b:79:47:35:
                    37:bc:d5:2f:ef:98:aa:af:59:9c:eb:10:b5:e2:eb:
                    54:ab:e1:78:f1:e7:00:06:b7:25:2d:67:d6:8e:07:
                    57:0c:de:80:ea:de:f6:21:cb:16:66:eb:9e:8e:9f:
                    20:43:fd:30:af:be:dc:e5:6a:f9:87:ee:4b:1e:44:
                    66:86:8c:6e:3c:13:19:b0:71:55:dc:4a:6c:b8:e0:
                    57:eb:ba:06:f8:dc:3f:84:d5:8c:c6:65:11:78:b6:
                    15:08:7e:d5:b2:ce:18:ca:da:24:f2:4b:a8:f5:56:
                    19:63:bb:56:32:81:6a:35:97:5a:c5:17:59:3a:cf:
                    ea:4d:92:16:50:e5:6a:2c:d1:4b:c7:b5:a4:1f:65:
                    57:22:ae:ca:55:35:a2:f8:c4:a2:39:aa:48:04:27:
                    f6:69:8c:eb:f2:f0:89:14:6d:22:43:4b:84:a2:a9:
                    cd:6d:e7:79:d7:fe:77:06:05:65:31:4a:b4:47:4d:
                    4f:4b:d1:92:b3:e5:1b:6a:a4:a3:6e:b5:6e:b7:ae:
                    4a:7e:49:40:3c:2e:38:62:5b:64:61:c4:33:15:aa:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3E:0D:73:93:79:39:8C:70:3A:73:FE:BC:30:6D:AB:9B:1C:71:D5
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS31898.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:c5:a9:d5:65:b0:5b:cf:b6:9d:8f:2c:0b:d0:5e:af:cb:7e:
         84:8f:ec:eb:3e:15:d4:0e:b7:aa:47:fb:3d:56:90:f8:e2:04:
         84:c1:42:c3:52:c5:d8:15:73:d5:c8:b6:13:17:bc:96:65:f9:
         9d:74:45:5a:51:05:0b:02:d8:cb:91:e9:49:32:0c:f8:84:0b:
         56:f3:c2:60:cc:c0:81:44:54:b2:87:4e:d2:1c:06:ea:e6:6d:
         a5:38:f6:07:f4:68:df:c0:f9:a5:34:97:f8:dc:1a:3f:45:2c:
         51:40:5e:06:21:9f:f2:20:34:da:1d:e4:00:ce:f7:0e:c6:6e:
         3a:f9:9c:4e:b9:55:95:05:09:b1:42:5c:f5:6e:2e:44:36:ce:
         a1:45:82:25:2e:a5:46:06:64:b0:4b:fb:c9:cb:93:c8:47:81:
         90:c1:cb:70:13:e5:52:b8:e8:7b:d3:d4:16:32:66:6e:1f:e7:
         82:b3:86:c5:a5:59:31:03:ad:d9:bd:89:ce:eb:ad:9c:1d:52:
         57:36:46:67:12:c4:42:cf:d5:d3:68:4c:0f:4a:5b:9e:4e:a3:
         78:ed:ad:48:57:be:2e:5f:ae:0a:75:f3:fc:0f:0c:e6:d1:15:
         30:a7:98:3d:fb:63:79:8c:92:af:ca:98:8b:1d:08:38:72:e2:
         a8:b0:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:35:10 2026 by rpki-client