Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
File:                     AS401486.roa (raw, json)
Hash identifier:          8GjvoSo9BE92T77rwGD8FHVN0zMuvaK4Bys4HH9tdlk=
Subject key identifier:   7A:0F:2D:DF:CE:93:3B:47:8E:DB:C3:F5:36:E1:A8:FE:1C:33:FB:B0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       283F2428EC58E3A07BFEA68AE281FA78B0E3D9B3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
Signing time:             Thu 04 Sep 2025 06:31:21 +0000
ROA not before:           Thu 04 Sep 2025 06:26:21 +0000
ROA not after:            Thu 03 Sep 2026 06:31:21 +0000
asID:                     401486
IP address blocks:        74.50.10.0/24 maxlen: 24
                          74.50.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3f:24:28:ec:58:e3:a0:7b:fe:a6:8a:e2:81:fa:78:b0:e3:d9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  4 06:26:21 2025 GMT
            Not After : Sep  3 06:31:21 2026 GMT
        Subject: CN=7A0F2DDFCE933B478EDBC3F536E1A8FE1C33FBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:ec:0d:1e:8f:41:7b:4c:73:44:f9:6a:e8:
                    5c:0f:e4:df:00:1b:46:0d:ad:d0:40:9d:8c:c4:84:
                    42:37:a3:99:87:07:0a:e7:bf:e9:bf:7b:58:21:a9:
                    15:ea:95:8b:3d:d5:a8:b5:6b:57:b7:68:7c:27:b3:
                    d9:d1:11:70:10:87:e4:aa:06:41:ec:a0:e2:09:b4:
                    c8:4f:5b:da:f9:b1:6a:4e:ac:7f:7e:bb:5f:ea:95:
                    ae:59:a2:e8:81:34:a0:d2:94:23:1f:32:a0:9b:24:
                    84:db:4f:df:dd:19:c6:20:bd:4e:e5:75:8b:d5:63:
                    ef:00:77:9a:83:4a:3e:25:92:94:f0:03:94:78:c7:
                    26:8e:41:7f:71:7d:61:c6:fb:17:bd:fa:30:ff:8f:
                    8e:56:17:82:8e:09:4b:ff:30:2c:53:56:ab:fc:0c:
                    f6:cd:9f:86:06:df:87:1d:2b:ef:fb:4e:09:96:9c:
                    81:cf:60:d7:43:72:df:21:a9:ea:dc:2e:69:2a:c7:
                    e7:b3:19:30:49:67:46:54:93:95:b4:f5:20:8a:c2:
                    1c:ad:ef:29:04:03:67:a6:71:6f:9e:f5:a6:a6:a4:
                    78:64:1f:c8:18:cc:f2:51:b0:f3:68:5d:89:93:0b:
                    5d:e3:9a:da:92:dd:ab:62:9a:4c:e0:7e:e3:48:b3:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0F:2D:DF:CE:93:3B:47:8E:DB:C3:F5:36:E1:A8:FE:1C:33:FB:B0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:9c:e9:6c:6f:7b:d7:ae:73:3d:d4:b3:ac:c0:5e:44:f3:
         e5:08:b4:1e:6b:c2:7b:d8:11:e0:02:e0:bf:49:b7:01:9f:52:
         b9:0b:b5:5e:b3:8c:84:31:9a:90:50:5b:3f:5d:b9:ce:23:b1:
         5c:d4:71:19:34:ad:e5:74:c0:45:ea:d6:99:91:26:c5:1b:c7:
         eb:98:16:fd:c5:2e:fc:c6:b5:4c:24:84:ce:f5:69:79:1f:55:
         c5:88:99:a3:7b:cd:44:23:18:c2:1c:ba:71:eb:9d:92:6e:1d:
         8a:30:c7:8b:ba:c8:66:8b:e1:1f:4a:87:75:dc:6c:b5:28:a1:
         06:10:74:02:0e:67:a2:eb:aa:82:fa:d0:15:21:d5:07:24:4f:
         a4:16:54:73:ae:b9:d2:bf:a6:7a:f5:9c:75:ae:be:3c:31:5b:
         f2:83:43:94:e1:7d:0b:31:c2:62:42:7b:14:1e:e7:fa:4f:83:
         6c:03:3a:6a:9b:b4:2c:81:81:12:8c:95:50:44:c6:cd:45:03:
         f5:0d:f1:9f:99:28:33:10:35:71:93:07:f7:46:4e:50:8d:e5:
         e2:3e:6c:6b:6f:60:15:91:09:a4:34:68:f4:64:75:63:2d:18:
         2f:74:5b:95:a7:55:a8:55:8f:e7:6b:59:07:c7:81:10:09:2e:
         0f:f9:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:35:46 2025 by rpki-client