Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS398256.roa
File:                     AS398256.roa (raw, json)
Hash identifier:          Xtb071J/esIh6hmO1cUxlq/0qR5dyNhoeBlH+AQ29yo=
Subject key identifier:   5C:B1:53:3B:1F:0A:9C:3B:18:D6:15:A6:2F:22:53:A8:24:84:9F:5D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       61E956F46464DD8D7CFDF6E6FACC0FAE32B2573D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS398256.roa
Signing time:             Thu 04 Jun 2026 18:36:05 +0000
ROA not before:           Thu 04 Jun 2026 18:31:05 +0000
ROA not after:            Thu 03 Jun 2027 18:36:05 +0000
asID:                     398256
IP address blocks:        67.210.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e9:56:f4:64:64:dd:8d:7c:fd:f6:e6:fa:cc:0f:ae:32:b2:57:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  4 18:31:05 2026 GMT
            Not After : Jun  3 18:36:05 2027 GMT
        Subject: CN=5CB1533B1F0A9C3B18D615A62F2253A824849F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:bf:27:10:13:21:dc:7f:b5:5a:a0:00:a5:
                    34:e0:bc:2d:a0:de:b3:ed:83:2e:32:26:3f:67:a7:
                    d9:1b:85:f0:88:a4:3b:90:5d:88:6a:69:fc:c6:1c:
                    be:b1:e8:2d:50:8e:9b:47:b2:7e:59:df:c9:48:30:
                    65:b9:bb:59:c5:13:54:75:93:13:56:0c:ab:dc:55:
                    d6:73:80:b9:7b:c5:10:d9:9f:60:8c:16:d0:2b:9c:
                    03:82:fb:4a:c6:da:5e:4c:0e:99:b5:94:5f:73:cc:
                    4e:da:57:6f:1d:f7:16:d4:48:f4:b0:74:6a:37:33:
                    f0:7e:96:97:7d:27:3b:62:34:10:ff:bb:b1:a4:b8:
                    32:15:df:30:74:90:96:16:d3:05:bf:3e:67:d1:ce:
                    49:85:55:40:92:01:5d:f9:7b:fd:11:a9:07:48:c6:
                    a6:f2:14:4d:5b:fe:d4:4a:6a:13:4a:57:42:6a:8b:
                    62:5a:13:a4:3b:ca:12:3f:81:a9:28:6d:75:e8:9d:
                    5f:cd:ff:1f:d1:ab:a0:84:29:4a:96:21:cf:5b:5a:
                    2c:ed:48:12:b0:f0:c3:a9:36:b6:64:c5:ad:c7:b9:
                    9a:13:e4:48:90:e3:9f:ca:a5:59:5a:02:a8:48:cc:
                    ee:ca:98:53:57:99:bb:e0:b5:1b:9e:6d:da:c1:9a:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:53:3B:1F:0A:9C:3B:18:D6:15:A6:2F:22:53:A8:24:84:9F:5D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS398256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:84:32:97:d4:4f:50:d8:9d:44:07:ca:58:d6:84:3e:ae:da:
         b4:7d:d8:18:c7:82:82:d6:1c:ce:7e:fc:70:3b:bb:51:9b:00:
         5b:0a:21:e9:85:76:02:85:ff:7f:c8:4d:b0:f5:39:c2:75:fa:
         2c:3c:5b:5b:5b:64:52:d5:e9:de:7a:fe:83:c7:f2:37:66:16:
         c3:85:ee:e9:d4:e4:86:32:b3:a0:fc:fe:b3:a9:ee:e4:a4:e6:
         2e:53:bc:25:ff:6c:22:30:35:e8:c8:dc:4d:29:64:61:ce:c2:
         13:ac:0d:b4:c6:ee:d5:4e:f1:3c:b6:20:f0:17:e8:db:19:3c:
         dd:2f:f9:ed:64:08:87:be:d3:6e:fd:ee:3b:60:57:60:61:66:
         0e:d9:82:6a:0a:47:a1:41:3e:0b:68:36:e1:b6:f2:11:02:bf:
         3d:c8:c5:c6:93:9d:dc:b8:47:75:d2:16:f0:c2:3c:ad:be:e7:
         61:3c:2a:32:3c:c9:c1:55:10:67:de:a2:67:92:95:d3:a2:3b:
         95:6e:53:6f:50:24:8a:db:9a:0a:60:5a:0d:65:a4:3a:65:cd:
         b7:29:75:fd:cf:1f:9c:a4:73:6b:e6:ac:bb:96:b0:39:05:5f:
         bc:32:59:4c:76:22:90:7d:3c:ac:cf:bc:d9:78:d0:e7:77:b4:
         00:6d:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 19:44:07 2026 by rpki-client