Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397630.roa
File:                     AS397630.roa (raw, json)
Hash identifier:          aZYLVQkBMH7UjsNEGpSmCQGE0WZ3mi/rbnew4erzYa8=
Subject key identifier:   CA:F1:F0:0E:FB:92:A6:D0:7B:CD:52:99:63:67:02:0C:B1:BE:30:6F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4BEDEC203ADC8119E5277E5E3C4FA3AD8D58741F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397630.roa
Signing time:             Fri 10 Oct 2025 12:26:45 +0000
ROA not before:           Fri 10 Oct 2025 12:21:45 +0000
ROA not after:            Fri 09 Oct 2026 12:26:45 +0000
asID:                     397630
IP address blocks:        74.50.7.0/24 maxlen: 24
                          172.245.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 22:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ed:ec:20:3a:dc:81:19:e5:27:7e:5e:3c:4f:a3:ad:8d:58:74:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 10 12:21:45 2025 GMT
            Not After : Oct  9 12:26:45 2026 GMT
        Subject: CN=CAF1F00EFB92A6D07BCD52996367020CB1BE306F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:66:50:9d:0f:40:1c:bc:c5:80:62:b6:7a:
                    29:79:e3:d1:9d:f9:64:bc:3b:7f:de:90:9c:4f:15:
                    cd:0c:71:c5:29:ce:6e:9d:28:60:7b:a3:7f:e9:45:
                    ce:0b:50:a3:53:60:b1:c1:04:26:85:b0:a6:fb:dd:
                    fe:a6:f0:68:67:3e:c5:05:5c:44:e5:de:1b:e1:80:
                    4a:b8:3f:75:c9:19:0d:af:77:39:c6:5d:16:3d:bb:
                    e7:e2:26:be:46:59:cc:fe:32:3d:d9:b5:23:32:54:
                    bc:0a:1c:fc:6c:88:82:3c:e4:0e:72:ad:1b:c7:72:
                    00:b7:2d:98:18:59:ca:1f:dc:46:06:e2:dc:fa:bc:
                    94:4d:a0:bb:92:77:0d:b8:32:f5:70:60:01:61:77:
                    bc:5d:99:b4:e9:9b:db:46:ff:a2:c1:e5:bb:b2:b8:
                    92:f1:eb:84:0e:d0:54:7a:fd:7e:13:58:cb:95:12:
                    09:8a:77:6b:b5:91:b4:39:66:1b:71:b5:91:ad:4a:
                    30:d1:92:0f:31:21:a8:7d:35:16:56:84:b3:6e:b1:
                    88:8d:11:f3:35:4f:9a:d5:f6:ff:1f:25:e1:5f:5d:
                    eb:ff:a2:0b:22:95:d4:0c:ee:07:35:02:50:de:78:
                    2b:07:47:ef:2e:6c:87:ab:bb:8f:76:1b:30:ac:4f:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F1:F0:0E:FB:92:A6:D0:7B:CD:52:99:63:67:02:0C:B1:BE:30:6F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.7.0/24
                  172.245.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c7:39:e7:82:96:0b:f7:57:f2:9b:8d:7d:f7:f6:0c:4c:04:
         5f:b0:e3:8f:0b:8a:76:23:cf:0c:e2:7c:c1:77:10:a3:22:c9:
         e8:6e:de:08:dd:96:94:b1:00:81:8a:f2:04:8a:25:1f:f4:98:
         98:8d:01:8f:aa:32:b4:a8:52:8f:61:ee:1c:a8:bc:4c:ed:0e:
         e4:d6:fb:83:5d:d9:a9:2c:5a:53:37:63:b9:59:f9:68:3e:bf:
         8a:b8:ad:e5:3e:9a:ae:b5:3e:f9:b8:bc:82:cf:a9:49:82:2d:
         08:ce:c5:10:3c:2a:91:5e:01:1f:fa:cc:a3:92:49:46:ab:e5:
         36:8e:63:6b:14:21:db:9b:bb:e3:70:c2:2f:e3:5a:0e:88:75:
         0f:03:fa:52:02:de:06:85:45:8d:e9:14:ae:86:5b:47:4d:a1:
         e7:6c:13:45:9f:81:1d:b5:0c:d9:8d:59:0b:4a:8d:31:d0:b7:
         52:91:5f:0c:98:a8:5d:c9:83:1e:3c:eb:94:a0:c3:72:bc:b8:
         b9:bd:84:12:d4:78:6e:9a:e3:b0:c8:10:78:af:39:a3:01:a4:
         1b:31:6c:58:59:76:50:b1:da:7e:35:d3:73:4a:68:97:97:35:
         46:0a:cf:04:e7:a6:1d:66:d2:64:b6:1c:af:e1:77:12:e5:c6:
         31:6f:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 20:17:20 2025 by rpki-client