Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS274365.roa
File:                     AS274365.roa (raw, json)
Hash identifier:          cdsw8WZ953JUFlbeJEs+tGq2i/R2rnZ0R/MV7rhUG/U=
Subject key identifier:   1E:33:CD:B7:79:13:66:57:45:A5:88:6D:93:C6:96:07:01:A0:FB:0C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3F40C855764CD13672AFACE5419962C475D9FD9A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS274365.roa
Signing time:             Thu 03 Sep 2026 00:44:42 +0000
ROA not before:           Thu 03 Sep 2026 00:39:42 +0000
ROA not after:            Thu 02 Sep 2027 00:44:42 +0000
asID:                     274365
IP address blocks:        198.23.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 17:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:40:c8:55:76:4c:d1:36:72:af:ac:e5:41:99:62:c4:75:d9:fd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  3 00:39:42 2026 GMT
            Not After : Sep  2 00:44:42 2027 GMT
        Subject: CN=1E33CDB77913665745A5886D93C6960701A0FB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:a1:a1:0e:85:39:c6:a4:0c:ff:f0:c7:66:
                    ef:c9:c4:5a:2a:34:c9:92:f6:5f:07:87:91:3b:16:
                    7a:d0:b1:f4:af:31:32:6d:da:6d:50:d4:e6:e3:6b:
                    7e:ae:9b:0a:74:8a:a1:1a:03:bf:cf:db:0c:91:3f:
                    0a:ae:f0:43:a7:8d:b1:81:2c:b8:e0:e3:4c:9f:d6:
                    86:44:81:01:df:75:f8:83:39:49:13:00:af:04:03:
                    46:bb:53:38:8d:72:16:55:ee:7b:33:c1:46:0d:10:
                    0c:17:50:3f:cb:31:c0:f1:5c:e2:1d:7b:bc:90:b7:
                    1b:46:0a:19:72:93:70:0e:c4:ae:cc:f3:6c:6e:7d:
                    d7:1f:72:43:d5:6f:ea:b1:87:be:4f:6e:76:18:a4:
                    34:8a:59:c5:c8:27:89:66:5a:2f:13:63:16:c6:81:
                    d9:6c:97:58:5d:69:8b:d4:f3:5e:9d:96:c5:e6:aa:
                    84:bb:92:e4:b5:a2:87:45:d4:d9:f5:cf:f1:cb:c8:
                    82:57:d0:e2:f3:14:68:1d:7b:53:0b:48:13:e8:50:
                    c9:96:9f:f6:fd:7a:93:3e:3d:c4:80:93:14:4c:f7:
                    d9:31:2a:65:02:98:e5:fc:39:2e:aa:61:a6:d2:4b:
                    ed:31:35:6e:d6:45:3a:8b:c7:86:62:2b:38:a6:f3:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:33:CD:B7:79:13:66:57:45:A5:88:6D:93:C6:96:07:01:A0:FB:0C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS274365.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:78:df:40:9e:cd:60:08:93:67:37:34:73:9c:01:36:d6:54:
         95:89:8f:ac:33:7e:65:db:b9:f9:33:ef:2e:f9:72:0a:a3:7a:
         b4:39:54:78:d7:1a:b8:f7:17:23:77:36:fb:d0:39:d7:a0:58:
         6e:7e:95:54:6a:cb:13:bb:70:38:d3:05:ba:83:0a:03:60:f2:
         6a:75:b4:97:d3:29:ff:39:96:ad:f3:cd:77:89:f0:a6:05:9d:
         1c:78:5b:2f:54:aa:dd:05:95:b5:cf:f8:63:02:f5:10:0a:36:
         a6:dc:75:4a:73:82:ed:08:b6:96:c1:d5:b1:ce:f0:ab:e3:0e:
         1f:94:d4:3d:17:05:9e:c4:cf:32:51:15:ba:db:17:68:4d:dc:
         54:9b:8c:68:66:1a:bc:90:e4:d5:e3:13:22:57:18:96:f3:b0:
         0d:2b:b0:34:22:1b:f7:f9:cf:61:4b:53:a9:20:7e:d8:34:9d:
         f7:ea:ab:fa:e6:49:41:a5:22:03:81:13:2a:e3:98:31:92:83:
         1f:92:64:8d:92:20:aa:15:08:77:54:68:af:46:d8:a7:0d:f9:
         79:fe:ed:bb:07:cb:ad:f3:a1:eb:9a:c8:4d:1a:77:e9:dd:0d:
         f1:6f:20:25:0a:35:31:06:d6:8d:56:43:6b:f6:59:06:65:50:
         ed:83:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:39:33 2026 by rpki-client