Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS393406.roa
File:                     AS393406.roa (raw, json)
Hash identifier:          S9AGruLP8my4libDv1yvleErUAVLq5HJYUD1z8jP3K8=
Subject key identifier:   DE:2B:12:6A:B4:2F:86:1C:37:7C:15:94:82:B0:63:AA:BB:DA:2D:F7
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       04BECCCE478A8F36357B7F162BEBF582EB38552E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS393406.roa
Signing time:             Mon 25 May 2026 13:51:07 +0000
ROA not before:           Mon 25 May 2026 13:46:07 +0000
ROA not after:            Mon 24 May 2027 13:51:07 +0000
asID:                     393406
IP address blocks:        40.27.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 08:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:be:cc:ce:47:8a:8f:36:35:7b:7f:16:2b:eb:f5:82:eb:38:55:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 25 13:46:07 2026 GMT
            Not After : May 24 13:51:07 2027 GMT
        Subject: CN=DE2B126AB42F861C377C159482B063AABBDA2DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:7a:7c:76:04:a5:dc:ba:99:23:37:b2:fe:
                    48:d9:f7:9b:44:ce:20:6f:55:c0:e5:4c:ed:92:83:
                    26:44:ed:61:93:0c:4f:36:f6:8f:38:c2:85:f8:2d:
                    cf:49:68:45:9d:fa:ab:79:71:78:94:66:6a:ea:8a:
                    f4:7e:1c:4a:e3:ee:e2:c6:98:ec:73:c8:03:48:bf:
                    62:eb:bb:16:50:46:85:8d:cb:6f:df:d2:65:0c:55:
                    e3:0e:8c:a5:fc:f7:91:dc:f0:de:62:67:3c:65:4a:
                    37:f4:ff:a7:bc:2a:40:dd:8d:ed:74:be:10:62:a5:
                    cb:39:02:b5:c2:f1:85:21:65:9a:2b:6b:86:33:da:
                    f4:bd:dc:d5:73:f0:8a:d0:53:a5:9d:76:39:f3:e6:
                    13:39:c1:5b:ba:c9:51:d7:48:2a:a2:19:9f:1d:02:
                    22:03:48:06:b1:ed:86:b7:a3:f4:48:ce:33:2c:04:
                    a7:a3:26:12:7e:a1:ed:40:db:38:60:26:77:18:ea:
                    bc:8a:15:2a:20:76:83:77:59:8c:d8:46:c8:ab:7f:
                    ac:f3:ca:d3:c1:2c:42:76:bb:a9:43:79:7c:f1:e6:
                    7f:ae:2e:b3:1c:92:37:af:b0:2a:0a:aa:05:80:2b:
                    df:02:fb:2c:48:36:aa:05:ba:a6:41:93:82:80:33:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2B:12:6A:B4:2F:86:1C:37:7C:15:94:82:B0:63:AA:BB:DA:2D:F7
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS393406.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:3b:62:e5:90:0e:0d:38:e8:db:10:e8:da:a1:0f:25:f1:
         bb:3d:fd:63:e1:06:32:c8:00:4d:ef:f3:a6:77:db:13:f7:72:
         79:8e:07:c6:98:55:08:9e:ac:b4:97:d2:fe:3a:6d:dc:61:b2:
         48:ef:cc:e3:19:09:cd:61:75:44:06:4d:bf:2e:b3:ac:70:24:
         f9:72:69:ae:6c:f5:af:f8:90:e6:46:23:b2:d3:f2:2b:44:b3:
         6c:74:71:9a:98:09:0a:b0:9a:05:b9:98:e6:6c:b3:3e:0d:a7:
         22:1b:1d:6f:9c:80:d9:4e:35:9b:f7:39:f3:82:d7:03:b8:42:
         fa:2e:c3:96:22:ba:59:0b:12:86:a8:71:4a:1d:92:b6:8f:7e:
         66:2c:6e:e8:73:7c:d4:79:9a:4a:78:32:fe:fe:e6:24:38:e9:
         bd:fa:5d:9b:f1:77:15:68:8f:64:56:fe:b3:5b:27:22:55:20:
         38:cd:66:86:f2:0c:08:ad:c8:30:41:9a:bb:83:c2:cd:44:3c:
         51:5d:14:68:4e:3d:46:38:8a:f3:10:19:98:40:bc:52:ed:e2:
         96:fb:98:9f:fb:77:57:8a:79:35:07:06:9b:07:89:3a:97:4f:
         47:36:f6:6a:54:6c:59:b0:3f:b7:4d:20:c7:a3:14:b5:57:93:
         c2:79:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:01:30 2026 by rpki-client