Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS17378.roa
File:                     AS17378.roa (raw, json)
Hash identifier:          PeP3fqn2oknPOEbSBTy30GEZU0JcjTBy3PRwGWGulpw=
Subject key identifier:   6B:91:90:3D:6E:A7:8B:0D:E1:5E:AB:D0:6B:AE:50:0E:70:86:AB:D2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       06133F6EFA652D5536768388B351C7A7EA9B0523
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS17378.roa
Signing time:             Fri 26 Jun 2026 13:53:19 +0000
ROA not before:           Fri 26 Jun 2026 13:48:19 +0000
ROA not after:            Fri 25 Jun 2027 13:53:19 +0000
asID:                     17378
IP address blocks:        192.255.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 21:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:13:3f:6e:fa:65:2d:55:36:76:83:88:b3:51:c7:a7:ea:9b:05:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 26 13:48:19 2026 GMT
            Not After : Jun 25 13:53:19 2027 GMT
        Subject: CN=6B91903D6EA78B0DE15EABD06BAE500E7086ABD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:2b:b0:b9:a6:c3:08:24:9b:b5:53:17:d8:
                    06:37:8f:ef:a3:02:d5:1e:1b:18:df:4d:bf:ef:b2:
                    a8:8b:8d:cc:5a:e8:f9:dc:29:93:78:b9:7a:ae:bd:
                    cb:87:b3:1b:a1:12:64:e0:2a:c0:c5:1b:a8:42:1a:
                    d2:26:bf:fa:9d:d4:3b:d0:8a:06:84:7d:ba:ed:89:
                    29:06:5d:10:a0:e1:55:de:4b:3e:dc:b0:62:fc:bb:
                    8b:28:c3:e4:b1:63:8f:cf:40:0d:d1:07:92:f9:d1:
                    6e:c4:ce:8f:47:bd:55:60:13:92:1a:b5:e5:a7:8a:
                    4b:ba:9d:40:1d:a1:18:5c:90:16:81:a6:a4:4f:91:
                    18:ac:1d:09:a9:1a:1f:c6:01:18:aa:93:52:6f:f0:
                    d0:a4:1e:9a:d3:ed:5d:13:a3:9a:fe:46:1b:05:fe:
                    39:cd:e5:05:e0:06:d5:54:05:34:84:1c:ba:cc:c7:
                    70:48:cc:f7:11:1c:4c:9a:77:35:e0:1f:94:6e:7f:
                    83:3a:8c:9b:71:cf:7a:f8:f4:ba:48:6a:11:04:3e:
                    8e:81:2b:37:80:1c:e8:1a:4a:c8:4a:b5:e3:69:f8:
                    f4:83:5f:13:9d:e8:4c:a0:62:e5:64:b7:3c:d0:92:
                    58:b6:40:df:f7:c7:98:ee:40:fa:0c:61:48:47:2e:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:91:90:3D:6E:A7:8B:0D:E1:5E:AB:D0:6B:AE:50:0E:70:86:AB:D2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS17378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.255.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:19:38:20:fc:e4:71:23:89:b1:c7:6f:c0:48:f8:61:ec:b3:
         27:7a:29:1d:02:21:00:99:fc:dc:21:b5:1f:84:a3:58:a3:6c:
         79:ae:74:fc:4e:00:17:0a:54:6f:a1:c6:d4:4e:d1:36:8c:b7:
         db:e7:e6:a6:99:4d:ed:4a:ea:42:6c:69:2e:e2:80:b1:94:f6:
         ff:1a:a5:09:69:4e:55:b7:3a:29:ee:a5:8f:0a:f1:cd:ec:af:
         6c:0e:7a:10:14:33:f0:5e:85:d5:f8:26:19:c2:1b:78:01:b7:
         d7:ce:3e:2d:61:4a:34:5a:b8:79:12:02:b5:08:3b:cc:04:49:
         ac:6a:f2:9c:32:32:eb:4a:d0:a9:8a:93:a2:9f:9b:66:ae:ad:
         96:ab:15:0e:b4:a9:e8:cb:4f:a8:c4:c8:14:b8:91:8d:0d:75:
         2b:cc:5c:af:c2:b6:6a:a1:28:50:8b:a2:b2:89:3c:d9:1c:89:
         a8:e0:e2:a2:c5:82:5a:e2:9c:bf:99:d1:05:61:73:24:05:80:
         05:be:2e:a1:ee:78:d4:bc:cd:76:db:a2:20:e0:55:d3:09:18:
         52:1c:88:2a:ec:53:9a:14:fc:8b:4e:fa:58:72:de:c4:39:b1:
         e9:66:e9:58:88:dd:1e:98:a8:a7:a7:bb:08:40:cd:9b:30:83:
         5e:70:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 04:10:47 2026 by rpki-client