Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400810.roa
File:                     AS400810.roa (raw, json)
Hash identifier:          2lqHPSXg2uQr/AH8vb6gEZybjaXACOKv+JFPvRmQyeA=
Subject key identifier:   1E:BD:AA:6E:CF:82:4D:61:46:CB:B5:D7:22:5F:50:CD:0D:AE:C7:6E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       15CEF110B424B09CD7412A9DCAF7584DCE9076CA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400810.roa
Signing time:             Wed 03 Sep 2025 19:31:17 +0000
ROA not before:           Wed 03 Sep 2025 19:26:17 +0000
ROA not after:            Wed 02 Sep 2026 19:31:17 +0000
asID:                     400810
IP address blocks:        64.50.188.0/24 maxlen: 24
                          64.50.190.0/24 maxlen: 24
                          64.50.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 17:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ce:f1:10:b4:24:b0:9c:d7:41:2a:9d:ca:f7:58:4d:ce:90:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  3 19:26:17 2025 GMT
            Not After : Sep  2 19:31:17 2026 GMT
        Subject: CN=1EBDAA6ECF824D6146CBB5D7225F50CD0DAEC76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:c9:7e:73:cc:1c:47:d1:89:de:3e:ac:ad:
                    03:b7:2c:25:be:a1:fc:00:fc:d8:fa:ef:1e:7c:40:
                    70:01:cf:ee:c3:ea:db:5d:02:2a:12:e1:63:e2:d2:
                    97:2c:90:45:fb:81:6c:05:b9:57:72:af:de:75:79:
                    ed:b1:31:21:a9:40:2f:dd:9a:ae:8c:ae:fd:92:24:
                    ce:4c:0d:00:15:fe:6b:05:72:c4:03:41:6b:dc:27:
                    c1:71:61:9a:c7:3b:77:c3:81:cd:84:3d:64:2d:ae:
                    95:6c:fc:61:9e:34:4c:d5:c0:ee:39:5b:7c:56:a0:
                    28:f8:ee:87:2f:8e:9e:82:ef:1a:e4:ea:ab:3b:e7:
                    22:7a:ce:a3:fd:49:f5:e5:e4:51:a7:8b:86:5a:ed:
                    6a:de:05:a8:c2:61:cb:93:58:77:1f:84:cf:6f:ff:
                    d3:44:d5:bb:9e:38:15:a5:e7:9e:f4:60:f4:9a:45:
                    b4:b4:72:cb:46:d5:e0:ff:43:4d:1b:5e:a5:2a:a5:
                    9b:e0:f9:f0:cb:58:b3:79:85:7a:ec:9d:a6:9d:c3:
                    74:1c:a8:7c:51:13:36:a4:0d:79:f2:a5:f6:89:cf:
                    d3:f4:c7:dd:30:31:75:29:c5:0e:3e:1e:e7:3d:04:
                    c5:c4:28:7b:8c:05:ed:e4:8c:70:9e:73:db:5b:74:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:AA:6E:CF:82:4D:61:46:CB:B5:D7:22:5F:50:CD:0D:AE:C7:6E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.188.0/24
                  64.50.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:2f:92:17:87:db:f7:dc:21:e3:48:21:6a:15:28:99:44:be:
         b7:81:c4:08:7a:5a:19:11:b7:a0:00:32:e3:de:f5:70:ac:af:
         8d:bd:11:96:db:7d:41:64:13:46:82:93:8f:b6:b9:62:e3:fe:
         7e:85:d9:f1:95:f2:48:37:d3:aa:22:1f:5f:de:66:95:4f:b0:
         cb:a3:3c:96:eb:e2:8e:ff:ae:2e:0c:6a:c8:e4:45:9a:5b:62:
         3f:da:0d:7d:99:c3:8c:fa:4c:6f:b5:67:93:e3:d5:b7:21:e2:
         9f:0b:f5:a4:92:3d:ff:1e:4f:07:d3:83:18:3a:d0:f0:e5:94:
         f1:11:86:3c:67:ab:ad:08:b4:85:5f:9a:c6:4b:10:c9:86:45:
         db:72:de:c1:58:42:07:a3:ae:6b:11:ef:15:fd:d4:2b:b5:c7:
         9d:ae:c1:aa:fe:c6:09:ae:dd:5c:45:06:f3:bb:4c:a3:24:22:
         81:55:5e:36:1d:0e:56:b0:aa:72:62:f8:53:36:79:d8:9f:9e:
         cf:be:f0:12:c5:48:63:15:66:a1:2e:6e:fa:ff:95:8a:93:8d:
         6d:59:3d:0a:f2:7d:6d:5c:8e:f7:67:48:a1:04:e5:95:e6:7c:
         9c:01:fd:46:d1:b4:de:94:ec:c1:5b:1b:1a:18:5c:57:bc:39:
         aa:88:52:e1
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUFc7xELQksJzXQSqdyvdYTc6QdsowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTAzMTkyNjE3WhcNMjYwOTAyMTkzMTE3
WjAzMTEwLwYDVQQDEygxRUJEQUE2RUNGODI0RDYxNDZDQkI1RDcyMjVGNTBDRDBE
QUVDNzZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj7JfnPMHEfR
id4+rK0DtywlvqH8APzY+u8efEBwAc/uw+rbXQIqEuFj4tKXLJBF+4FsBblXcq/e
dXntsTEhqUAv3ZqujK79kiTOTA0AFf5rBXLEA0Fr3CfBcWGaxzt3w4HNhD1kLa6V
bPxhnjRM1cDuOVt8VqAo+O6HL46egu8a5OqrO+cies6j/Un15eRRp4uGWu1q3gWo
wmHLk1h3H4TPb//TRNW7njgVpeee9GD0mkW0tHLLRtXg/0NNG16lKqWb4Pnwy1iz
eYV67J2mncN0HKh8URM2pA158qX2ic/T9MfdMDF1KcUOPh7nPQTFxCh7jAXt5Ixw
nnPbW3RQvwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFB69qm7Pgk1hRsu11yJfUM0N
rsduMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzQwMDgxMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAEAyvAMEAUAyvjANBgkqhkiG9w0B
AQsFAAOCAQEAcS+SF4fb99wh40ghahUomUS+t4HECHpaGRG3oAAy4971cKyvjb0R
ltt9QWQTRoKTj7a5YuP+foXZ8ZXySDfTqiIfX95mlU+wy6M8luvijv+uLgxqyORF
mltiP9oNfZnDjPpMb7Vnk+PVtyHinwv1pJI9/x5PB9ODGDrQ8OWU8RGGPGerrQi0
hV+axksQyYZF23LewVhCB6OuaxHvFf3UK7XHna7Bqv7GCa7dXEUG87tMoyQigVVe
Nh0OVrCqcmL4UzZ52J+ez77wEsVIYxVmoS5u+v+VipONbVk9CvJ9bVyO92dIoQTl
leZ8nAH9RtG03pTswVsbGhhcV7w5qohS4Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:00:29 2025 by rpki-client