Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401293.roa
File:                     AS401293.roa (raw, json)
Hash identifier:          2scWb0+VBq0vCqbVWVdJXLzfzKbzG2XOMDZToZvmFUs=
Subject key identifier:   E1:D2:AF:C4:11:3E:44:9D:DE:C8:9C:F3:EF:85:4B:34:4A:CE:54:78
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       617AF64137228F82C0FB34A40578B8F9A2058F13
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401293.roa
Signing time:             Thu 02 Apr 2026 03:08:36 +0000
ROA not before:           Thu 02 Apr 2026 03:03:36 +0000
ROA not after:            Thu 01 Apr 2027 03:08:36 +0000
asID:                     401293
IP address blocks:        40.183.148.0/24 maxlen: 24
                          40.183.154.0/24 maxlen: 24
                          40.183.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 11:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7a:f6:41:37:22:8f:82:c0:fb:34:a4:05:78:b8:f9:a2:05:8f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  2 03:03:36 2026 GMT
            Not After : Apr  1 03:08:36 2027 GMT
        Subject: CN=E1D2AFC4113E449DDEC89CF3EF854B344ACE5478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:ee:3c:5e:42:bb:2c:12:66:67:52:dd:51:
                    d8:8e:91:c5:ed:bc:eb:07:3c:f9:f3:b0:dc:e6:38:
                    c6:95:04:0f:38:c1:83:dc:fe:e1:0b:16:93:bd:1a:
                    24:ed:84:6e:ab:e9:8b:41:1e:36:f6:72:f0:24:c2:
                    14:94:3b:13:9c:6a:cd:96:21:18:05:18:47:f6:ad:
                    9f:3e:0c:f1:ff:4f:6e:5d:fe:0a:b9:48:b4:9f:cf:
                    4b:f2:19:e1:8a:36:0d:6b:39:92:01:af:49:d1:7d:
                    c1:34:d7:3c:f7:11:40:97:e6:ab:12:f9:f7:d5:df:
                    d0:2d:d7:0d:f0:dc:90:fe:85:0a:73:61:c8:f9:68:
                    f0:d3:27:0d:57:2f:de:82:ad:3e:06:6b:15:88:c6:
                    fd:58:24:a5:7f:7f:f7:bb:b3:ad:67:a6:ce:4f:72:
                    1d:78:ba:0c:28:4c:59:db:fc:71:a3:75:9d:f2:62:
                    ee:50:1e:8a:65:c7:ca:f5:1c:8d:b7:cc:55:8c:39:
                    13:26:7c:31:6c:7b:3f:57:a6:7b:3e:4c:51:93:fe:
                    aa:08:a6:69:cf:1a:aa:6d:a2:0b:80:42:53:e4:97:
                    5c:97:89:40:3c:3c:0b:c7:34:c7:82:19:bb:54:54:
                    e9:c0:a9:3c:48:7d:a4:b4:9f:71:8f:5d:ad:99:d6:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:AF:C4:11:3E:44:9D:DE:C8:9C:F3:EF:85:4B:34:4A:CE:54:78
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.148.0/24
                  40.183.154.0/24
                  40.183.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:d8:6f:00:6b:b4:75:fa:a0:7e:db:cc:cf:bb:15:f6:52:
         e2:1e:c2:1b:14:70:05:81:2b:a3:ea:01:fa:bf:d0:cd:37:60:
         34:00:dc:4d:a5:b1:56:40:94:e0:69:25:31:d4:15:df:e6:a0:
         68:c3:c2:f7:ad:91:da:1a:1b:ac:6d:d1:aa:97:50:5e:36:4f:
         61:7b:5d:ca:32:08:3e:4c:de:dd:22:d4:33:b6:00:4f:6d:fb:
         40:65:0a:13:ad:13:28:bf:5f:f5:c2:02:f7:2c:69:c1:dc:fa:
         10:e5:d1:5e:b5:96:e9:d8:d1:e9:c6:f7:8c:26:02:a6:2f:47:
         7d:a8:36:7f:b6:e6:b4:53:b9:ac:35:51:90:00:97:74:3e:e0:
         66:15:31:a5:16:f8:b1:0b:33:25:37:91:74:8e:a2:92:1e:8d:
         e9:e7:59:a6:f2:8f:90:b6:dd:e0:10:90:5f:64:c6:8a:51:8f:
         da:c7:df:4c:ec:cb:04:46:11:59:01:6e:a1:a9:0a:0d:dd:8a:
         12:52:19:3a:84:0f:3e:39:f6:b5:de:36:b2:13:bc:91:cb:f1:
         54:e8:9e:ab:86:38:9d:2c:08:42:ca:97:c8:55:97:72:1f:21:
         18:71:1d:3b:5b:87:0b:80:6d:61:e5:50:f8:9b:8f:92:32:50:
         39:86:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:40 2026 by rpki-client