Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401208.roa
File:                     AS401208.roa (raw, json)
Hash identifier:          bOk1tyjcZYrNpMuFKtPZZm/Y81GGDcqTa5JbMkmfwlo=
Subject key identifier:   1E:A2:0D:D5:04:14:36:C8:96:1F:37:40:C2:E4:38:99:C0:64:D6:2A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1B8350B2B56427A83AE3FFAA8420D091EEBD7481
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401208.roa
Signing time:             Wed 28 May 2025 19:28:46 +0000
ROA not before:           Wed 28 May 2025 19:23:46 +0000
ROA not after:            Wed 27 May 2026 19:28:46 +0000
asID:                     401208
IP address blocks:        74.50.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:83:50:b2:b5:64:27:a8:3a:e3:ff:aa:84:20:d0:91:ee:bd:74:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 28 19:23:46 2025 GMT
            Not After : May 27 19:28:46 2026 GMT
        Subject: CN=1EA20DD5041436C8961F3740C2E43899C064D62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:5b:91:1c:28:0d:9e:a7:cb:ab:3a:31:70:
                    c6:81:e5:cd:10:82:5b:95:36:3c:86:78:4d:98:6e:
                    17:55:cd:50:0f:e7:8e:aa:ae:0f:e0:2d:bf:7f:28:
                    e3:4c:de:0a:c1:7c:59:b9:6f:c9:7b:e8:f7:0a:71:
                    b7:21:fb:b5:e6:ee:a7:ad:f9:13:9c:cf:c3:66:43:
                    14:7c:03:b3:58:cd:0a:d5:20:36:b2:40:63:ea:97:
                    ba:6b:0a:ae:f7:94:66:b2:17:7e:82:f9:c3:b2:b3:
                    09:50:54:99:a8:80:e1:e4:9d:d7:1a:b3:eb:d2:dc:
                    10:81:63:df:cf:0c:1e:ca:18:73:10:8e:53:85:98:
                    92:02:63:43:c0:14:3e:bb:13:bd:35:9d:58:f5:a9:
                    69:1e:ab:f8:c2:97:eb:e2:02:0a:03:a2:2b:36:72:
                    ae:97:f7:89:b3:7c:9c:8f:93:47:c0:fe:74:c4:15:
                    fb:f1:64:38:c1:d4:1f:fe:63:1b:d2:0c:6d:ad:cd:
                    06:ed:f7:69:1f:cc:7f:2c:8e:f8:98:e5:4d:c9:d4:
                    65:39:f8:4e:d6:2c:24:a1:ab:0d:a4:4c:38:1c:6e:
                    43:f7:74:59:2b:1c:2d:4d:b2:91:5c:30:66:53:c1:
                    bb:6d:9a:03:ab:9b:68:b1:45:aa:ec:e9:35:28:a9:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A2:0D:D5:04:14:36:C8:96:1F:37:40:C2:E4:38:99:C0:64:D6:2A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401208.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:5e:21:98:ff:0c:b5:be:ea:a1:17:2c:a3:c7:90:4c:1d:21:
         0a:fc:81:76:d7:bd:fe:64:67:1d:1e:ab:00:09:68:97:02:7d:
         e1:04:cf:51:e6:db:1f:ae:58:03:77:19:70:67:bb:a9:27:6c:
         6e:9a:e8:4d:ac:ed:de:26:e4:e4:02:2f:fb:be:44:92:fb:71:
         02:45:db:68:b7:7e:7c:1a:20:9e:c9:e0:04:07:40:65:07:b4:
         1b:c2:0c:dc:99:b4:06:c7:f5:58:de:06:cb:b0:6b:84:67:51:
         be:9e:9a:32:37:1b:61:24:fc:26:a4:ae:27:1b:af:8e:3f:31:
         9a:41:c2:9a:88:30:f8:7c:f2:36:b6:f2:01:01:91:54:66:be:
         f2:7b:70:c8:b7:54:3e:82:4b:85:ac:d4:54:79:67:64:f6:ed:
         c9:7d:d4:db:c6:bf:f5:94:ce:12:57:af:02:1c:36:0f:5a:98:
         ef:66:99:81:6d:08:6d:ab:b7:48:bf:c8:e0:1e:4a:bd:52:30:
         1d:2a:24:7f:b2:3a:78:7b:6d:d5:83:47:cb:ae:63:63:4d:50:
         ad:ae:06:f1:f3:8b:e8:4d:37:13:13:05:16:a6:23:0b:3e:b1:
         f7:46:45:9d:48:da:ac:a0:27:a7:ac:2f:37:e4:48:d8:33:c7:
         a4:a3:38:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:41 2025 by rpki-client