Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS396163.roa
File:                     AS396163.roa (raw, json)
Hash identifier:          2alX2nN/0IwQ1eXcwwndy6l2Br2i6C4SizZ+/E8/qRE=
Subject key identifier:   7A:3B:BB:3B:F4:E2:2D:65:08:F3:25:3D:5E:4B:7B:DB:5D:75:E2:39
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2FB7E47F9D13282C4E6E3804B590D7D0CEC9AFAF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS396163.roa
Signing time:             Thu 15 May 2025 02:20:12 +0000
ROA not before:           Thu 15 May 2025 02:15:12 +0000
ROA not after:            Thu 14 May 2026 02:20:12 +0000
asID:                     396163
IP address blocks:        209.200.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 01:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b7:e4:7f:9d:13:28:2c:4e:6e:38:04:b5:90:d7:d0:ce:c9:af:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 15 02:15:12 2025 GMT
            Not After : May 14 02:20:12 2026 GMT
        Subject: CN=7A3BBB3BF4E22D6508F3253D5E4B7BDB5D75E239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3c:83:5d:95:11:ef:07:5e:b2:b2:5b:3a:44:
                    44:02:ee:ca:73:05:38:ab:02:29:db:c6:11:34:e6:
                    7c:b6:5b:91:fd:39:54:08:83:a0:f2:b2:ed:3a:c8:
                    49:01:3c:9d:6f:d0:82:0c:79:7e:88:78:f4:37:84:
                    75:1e:b1:cd:ef:44:e4:fc:e9:48:50:64:25:76:ed:
                    c7:44:9c:a1:3f:77:0a:5b:ce:13:38:8f:fc:2a:4f:
                    41:d3:a0:2b:c8:fd:8d:c6:f5:2b:fe:6f:c5:f4:3d:
                    fd:6b:4b:3e:96:18:10:ea:33:8c:80:16:b0:f4:b3:
                    d7:82:d7:d0:6a:03:39:90:7e:ab:cd:7f:42:dd:bb:
                    40:22:62:a8:11:f1:f2:a3:3c:12:cc:2e:35:2f:3b:
                    88:40:ed:e5:5f:96:66:45:2a:d2:6b:5d:c7:1b:65:
                    ed:8b:a8:7a:74:44:71:06:1f:46:1c:84:2a:f2:c5:
                    02:fb:b4:b4:16:e2:20:64:41:a4:f7:3d:0a:04:8e:
                    4c:61:ae:ba:8b:d0:a8:fa:9e:c6:3b:26:ce:88:7d:
                    9e:57:b2:59:99:6b:c8:62:dd:79:3c:09:61:66:2f:
                    cc:aa:e2:d1:70:e3:f9:e7:62:f7:72:73:1c:b1:a0:
                    ac:0e:f0:a5:e9:ad:1f:f4:a9:56:ce:24:fb:e5:33:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3B:BB:3B:F4:E2:2D:65:08:F3:25:3D:5E:4B:7B:DB:5D:75:E2:39
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS396163.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:9f:42:7c:05:b8:c6:36:0c:3f:b2:63:84:43:bf:1b:04:
         de:24:85:b7:c9:c0:36:50:00:ed:ca:a6:34:85:4f:c4:17:24:
         79:d2:a2:41:18:8f:54:f6:68:69:2a:27:7e:5b:6e:85:6e:9c:
         cd:da:7b:89:9d:35:55:81:d6:bd:19:89:2f:c5:a7:c0:94:f8:
         26:c5:82:b8:b6:9f:60:a0:8e:8c:26:4c:92:fb:77:68:86:d1:
         f5:cc:70:37:dd:bf:82:06:49:95:bc:7e:f6:75:04:74:1e:82:
         67:29:0c:31:a4:1b:7b:6d:3b:61:2e:84:9c:b8:27:51:57:c0:
         45:5e:c1:2b:19:8a:0b:ac:95:95:f6:de:af:0c:a4:b2:85:98:
         4d:ab:39:13:cd:b6:76:0e:08:bd:58:5d:6e:42:bc:34:49:42:
         1a:2a:b0:9a:9d:e7:2b:d7:27:d4:d3:dc:1c:fd:79:b6:29:dc:
         10:f1:7f:7b:8f:82:3f:91:51:6d:8f:5a:97:aa:4d:21:90:87:
         46:90:47:9a:27:2c:86:2d:31:1a:4c:4f:02:07:3b:a4:37:87:
         90:81:83:07:61:b7:29:fe:8f:aa:49:c2:e7:40:8c:37:93:a3:
         e7:f2:29:5c:c9:00:82:0c:58:00:67:e3:96:5f:76:47:42:7e:
         44:28:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:17:41 2025 by rpki-client