Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399204.roa
File:                     AS399204.roa (raw, json)
Hash identifier:          orl91E5I1R/ra0nA94gV/dJ8cikw4NPOkZIraHE/Ii4=
Subject key identifier:   B8:B3:B9:6F:71:14:72:F2:62:89:9B:08:18:1B:84:2D:17:8D:53:8B
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       52289CC644CE8CED8D97B1EFD84F2B3EF5D21854
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399204.roa
Signing time:             Thu 20 Aug 2026 15:05:56 +0000
ROA not before:           Thu 20 Aug 2026 15:00:56 +0000
ROA not after:            Thu 19 Aug 2027 15:05:56 +0000
asID:                     399204
IP address blocks:        40.27.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:28:9c:c6:44:ce:8c:ed:8d:97:b1:ef:d8:4f:2b:3e:f5:d2:18:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 20 15:00:56 2026 GMT
            Not After : Aug 19 15:05:56 2027 GMT
        Subject: CN=B8B3B96F711472F262899B08181B842D178D538B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:99:1c:11:76:e4:38:1c:ee:48:09:87:2b:
                    07:0b:9f:52:6e:d2:c1:51:6b:7f:1a:43:89:3a:29:
                    9e:95:0a:92:1c:4e:e9:03:25:1b:99:31:4b:6e:30:
                    28:8d:7d:a9:aa:7b:89:16:e5:97:d9:58:b5:94:8e:
                    42:3b:b6:66:89:c2:7f:ff:0d:75:4b:32:3f:4b:42:
                    a0:18:63:c4:e9:c7:50:77:8a:96:af:dc:27:3f:48:
                    67:4b:ec:8e:d6:79:23:bf:90:20:62:51:40:89:a7:
                    8d:e3:30:f7:17:f2:e9:48:08:aa:4c:11:c1:0b:fa:
                    69:33:15:eb:f6:9b:ac:cc:05:99:b9:81:61:0d:a5:
                    70:b9:6a:b5:c8:c5:6c:9c:a9:2b:e6:41:98:8a:b9:
                    20:f0:72:9d:49:09:ad:8a:9c:92:01:ba:bd:9e:e0:
                    d5:92:87:8a:de:b3:04:23:0a:2c:f0:0a:50:87:31:
                    d8:0a:50:88:d7:18:47:7a:79:10:b3:cc:8a:67:62:
                    50:1a:79:5a:03:92:6f:3c:3a:4f:52:a0:6d:0f:0a:
                    54:d0:07:3a:2f:35:be:b6:8d:67:93:63:d4:ee:6b:
                    55:47:ba:1c:81:2a:09:03:4d:45:89:9a:0f:c1:64:
                    ad:7e:a5:04:f8:5d:1f:13:f8:76:f5:a5:59:70:c6:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B3:B9:6F:71:14:72:F2:62:89:9B:08:18:1B:84:2D:17:8D:53:8B
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399204.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:f9:50:f6:ed:e8:69:a5:b8:65:58:85:a9:31:da:9c:f5:
         84:5e:00:61:3a:78:81:11:21:2e:5f:40:e2:c2:b8:cf:f2:da:
         ff:38:46:0d:57:94:a4:78:12:40:35:c6:59:58:51:84:1a:3a:
         ae:90:77:c6:2d:a7:33:df:45:e2:3b:3e:02:e7:bf:b3:53:32:
         78:d5:f1:02:9f:cb:6b:32:76:c0:f1:35:19:1d:8c:75:15:d5:
         c6:f2:2a:71:4d:f1:4d:31:d0:ae:58:e2:ef:4d:26:49:2c:65:
         7a:78:a9:3c:3b:79:89:66:74:21:86:a1:0e:65:6a:fe:4a:14:
         e8:0c:ab:4d:df:d8:48:7c:e8:37:53:77:53:f2:8b:34:b8:ed:
         5d:23:83:25:a1:41:c8:5c:0e:e4:29:8f:7b:59:7c:b4:0b:c1:
         98:4b:8a:e5:45:c0:e0:2a:df:14:2b:a4:65:ff:52:a3:7b:9e:
         48:d8:e5:e1:1a:39:13:6b:ee:91:d8:f0:4e:65:5d:e2:bb:9b:
         5d:cd:20:81:9f:5d:d1:67:22:a9:f3:73:05:bf:26:07:09:99:
         a9:69:d6:20:76:5f:40:2b:50:33:10:e4:ee:97:1c:e0:b5:ee:
         53:b6:e0:d7:b5:8e:5d:a5:e5:31:b8:0a:90:ff:79:06:be:7e:
         32:eb:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:56 2026 by rpki-client