Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS394738.roa
File:                     AS394738.roa (raw, json)
Hash identifier:          pDbpa3T+loFYNk1ZVD2+6wxlI6Htd/uVSFOm1FuwL9o=
Subject key identifier:   FD:0E:A3:F3:55:82:D4:FA:55:3A:23:05:32:9A:86:16:12:8E:3D:FA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       02D5C53577EBDFF45CA422D65439D0B856BBB193
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS394738.roa
Signing time:             Mon 15 Sep 2025 12:31:39 +0000
ROA not before:           Mon 15 Sep 2025 12:26:39 +0000
ROA not after:            Mon 14 Sep 2026 12:31:39 +0000
asID:                     394738
IP address blocks:        155.94.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d5:c5:35:77:eb:df:f4:5c:a4:22:d6:54:39:d0:b8:56:bb:b1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 15 12:26:39 2025 GMT
            Not After : Sep 14 12:31:39 2026 GMT
        Subject: CN=FD0EA3F35582D4FA553A2305329A8616128E3DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:d7:9e:13:f5:24:73:e8:cd:f4:f3:63:f8:
                    88:0d:96:d8:45:32:f4:4e:68:b9:ae:5b:59:39:dd:
                    18:92:41:24:48:0e:53:fa:64:ee:4d:b0:38:14:5e:
                    e5:cb:9c:83:15:f0:6d:c8:ee:65:40:e2:dd:dd:b3:
                    f0:cc:d9:7e:9f:36:59:0b:ab:62:3f:d4:01:10:b7:
                    44:50:72:0c:e6:f5:06:17:12:36:98:69:b9:93:3d:
                    04:6a:b8:2d:e1:c4:c6:81:fd:50:9f:91:57:1b:14:
                    53:19:27:23:7f:69:73:1e:86:3d:00:c8:cb:21:68:
                    4a:b9:07:bb:63:b0:bc:cb:21:40:58:03:4b:52:45:
                    15:69:d9:9f:51:96:ae:a4:63:24:b9:b9:24:9b:2b:
                    f5:ae:87:79:e4:d3:0b:f7:6b:ad:d0:9d:a6:4d:d9:
                    c8:35:9b:52:13:a4:fe:1c:c3:d0:20:25:40:82:1c:
                    48:f3:47:d1:d8:83:df:70:a5:5f:ae:47:42:42:7e:
                    6b:ec:44:31:de:6d:4e:99:d1:d4:28:27:8c:08:e1:
                    01:e7:dd:f4:17:00:47:df:50:1b:c0:28:60:38:06:
                    f6:73:bb:b1:b7:69:3c:5f:76:68:8f:f6:ef:ab:64:
                    4d:db:9a:52:6b:3a:e9:b4:ae:7f:84:a1:36:91:15:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0E:A3:F3:55:82:D4:FA:55:3A:23:05:32:9A:86:16:12:8E:3D:FA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS394738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a6:3f:5a:05:f6:13:79:11:cf:9c:7f:30:85:e2:28:e7:88:
         60:fb:60:bd:1a:df:5b:4d:fa:51:39:b8:bc:3f:5e:2a:36:de:
         70:38:50:7b:01:a5:50:30:ad:6e:d9:e9:e0:80:a5:38:ab:87:
         02:d8:e3:f2:0d:be:f7:95:aa:2d:1a:26:ba:f9:6c:84:f4:28:
         8a:dd:38:5f:54:df:0b:a8:ff:b2:4d:13:2e:31:89:03:61:58:
         61:ba:83:50:87:75:70:98:15:4a:2b:53:7d:14:68:61:76:42:
         bc:ce:b9:2e:ae:ac:86:0e:bd:f1:09:6d:b1:69:f6:27:c7:ac:
         0e:ed:3a:8b:a9:a7:e4:d9:df:cd:5c:61:82:03:eb:2b:aa:54:
         0c:4e:f3:44:cc:fd:5d:9f:f0:8a:14:07:9e:73:e5:f6:f6:55:
         82:11:31:3d:fb:2c:44:a3:35:e1:1c:0a:43:2e:30:e3:88:91:
         b0:54:2b:c9:98:d7:b8:d4:4c:29:8d:e1:27:9d:dc:59:0d:81:
         da:5b:73:f2:3b:2e:78:d5:0a:61:15:48:a7:63:ed:94:7d:15:
         78:3b:10:71:6d:65:11:84:76:62:a0:b3:c7:72:bd:56:43:08:
         92:6a:c3:bd:91:2e:6b:24:09:48:e7:38:07:9e:11:5a:59:69:
         38:7e:c4:d5
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUAtXFNXfr3/RcpCLWVDnQuFa7sZMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTE1MTIyNjM5WhcNMjYwOTE0MTIzMTM5
WjAzMTEwLwYDVQQDEyhGRDBFQTNGMzU1ODJENEZBNTUzQTIzMDUzMjlBODYxNjEy
OEUzREZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g7XnhP1JHPo
zfTzY/iIDZbYRTL0Tmi5rltZOd0YkkEkSA5T+mTuTbA4FF7ly5yDFfBtyO5lQOLd
3bPwzNl+nzZZC6tiP9QBELdEUHIM5vUGFxI2mGm5kz0Eargt4cTGgf1Qn5FXGxRT
GScjf2lzHoY9AMjLIWhKuQe7Y7C8yyFAWANLUkUVadmfUZaupGMkubkkmyv1rod5
5NML92ut0J2mTdnINZtSE6T+HMPQICVAghxI80fR2IPfcKVfrkdCQn5r7EQx3m1O
mdHUKCeMCOEB5930FwBH31AbwChgOAb2c7uxt2k8X3Zoj/bvq2RN25pSazrptK5/
hKE2kRVv8QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFP0Oo/NVgtT6VTojBTKahhYS
jj36MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzM5NDczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJtewzANBgkqhkiG9w0BAQsFAAOC
AQEAOaY/WgX2E3kRz5x/MIXiKOeIYPtgvRrfW036UTm4vD9eKjbecDhQewGlUDCt
btnp4IClOKuHAtjj8g2+95WqLRomuvlshPQoit04X1TfC6j/sk0TLjGJA2FYYbqD
UId1cJgVSitTfRRoYXZCvM65Lq6shg698QltsWn2J8esDu06i6mn5NnfzVxhggPr
K6pUDE7zRMz9XZ/wihQHnnPl9vZVghExPfssRKM14RwKQy4w44iRsFQryZjXuNRM
KY3hJ53cWQ2B2ltz8jsueNUKYRVIp2PtlH0VeDsQcW1lEYR2YqCzx3K9VkMIkmrD
vZEuayQJSOc4B54RWllpOH7E1Q==
-----END CERTIFICATE-----
Generated at Tue Sep 16 03:39:25 2025 by rpki-client