Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18450.roa
File:                     AS18450.roa (raw, json)
Hash identifier:          pZ+gE9tjggDl0jgbUkrHVVdgNpzgJiJ4jEu3eZYXwSo=
Subject key identifier:   49:B7:FC:12:A5:93:42:73:06:26:B2:74:C7:42:71:25:2A:20:93:11
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5B2C355933D76E4F87D2CB8C229E098B9AA2F6F1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18450.roa
Signing time:             Thu 23 Apr 2026 16:54:19 +0000
ROA not before:           Thu 23 Apr 2026 16:49:19 +0000
ROA not after:            Thu 22 Apr 2027 16:54:19 +0000
asID:                     18450
IP address blocks:        209.200.238.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 18:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2c:35:59:33:d7:6e:4f:87:d2:cb:8c:22:9e:09:8b:9a:a2:f6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 23 16:49:19 2026 GMT
            Not After : Apr 22 16:54:19 2027 GMT
        Subject: CN=49B7FC12A59342730626B274C74271252A209311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:41:03:74:1b:68:93:a2:dd:49:1e:16:dc:
                    31:fb:28:a3:9a:65:80:ea:7b:dd:7a:a8:c2:d4:57:
                    c9:59:d0:ce:d4:44:44:fa:3f:3d:e1:37:69:97:27:
                    42:e1:26:92:68:b7:77:87:d3:75:37:d2:50:6b:65:
                    aa:ee:c9:10:41:9b:06:41:90:ea:69:68:94:fb:a9:
                    32:09:2d:9c:f4:dc:63:00:21:68:fe:29:d0:b8:76:
                    e8:00:6f:bb:99:6c:71:52:bc:5f:f9:06:6a:00:4c:
                    59:97:30:2e:0a:0d:52:5e:02:90:ad:ff:73:02:ac:
                    32:12:7d:35:78:1a:8e:71:00:c5:f2:6c:9d:0a:84:
                    a4:9f:0b:5c:15:a1:ff:08:6e:06:8b:17:2f:89:b2:
                    a0:f6:cd:b3:13:3c:e2:0e:bc:ff:77:7d:f1:ca:0b:
                    5c:48:2b:14:95:7d:7a:06:bf:2c:18:a9:af:65:4d:
                    56:23:e1:99:b0:1f:f2:81:b5:c4:de:59:4b:08:7c:
                    cb:f5:90:da:67:d6:8d:77:6b:41:c6:fe:15:c4:55:
                    c1:ec:b3:87:be:f4:8e:23:81:3c:5b:e8:e9:f5:6f:
                    0f:a9:96:07:e6:b0:8c:72:ab:9a:bb:01:64:e6:87:
                    52:67:aa:c4:cd:4e:fa:11:56:bf:d6:b2:ef:12:7e:
                    ae:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B7:FC:12:A5:93:42:73:06:26:B2:74:C7:42:71:25:2A:20:93:11
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.238.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:11:dd:91:75:b6:f8:d7:d9:fb:34:96:4c:b7:a6:84:8e:ec:
         4a:cb:ee:82:04:2b:90:ff:bb:ee:27:47:65:e2:38:cb:16:f6:
         d8:28:68:22:79:ca:60:01:bf:d6:b0:cd:4c:89:a8:7b:3a:eb:
         60:d1:98:b2:a2:6b:b6:b0:a2:88:b0:28:25:f9:82:1e:86:a5:
         71:b5:99:e0:bf:7b:9b:87:f9:c9:c2:dd:ea:f8:51:ad:bb:31:
         ca:9d:05:3a:50:9c:5d:fe:1c:e6:07:11:52:35:1a:f4:9e:56:
         3d:86:fc:a6:73:da:d0:1e:8d:e8:2b:46:92:e7:de:e5:41:f8:
         ea:7b:73:2c:c3:a4:1d:87:28:e0:82:39:fe:8a:10:bb:ad:19:
         db:a3:b6:49:99:82:da:99:e0:67:4a:63:f3:8e:ef:d4:ea:19:
         6a:47:14:cd:5d:78:65:12:dc:13:af:fb:38:c2:16:7a:26:f9:
         47:10:20:d5:d4:6c:66:c8:9f:f5:42:77:45:01:ea:b6:1e:92:
         5b:de:47:4e:62:26:d0:dc:9e:35:1e:07:7c:c1:4a:a1:a8:a6:
         c5:1e:23:bf:fa:56:3b:af:83:14:6b:7f:ef:a6:36:76:8f:66:
         86:86:9f:b8:1e:03:d7:f6:23:2c:22:8e:0b:34:da:6d:5c:75:
         c9:06:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:22:37 2026 by rpki-client