Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402276.roa
File:                     AS402276.roa (raw, json)
Hash identifier:          lbzKMMHKTTlDTMWmKR0jYLbCalMTmMcoVgvDqKCztmg=
Subject key identifier:   9C:4C:E6:40:00:B8:88:7D:BF:43:E4:D5:38:89:B8:33:2B:67:D2:CE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5890D124836E9123EB20535AFAA43383E24C2749
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402276.roa
Signing time:             Wed 06 May 2026 14:34:49 +0000
ROA not before:           Wed 06 May 2026 14:29:49 +0000
ROA not after:            Wed 05 May 2027 14:34:49 +0000
asID:                     402276
IP address blocks:        23.94.126.0/24 maxlen: 24
                          23.95.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 11:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:90:d1:24:83:6e:91:23:eb:20:53:5a:fa:a4:33:83:e2:4c:27:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  6 14:29:49 2026 GMT
            Not After : May  5 14:34:49 2027 GMT
        Subject: CN=9C4CE64000B8887DBF43E4D53889B8332B67D2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:80:04:89:91:e1:d2:5b:15:96:b7:d3:46:
                    ba:45:d9:94:1d:7b:0c:10:c6:b4:6d:02:c5:b2:3f:
                    43:2b:48:34:f2:87:a5:dc:26:fe:50:89:e8:69:65:
                    d7:75:fe:8d:3b:91:4e:1c:6b:5b:8d:23:dc:30:45:
                    dc:06:91:2f:a3:83:a5:17:23:0b:1e:a5:dd:40:ee:
                    17:b8:d1:eb:92:3d:58:87:30:2f:fe:33:b8:b1:ce:
                    8d:cf:94:3a:51:7a:40:c4:97:19:13:cb:b7:b2:3d:
                    16:12:2c:54:0d:b3:38:1d:de:1e:e8:3b:0f:5f:91:
                    f8:a1:96:e9:52:b3:32:ed:e7:ba:e1:69:be:7e:90:
                    2e:28:c3:9f:3c:fa:6f:55:78:23:f9:a5:71:6e:a2:
                    45:ed:d1:75:fa:0e:1f:af:6e:c3:4e:bd:68:39:67:
                    41:06:f7:f6:e3:d5:a6:cd:11:eb:14:b2:06:9e:52:
                    57:d1:f1:66:17:b2:bf:54:2f:df:d0:be:20:77:6f:
                    85:99:e4:c8:bb:a2:99:e5:7a:4c:01:00:bd:70:a9:
                    47:3c:d5:43:ae:8f:19:10:ca:bd:f0:b7:bb:08:e3:
                    39:33:89:d0:8a:e3:0a:f9:69:3c:74:c3:5a:ea:bc:
                    6e:4a:df:8d:19:a7:0a:79:87:0e:2e:63:74:41:89:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4C:E6:40:00:B8:88:7D:BF:43:E4:D5:38:89:B8:33:2B:67:D2:CE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.126.0/24
                  23.95.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:1d:77:18:0c:d0:75:9e:47:62:3c:f6:c3:83:d1:db:03:
         45:c0:b7:44:f7:fb:f9:1b:f5:63:96:aa:3d:fc:29:3c:22:80:
         7e:44:cf:2b:30:46:7e:5f:ee:00:3a:1b:bb:9b:49:53:b3:1f:
         a0:81:2e:5e:c4:9d:71:d0:85:47:ab:c0:0d:bd:88:95:93:ce:
         3b:63:69:1f:50:61:31:6e:33:0b:f4:53:d0:1b:83:5d:bf:f4:
         7b:db:02:97:27:11:a7:10:e0:2b:c5:0a:6b:40:25:78:ac:9b:
         72:20:c3:cb:ff:93:6d:06:27:76:95:67:69:6f:61:f1:1f:b0:
         24:3f:28:32:f0:ff:ed:ca:a9:79:74:ca:0c:0e:f6:a6:61:87:
         54:38:28:a8:ca:6b:66:d7:6e:e3:de:97:fe:95:00:ac:59:63:
         c5:ed:87:9f:29:e4:27:ca:bf:d0:ed:bc:62:e1:68:91:e1:47:
         ae:01:a1:52:a7:2c:58:6a:c6:f4:df:81:72:16:49:db:73:d9:
         22:ee:47:f3:6e:7c:83:32:0c:c5:44:59:23:ab:61:b2:5b:e1:
         3a:db:93:ae:60:d4:14:eb:18:83:66:6e:68:d5:e6:b0:92:ce:
         52:0a:d3:13:d6:35:d9:c8:03:bb:31:e2:20:d8:67:9d:a0:04:
         98:88:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 13:44:33 2026 by rpki-client