Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS11426.roa
File:                     AS11426.roa (raw, json)
Hash identifier:          o5rgRn9Dw3IdLgU6r19Yyxxs/YCB4vkk75qwThBEk2E=
Subject key identifier:   CD:4A:B2:26:D5:38:32:D7:15:C4:F8:37:F6:48:87:08:7C:CF:95:D2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2707813AF46D8F8019F5625D86DA830A8DEF3B09
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS11426.roa
Signing time:             Tue 11 Nov 2025 11:39:59 +0000
ROA not before:           Tue 11 Nov 2025 11:34:59 +0000
ROA not after:            Tue 10 Nov 2026 11:39:59 +0000
asID:                     11426
IP address blocks:        64.50.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Nov 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:07:81:3a:f4:6d:8f:80:19:f5:62:5d:86:da:83:0a:8d:ef:3b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 11 11:34:59 2025 GMT
            Not After : Nov 10 11:39:59 2026 GMT
        Subject: CN=CD4AB226D53832D715C4F837F64887087CCF95D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:f2:cb:b4:54:fb:76:d2:12:da:73:ea:ef:
                    62:ee:2c:f1:38:40:b9:f1:c5:cc:1b:be:fa:14:11:
                    bc:6f:6b:12:dc:d7:72:b8:9d:98:be:42:c8:f0:e2:
                    f8:fa:57:78:4f:34:a8:82:27:b6:bc:fa:54:3c:be:
                    9e:87:56:a6:fb:a3:98:56:b8:41:e9:b3:10:8f:f0:
                    ef:ec:2a:16:ce:73:e2:73:25:85:ff:ab:89:73:4d:
                    c1:f3:a5:d4:5f:8e:b6:f8:1b:ea:32:c9:bd:c0:d3:
                    ec:0e:85:61:36:d2:15:37:3c:ad:4d:ca:d4:7a:ca:
                    71:a8:3e:ce:9a:66:71:32:25:d4:3f:20:74:4a:71:
                    ff:bd:05:a3:e3:bb:fd:04:34:6b:fa:47:eb:4a:2d:
                    66:cc:1a:a1:56:74:55:54:26:09:41:77:ce:9b:2d:
                    5c:60:90:94:f8:6d:97:b2:58:a3:ea:dd:29:1e:f3:
                    ff:7b:96:00:d6:93:08:80:6d:68:d4:ea:08:bb:72:
                    84:3d:14:cb:df:7f:67:1a:de:56:6d:ff:86:0a:a4:
                    21:1a:cd:f9:4d:6d:d1:02:f5:04:45:4f:1d:e4:01:
                    05:f7:d5:37:0d:bc:97:5b:47:50:ec:8f:97:b8:bd:
                    80:5e:e9:16:0e:d3:aa:a9:14:39:ac:9a:34:29:37:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4A:B2:26:D5:38:32:D7:15:C4:F8:37:F6:48:87:08:7C:CF:95:D2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS11426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:4c:a7:24:dc:3c:90:f0:21:95:b1:63:d4:ae:3d:b3:04:b0:
         b0:04:cc:84:6b:f8:40:56:d5:4f:59:3a:75:49:ea:65:2e:8a:
         57:7e:22:cc:be:eb:85:84:33:d3:cc:ce:ef:59:2d:65:04:fb:
         67:75:96:79:69:47:ed:40:8e:0c:71:a2:76:23:ff:9c:7d:3a:
         00:cf:91:ab:5a:9c:29:31:68:87:b7:0e:5c:27:43:ae:5a:e0:
         32:7b:05:83:6a:06:0a:8a:aa:be:ba:e9:97:d7:e8:bd:a3:a2:
         d4:23:12:b9:7d:cc:78:05:be:74:92:a1:73:de:46:bc:68:c9:
         77:af:dd:8a:0a:78:1a:5f:fb:06:a3:59:94:aa:75:9b:50:07:
         de:40:32:f7:7d:7d:93:e3:ac:fd:3a:28:5a:f9:77:6e:a7:6a:
         66:c5:7f:e2:fe:87:61:1f:71:d6:9a:2f:89:3d:50:c2:ea:e1:
         46:ad:6e:78:a1:d6:70:68:fb:4e:6f:17:4c:81:df:56:01:01:
         0f:9a:14:7a:3a:ec:3a:cf:9f:f4:aa:3b:37:6e:aa:36:ae:21:
         32:8f:f3:58:30:8a:f6:5a:26:d2:c5:6c:1c:b4:7c:eb:df:8c:
         38:f6:76:7d:21:a6:f2:a4:c3:2b:ed:7f:36:2d:23:97:6c:ff:
         ed:2f:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 23:41:07 2025 by rpki-client