Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS146871.roa
File:                     AS146871.roa (raw, json)
Hash identifier:          lOIlfsvfiHCdzjPKbJ+kOPILTVT6iGgKk0HVsoFprYQ=
Subject key identifier:   E3:A8:6A:7C:C7:BD:EF:56:44:C0:77:6D:5E:2A:93:18:F7:BE:DF:9D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       594795210F4EDC7E4F88717C2A7635DE75DBCC84
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS146871.roa
Signing time:             Mon 03 Aug 2026 09:49:26 +0000
ROA not before:           Mon 03 Aug 2026 09:44:26 +0000
ROA not after:            Mon 02 Aug 2027 09:49:26 +0000
asID:                     146871
IP address blocks:        23.95.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 10:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:47:95:21:0f:4e:dc:7e:4f:88:71:7c:2a:76:35:de:75:db:cc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  3 09:44:26 2026 GMT
            Not After : Aug  2 09:49:26 2027 GMT
        Subject: CN=E3A86A7CC7BDEF5644C0776D5E2A9318F7BEDF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:cc:0c:f4:8c:0a:7a:92:39:49:29:a5:9a:
                    58:c1:73:a3:a2:39:5c:1a:13:6f:9e:ec:7f:e8:6f:
                    04:08:2e:fe:77:c6:ed:66:a0:49:b1:a0:2d:e8:39:
                    2f:1d:90:f9:de:7a:91:52:45:15:23:00:23:fb:dc:
                    72:70:5e:01:7d:73:c9:94:28:c2:8e:2a:26:84:7e:
                    07:bb:bb:05:97:ca:24:51:70:cd:0d:b3:32:ff:92:
                    40:e5:b4:34:12:20:92:89:86:b7:5e:75:c8:63:a7:
                    14:2d:ec:2a:20:1f:95:52:ca:22:67:8b:95:a3:59:
                    04:67:72:3f:89:29:4b:ff:11:37:ce:6b:77:68:e0:
                    af:88:38:2c:d0:28:4c:05:6a:9b:b4:10:e6:c6:0f:
                    56:4b:55:44:a5:00:aa:a2:4a:b5:1f:ee:77:d4:9b:
                    00:b9:e5:d6:fa:6d:67:04:7b:85:84:19:c2:3b:57:
                    6f:09:02:80:4f:66:35:63:91:8b:3a:be:dc:03:0f:
                    d2:cb:a8:cd:bf:35:7d:75:74:d7:bd:d4:6a:81:d8:
                    00:0b:94:67:50:f4:d5:ba:88:0e:cc:97:d6:99:03:
                    bf:3f:24:53:dd:d4:be:ff:c8:7a:a9:b0:82:aa:a2:
                    65:be:de:27:f5:e1:a5:63:1b:81:08:fb:28:55:a5:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A8:6A:7C:C7:BD:EF:56:44:C0:77:6D:5E:2A:93:18:F7:BE:DF:9D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS146871.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:5f:a2:b0:ed:d0:2a:2d:86:01:9f:25:0f:92:03:77:58:
         ed:39:04:d0:1c:88:08:73:12:50:0a:8d:ed:2f:6f:7c:79:bd:
         dd:8f:c6:8f:66:9d:2a:8a:01:ca:27:85:b0:e8:a0:6d:6b:a4:
         a2:65:8c:86:6a:31:36:bf:73:4f:d0:69:51:9a:77:cf:1d:bb:
         2e:c1:26:83:e4:81:d4:3d:1c:12:10:11:e2:e4:7e:73:5d:be:
         af:c4:69:42:fa:e7:eb:fe:a9:16:25:1f:2c:1d:16:5f:71:38:
         c8:f2:31:d8:7c:74:fb:ef:3e:35:7f:8b:c8:de:77:28:77:7d:
         f5:62:d6:b9:0f:b8:20:81:f0:38:aa:41:64:67:aa:65:92:14:
         4e:b1:08:37:b8:da:68:78:3b:7f:8d:67:60:5e:62:f1:50:92:
         1a:34:cf:23:43:3e:d0:cf:cf:23:c8:71:46:2e:0a:f4:4b:d5:
         36:59:d9:a5:50:e4:4b:94:ca:6d:3c:31:b4:66:22:07:03:8d:
         03:17:6e:d6:a8:eb:81:89:d8:93:10:e6:75:7a:8b:3f:ce:35:
         32:7b:15:4a:e2:05:e7:8f:d8:23:ca:18:19:ab:f8:84:6a:9c:
         36:b1:9f:7a:37:d8:53:61:2f:db:b4:c0:6b:63:e7:af:5c:cb:
         f6:8a:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:31 2026 by rpki-client