Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400810.roa
File:                     AS400810.roa (raw, json)
Hash identifier:          lPII4cE4SdR/Z+j/0lbyAU2+y9zhTY9dnbNLZQqKGlI=
Subject key identifier:   10:C8:2E:93:8F:37:EE:75:7B:F8:99:68:76:64:56:BD:F1:4D:45:6F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3BF47802594381DFC3F8D02D3FBE338ADD16DD72
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400810.roa
Signing time:             Wed 05 Aug 2026 19:36:19 +0000
ROA not before:           Wed 05 Aug 2026 19:31:19 +0000
ROA not after:            Wed 04 Aug 2027 19:36:19 +0000
asID:                     400810
IP address blocks:        64.50.188.0/24 maxlen: 24
                          64.50.190.0/24 maxlen: 24
                          64.50.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 14:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f4:78:02:59:43:81:df:c3:f8:d0:2d:3f:be:33:8a:dd:16:dd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  5 19:31:19 2026 GMT
            Not After : Aug  4 19:36:19 2027 GMT
        Subject: CN=10C82E938F37EE757BF89968766456BDF14D456F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:c4:8e:ee:19:ae:fa:19:93:43:8d:40:13:
                    da:5c:42:f2:a0:dc:d0:45:ce:b9:73:e6:d3:1c:ca:
                    ed:3c:36:f1:d1:fe:84:e8:be:5c:df:5b:85:0f:da:
                    cf:e0:06:4a:b4:80:03:ec:10:7d:51:ff:df:fe:57:
                    ef:eb:d5:a3:23:a8:0e:16:27:09:07:f7:28:48:a3:
                    92:bc:7b:2c:f0:c3:23:25:9a:14:b6:c7:2c:ac:94:
                    73:6e:fc:77:95:bc:3e:ea:73:49:80:f9:d4:e4:b2:
                    a7:b2:5a:f4:14:e7:2d:a0:94:83:3e:8c:50:cf:ce:
                    01:4b:cc:c8:ba:8e:27:6f:66:66:32:98:f1:42:70:
                    82:b7:02:ac:9c:24:14:2a:e3:71:f2:df:9b:6e:0e:
                    ba:9f:8b:77:71:d6:7f:5a:aa:41:cc:ee:5c:9d:73:
                    9d:10:a9:9b:f4:34:2d:73:32:52:15:10:27:35:10:
                    ae:57:aa:7a:23:3d:cc:ec:e4:49:df:74:09:fc:9b:
                    2f:38:64:aa:3a:de:e7:7b:cd:8b:ce:77:fb:a5:51:
                    06:a7:c9:7d:5c:1b:ba:10:7b:b9:23:41:bd:0b:6a:
                    4e:21:c0:a0:05:b7:c1:53:56:9e:d6:1a:bc:fc:1d:
                    59:1c:9f:57:10:a0:03:66:90:fe:14:90:ef:85:ca:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C8:2E:93:8F:37:EE:75:7B:F8:99:68:76:64:56:BD:F1:4D:45:6F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.188.0/24
                  64.50.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:36:25:eb:a0:c9:25:f0:72:55:30:be:ed:df:c6:f5:eb:
         f8:df:42:78:c9:41:83:1c:44:63:ca:76:42:84:ff:f4:d3:c7:
         7a:01:61:e5:53:fe:5d:46:59:29:75:50:47:1f:7f:bc:91:e7:
         65:ea:bd:02:51:33:9c:91:94:6a:87:11:43:be:66:a1:db:9f:
         4e:8f:7b:14:15:11:30:52:7f:ed:d5:72:bc:06:60:fe:3b:c4:
         e1:75:ab:a4:0f:bc:8a:69:08:49:b0:99:17:ea:fe:d5:58:e9:
         6d:fa:f6:9f:53:15:e4:d7:a5:a6:57:ec:a5:30:e0:db:88:34:
         8f:19:29:aa:e3:f7:b6:6c:2d:0d:a1:0e:ee:25:c2:84:a3:02:
         8e:8c:2a:ea:df:67:45:93:d8:7a:3b:57:4b:3b:c0:62:38:af:
         49:7f:93:f4:83:61:25:cf:9d:8e:05:51:84:2f:f9:15:18:d5:
         bc:fc:6b:a6:bc:f7:cb:fc:46:a4:e2:ab:5c:7e:b5:3f:70:f4:
         d5:4b:29:31:40:42:3d:97:90:8b:31:43:be:93:e3:76:de:b9:
         2f:8d:5f:5d:2e:a1:1a:d1:90:45:ad:6b:89:46:3e:b0:21:bc:
         e0:12:7c:75:07:b9:8e:78:05:99:e8:24:ac:a0:7e:03:ce:04:
         57:71:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:56:21 2026 by rpki-client