Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135402.roa
File:                     AS135402.roa (raw, json)
Hash identifier:          AnanYbTz/ESsc1gt6+bOBxwu4j9dXcJ4yibQp1wUP44=
Subject key identifier:   D6:CE:83:68:0F:CF:B4:46:EA:AB:1E:BB:9C:8F:9A:2C:35:22:1D:73
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       209156F1F440D7A5CB13568A5A9C7B395DC638FF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135402.roa
Signing time:             Thu 19 Mar 2026 01:14:41 +0000
ROA not before:           Thu 19 Mar 2026 01:09:41 +0000
ROA not after:            Thu 18 Mar 2027 01:14:41 +0000
asID:                     135402
IP address blocks:        107.172.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 17:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:91:56:f1:f4:40:d7:a5:cb:13:56:8a:5a:9c:7b:39:5d:c6:38:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 19 01:09:41 2026 GMT
            Not After : Mar 18 01:14:41 2027 GMT
        Subject: CN=D6CE83680FCFB446EAAB1EBB9C8F9A2C35221D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:ff:11:27:0d:5b:b2:c2:ce:46:1a:44:80:
                    b4:14:ec:fa:cb:61:5e:fb:9b:f2:a3:d1:3f:31:48:
                    08:32:4a:ae:42:8e:0b:8a:d8:77:be:bf:1c:3b:4f:
                    9e:5d:66:80:ae:94:90:49:ae:72:c5:43:bd:e3:65:
                    f3:62:21:e2:93:3e:42:60:d5:d1:e1:d5:06:9a:94:
                    1b:09:83:6b:60:90:54:f5:09:88:ad:fb:56:45:38:
                    7f:83:2e:f1:35:13:65:40:cf:d4:1e:1d:de:64:64:
                    8c:5f:ae:ac:b9:83:fe:a3:96:b3:3c:77:39:68:98:
                    b7:c7:0b:a0:be:16:99:3e:8c:db:a7:80:ed:5c:bf:
                    f6:34:25:11:50:ba:b8:18:8f:f7:be:6e:45:48:8e:
                    10:59:9f:c7:cc:c2:e0:0e:b5:1d:0e:73:8d:bc:bd:
                    9e:c7:15:af:f9:f3:ea:3a:78:7a:37:64:7b:6d:fa:
                    b6:3f:7f:a9:d6:4e:ff:8b:f1:74:05:25:ab:17:2b:
                    88:46:1f:e3:bb:ec:f7:52:f6:a1:0e:f0:e6:22:1f:
                    7e:6d:50:73:8f:a1:15:c3:24:ae:3f:56:97:4f:83:
                    80:40:14:00:da:1c:2d:c2:b1:aa:8f:cf:10:11:15:
                    d9:ad:52:b0:a9:a9:ba:d8:1e:1e:c1:26:31:46:ba:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CE:83:68:0F:CF:B4:46:EA:AB:1E:BB:9C:8F:9A:2C:35:22:1D:73
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135402.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.172.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:48:91:58:1f:c5:09:a9:f9:24:1c:66:8a:49:89:20:4d:87:
         70:c4:7e:bd:af:50:19:e7:67:dd:3f:13:34:39:83:0c:09:12:
         50:4a:55:7b:ad:4b:27:bb:d0:cc:18:18:69:50:82:56:1d:70:
         6a:cb:04:35:07:15:75:17:a6:1a:87:6b:e5:75:e4:44:69:62:
         c2:13:34:26:38:0a:35:bc:75:13:4d:03:c5:f8:0c:21:1f:28:
         96:51:ff:eb:d0:3a:8c:79:f1:39:9f:34:ff:cd:ba:5c:cf:15:
         be:24:9a:be:8a:9c:d1:16:65:d7:cd:6d:0e:a7:e3:d5:84:a6:
         a5:1c:71:1e:81:1f:5f:14:a2:41:a2:4e:6b:10:f5:20:2b:53:
         f0:ca:91:11:ea:a1:3f:91:38:42:64:25:46:bd:d7:cd:68:28:
         24:3e:78:7b:e4:51:a6:b6:33:e2:d8:47:98:58:6d:0d:c2:50:
         b4:e6:f2:03:7b:ad:03:dd:66:30:ec:48:27:15:ce:7d:f9:7b:
         0a:67:82:36:04:c4:b8:f2:15:d0:83:56:f3:13:80:8b:4d:f7:
         d6:25:8e:68:5e:6a:0a:cf:6a:90:69:03:69:32:f0:51:ff:09:
         98:f1:0c:2f:12:68:d2:81:4a:16:f6:b4:0b:1a:35:6e:db:6a:
         31:31:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:14:12 2026 by rpki-client