Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401703.roa
File:                     AS401703.roa (raw, json)
Hash identifier:          e9ACuraHjvrK3NQ1WV6cN4IDr4kXHwPIVZzKnm8OpBA=
Subject key identifier:   B0:1A:E6:A6:1D:91:DB:A7:C5:19:6F:54:A2:14:F2:14:E8:9E:54:11
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4354FBB54F50FC98563CEED3BB75A299AE648000
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401703.roa
Signing time:             Tue 21 Apr 2026 23:36:00 +0000
ROA not before:           Tue 21 Apr 2026 23:31:00 +0000
ROA not after:            Tue 20 Apr 2027 23:36:00 +0000
asID:                     401703
IP address blocks:        67.210.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 13:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:54:fb:b5:4f:50:fc:98:56:3c:ee:d3:bb:75:a2:99:ae:64:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 21 23:31:00 2026 GMT
            Not After : Apr 20 23:36:00 2027 GMT
        Subject: CN=B01AE6A61D91DBA7C5196F54A214F214E89E5411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:06:74:d0:c0:a6:31:e5:56:a9:62:ac:9c:
                    d2:88:71:d2:b8:0d:9d:78:4f:69:d9:c7:18:c0:05:
                    14:e4:47:29:0d:42:ac:f6:02:90:5f:c7:b3:df:e3:
                    35:ff:4c:52:8f:ec:00:72:19:c5:ef:68:55:59:40:
                    03:0b:4b:db:60:fd:df:53:23:3a:cd:84:af:b9:68:
                    1c:51:cd:0f:dd:2e:f3:c8:4d:47:3b:b6:c0:43:54:
                    75:c2:29:e7:31:28:2b:fc:a9:19:d7:90:9d:e0:b2:
                    51:1f:25:89:a0:52:0d:c6:86:1b:7c:b9:37:45:74:
                    0f:3b:21:3b:97:18:f7:48:f1:33:01:eb:e5:73:0f:
                    8d:31:d4:d3:d6:07:42:d5:ee:05:e6:f1:8d:fd:44:
                    d7:03:b7:b5:48:d1:da:9e:82:b7:ce:23:a8:e5:f3:
                    a6:72:74:38:d7:ff:6f:b6:1a:15:af:32:eb:13:97:
                    85:33:3c:56:fd:48:d3:13:85:b5:65:55:e8:3c:0b:
                    f7:93:f7:cd:c8:2a:51:a7:a4:65:bc:42:da:04:4d:
                    3c:42:d0:d3:da:19:6c:ca:91:b4:8e:ac:bb:d1:0a:
                    53:c7:d3:49:8f:b1:40:00:fe:ca:73:5b:0a:3a:ec:
                    77:5b:0c:a7:1a:db:28:69:41:e4:2a:7e:4c:49:46:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1A:E6:A6:1D:91:DB:A7:C5:19:6F:54:A2:14:F2:14:E8:9E:54:11
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401703.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:91:b1:ac:79:f3:7a:be:1a:70:34:32:f7:1a:6e:75:14:
         f3:6a:16:be:eb:24:f3:8c:86:9c:43:30:31:16:fd:2b:18:0e:
         ab:92:2c:85:91:7d:62:51:56:8c:ca:94:e8:44:e5:82:f6:c9:
         43:fe:a5:32:19:50:06:08:a1:4a:89:71:6a:bb:b0:9e:55:7e:
         79:67:8f:aa:13:be:5f:d1:7e:e4:f0:1b:32:19:e4:d2:2b:44:
         3b:54:14:17:04:b3:29:bb:f4:44:de:7c:86:81:ac:5a:0c:42:
         ce:77:32:05:55:a8:e1:e9:9b:62:91:17:e7:5c:21:d4:96:60:
         d9:4c:8e:df:c7:96:4e:f2:f3:a0:69:75:fa:cb:a0:30:14:56:
         48:92:6d:1f:7c:1c:ea:6f:f8:71:97:9b:3d:bc:b0:25:9f:eb:
         91:93:e2:27:a1:55:fc:95:ce:e2:0f:2f:74:28:12:4d:14:f2:
         93:c4:87:db:0e:e7:a4:df:4e:32:88:e2:53:f1:26:0f:5d:3b:
         62:6c:3f:a6:0c:1c:f0:fd:2a:ca:4e:d9:58:18:05:79:bb:a2:
         8c:d8:4a:90:d0:29:a9:10:b3:f5:13:52:58:d7:64:b9:45:f7:
         89:d4:d5:ab:27:a6:30:8c:60:75:87:da:bf:3d:01:17:a7:b5:
         73:28:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 18:27:34 2026 by rpki-client