Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS401693.roa
File:                     AS401693.roa (raw, json)
Hash identifier:          XTwuN9G+2MHhUUwL+rdKZhPuEj8Z9h4waa43MTehb5s=
Subject key identifier:   1D:24:78:02:F3:21:90:91:93:B4:53:A5:4C:66:EC:DE:CA:8C:B2:6C
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       3FB41EE84B7492366713E65BE82C68DB4AB645E1
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS401693.roa
Signing time:             Sun 01 Jun 2025 17:18:11 +0000
ROA not before:           Sun 01 Jun 2025 17:13:11 +0000
ROA not after:            Sun 31 May 2026 17:18:11 +0000
asID:                     401693
IP address blocks:        184.17.102.0/24 maxlen: 24
                          2001:1960:2a02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b4:1e:e8:4b:74:92:36:67:13:e6:5b:e8:2c:68:db:4a:b6:45:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jun  1 17:13:11 2025 GMT
            Not After : May 31 17:18:11 2026 GMT
        Subject: CN=1D247802F321909193B453A54C66ECDECA8CB26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:d2:04:b8:d4:be:f2:df:0f:4a:a3:77:e8:
                    1a:61:80:31:62:25:d1:92:eb:db:4a:15:33:c3:dd:
                    7f:04:2e:c2:82:6f:cb:6f:9e:91:fb:60:44:61:90:
                    5b:08:58:1e:9e:c7:e0:e2:90:df:cd:49:48:df:b0:
                    52:47:0e:80:28:10:7b:7d:4d:b5:df:25:e6:e3:f0:
                    fa:d2:1b:e3:9b:9f:05:23:b9:06:2d:32:3d:51:7f:
                    fe:b1:a7:75:a8:88:4c:a3:16:f5:f3:6e:7a:68:5b:
                    d2:ba:72:53:38:f3:33:04:f8:a2:44:0b:e0:34:26:
                    fd:08:47:2b:ae:74:41:48:bb:a5:89:36:a7:87:39:
                    c2:8e:fe:fd:31:d2:4a:08:26:fb:af:cb:a7:91:32:
                    5a:40:bc:8a:fd:a6:f7:92:47:93:7a:35:b9:43:e6:
                    a9:78:97:18:85:de:d0:ce:ef:2a:58:57:02:e1:60:
                    5e:ce:bd:5b:f4:4f:ed:ff:b4:c7:24:ba:d9:a3:e4:
                    77:5a:e3:7d:0a:79:19:c4:41:f6:7f:a1:f2:97:ab:
                    ca:3e:12:34:16:eb:fb:a1:75:32:95:55:e1:54:00:
                    f7:79:bd:e2:41:f2:3a:08:54:ff:9a:fc:cc:91:f4:
                    56:21:c3:c5:b5:b2:ac:65:72:0e:ac:98:a1:08:fb:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:24:78:02:F3:21:90:91:93:B4:53:A5:4C:66:EC:DE:CA:8C:B2:6C
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS401693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.17.102.0/24
                IPv6:
                  2001:1960:2a02::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:88:a3:27:02:f4:93:bf:08:9a:47:47:95:87:6f:02:11:
         bf:56:44:0a:6b:9a:ba:05:d1:59:9c:b9:30:54:ac:94:30:6e:
         9c:d3:ce:d4:de:e5:e4:67:18:b2:bb:74:ed:e2:5b:ad:47:72:
         c0:b0:d5:a8:15:30:85:2e:03:15:42:49:ed:87:d7:a6:cf:af:
         b2:17:7b:17:51:fa:24:af:0c:a3:bb:fa:35:13:65:89:fd:00:
         fd:35:ac:9a:1a:57:89:00:6a:b6:dc:6d:fd:8b:37:02:2e:39:
         b9:dd:9a:e9:91:03:46:22:dd:4d:4e:8f:af:d4:66:ba:40:f3:
         44:d7:88:30:d1:16:06:47:ef:ab:d4:f3:ee:50:4c:fd:72:17:
         89:79:08:5e:59:db:4e:75:7d:8f:f7:fb:67:af:b9:8d:aa:72:
         fd:a0:2f:9b:17:20:e0:31:a6:3e:d5:33:3c:35:2a:72:a0:11:
         ea:fa:48:87:7c:4a:07:01:5b:b5:50:36:65:e4:6a:c9:f5:4e:
         25:c4:29:d7:91:e0:92:6e:5c:f1:8c:28:88:4b:90:ee:c3:57:
         29:f4:e2:c6:d1:9a:3b:64:33:24:fa:1b:4c:d0:63:78:ba:3b:
         85:67:d8:2a:3e:23:3c:fb:5d:55:8c:ee:cd:99:40:6f:24:d5:
         b3:4c:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:15:01 2025 by rpki-client