Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401933.roa
File:                     AS401933.roa (raw, json)
Hash identifier:          K7md/Db0nkp1fi6zRz7WhUM6wFoUFza1zwUT+O43YUk=
Subject key identifier:   0D:DD:17:8D:94:39:45:72:9D:3A:3C:91:51:62:38:F2:69:C5:D8:2F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1E8A14C7914F0E817EDBFA418530E2CFA0297844
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401933.roa
Signing time:             Mon 20 Jul 2026 20:59:04 +0000
ROA not before:           Mon 20 Jul 2026 20:54:04 +0000
ROA not after:            Mon 19 Jul 2027 20:59:04 +0000
asID:                     401933
IP address blocks:        64.188.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:14:c7:91:4f:0e:81:7e:db:fa:41:85:30:e2:cf:a0:29:78:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 20 20:54:04 2026 GMT
            Not After : Jul 19 20:59:04 2027 GMT
        Subject: CN=0DDD178D943945729D3A3C91516238F269C5D82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:a6:da:44:19:6a:48:c4:42:53:2f:ad:22:
                    b7:c3:b5:e3:4a:7b:88:32:a9:fb:c4:9b:72:4e:0e:
                    5b:62:14:0c:7b:27:09:79:e4:03:82:52:7a:29:01:
                    b4:ae:f0:e9:aa:d6:e3:ab:79:dc:f9:a4:b6:10:99:
                    a8:04:c7:ff:f2:50:23:d3:ac:f7:43:83:40:07:7e:
                    14:de:64:0f:bf:ab:11:f0:25:9e:93:74:a1:ac:dd:
                    75:2f:83:e2:cd:de:42:e8:d4:02:cd:36:2d:51:9e:
                    c4:39:15:0e:79:73:e7:49:6d:0d:39:32:9e:36:ee:
                    a2:0b:6f:9e:4f:79:9f:de:5d:04:bc:a9:0a:d4:d7:
                    5d:42:f3:f6:39:05:2a:ea:27:06:ec:46:4b:17:8c:
                    c2:ab:b6:be:01:b5:e2:1b:59:31:75:8c:41:aa:cc:
                    83:85:7c:25:cb:b5:23:26:09:de:56:c8:59:d8:0e:
                    47:f5:b4:17:52:d9:92:cc:9e:ab:04:57:97:f3:b3:
                    ad:63:c7:ea:b6:f0:6f:1a:0d:f9:55:51:d2:37:c8:
                    18:20:68:5c:a4:ff:78:bc:fa:ef:22:71:2d:b1:4e:
                    25:3d:e9:f4:6f:30:ed:f9:26:d5:70:e7:0b:56:00:
                    0d:51:24:65:de:c3:fa:a5:7d:59:e4:4c:fd:fc:10:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DD:17:8D:94:39:45:72:9D:3A:3C:91:51:62:38:F2:69:C5:D8:2F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.188.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9c:55:9b:0a:62:85:c4:c2:10:aa:9c:0e:23:c4:d8:04:7d:
         b3:05:1b:ce:b9:60:33:cf:08:14:df:f1:64:66:49:75:9c:f8:
         d6:3f:04:39:2c:1f:b0:69:b2:c6:72:4d:27:49:f8:14:34:ae:
         e5:bc:1b:79:a7:68:14:ac:be:a1:91:8b:e7:dd:bc:b2:a6:f5:
         07:1c:e0:32:d6:79:5f:e8:59:ee:8f:5e:c4:27:68:53:7d:f4:
         e2:e6:5e:95:d0:f0:83:c5:be:0c:0e:35:e4:35:84:d7:d7:2a:
         9f:94:d0:50:bc:a3:4f:c4:4f:d5:98:3a:dd:38:3f:f8:cc:fa:
         88:98:d2:b8:95:40:4c:8e:50:77:c6:76:70:59:a3:23:6a:3b:
         51:51:8c:e8:5f:83:c8:ce:30:6a:d3:2e:4a:d5:db:92:c6:cd:
         ff:2f:72:d0:a0:34:64:4b:91:d2:db:27:9a:15:af:56:28:0e:
         4b:ad:f8:18:c6:dc:cb:00:12:73:e6:ae:35:f9:57:c4:f5:98:
         48:20:f3:bc:4e:19:d1:d4:fa:00:bf:71:43:67:fc:ac:38:4f:
         3a:68:3a:07:3b:12:03:15:63:03:81:73:26:68:6a:c0:b7:ad:
         3b:5d:1e:85:48:fc:93:5e:02:71:56:5a:0c:27:d9:2d:df:e1:
         33:51:20:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 14:00:26 2026 by rpki-client