Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46475.roa
File:                     AS46475.roa (raw, json)
Hash identifier:          hzhUY+Quc2Lk6jo7vMFAMIJLZEY20njIaELHbcF2HDk=
Subject key identifier:   05:8E:4B:18:2D:61:C2:43:7A:D4:9B:15:57:45:7B:9E:BD:B3:4C:A0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3DC8F437643103C840F108C46E6F4F15BEC387D4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46475.roa
Signing time:             Sat 11 Jul 2026 14:27:47 +0000
ROA not before:           Sat 11 Jul 2026 14:22:47 +0000
ROA not after:            Sat 10 Jul 2027 14:27:47 +0000
asID:                     46475
IP address blocks:        69.12.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 23:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c8:f4:37:64:31:03:c8:40:f1:08:c4:6e:6f:4f:15:be:c3:87:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 11 14:22:47 2026 GMT
            Not After : Jul 10 14:27:47 2027 GMT
        Subject: CN=058E4B182D61C2437AD49B1557457B9EBDB34CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:c7:3d:85:2e:1f:c8:d6:91:0d:79:9f:fd:
                    fa:c2:40:69:66:e4:c9:b6:e5:f3:05:3e:df:eb:b7:
                    96:da:a9:cb:3e:29:f8:66:0a:7d:06:3c:e6:9f:ff:
                    a6:3d:51:e5:77:1a:f9:b0:a1:4b:9e:e2:39:68:da:
                    b2:39:58:7b:29:f0:91:a3:f9:10:c3:e4:ce:5c:3a:
                    1f:32:53:3a:58:df:6a:aa:d3:27:46:b7:f2:8c:fe:
                    5d:15:7f:8a:c2:f0:c9:25:b3:01:a3:19:9c:d4:b5:
                    38:16:d5:f4:71:c4:b5:82:21:60:bb:a9:c1:78:7a:
                    58:48:1d:f0:07:c8:c1:63:fd:ae:55:32:87:b6:cf:
                    63:83:02:32:f5:ee:dd:4e:e7:a1:d2:b7:8b:9c:ce:
                    ea:88:73:a9:41:24:73:a9:15:23:93:a9:3f:47:69:
                    b7:b3:d5:a1:99:26:35:07:2f:9f:a5:d2:4d:5f:d5:
                    0c:b4:65:08:97:6d:a3:01:c2:77:cc:90:98:95:14:
                    f4:e8:bf:c4:14:4d:b6:96:e6:ff:ed:ec:8a:66:cf:
                    55:0a:34:4f:da:c2:fb:99:44:38:e8:3b:78:4c:87:
                    6e:ce:67:17:8e:ff:bd:f3:18:f1:27:12:33:52:0f:
                    15:3b:70:7e:5c:9e:33:b7:82:d8:73:a9:10:85:27:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:4B:18:2D:61:C2:43:7A:D4:9B:15:57:45:7B:9E:BD:B3:4C:A0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:92:d3:66:c3:15:6e:90:f2:08:a5:b6:5b:29:92:0a:e2:
         ce:f6:d4:3e:22:cc:4f:cf:47:98:93:6e:a8:6a:4e:39:8b:0c:
         ba:55:11:63:57:70:16:aa:8c:fd:48:23:5d:c5:cd:77:17:55:
         f6:3b:3e:b4:b9:4e:54:1d:9c:87:1f:ec:ab:f0:8c:a1:05:49:
         54:0d:79:79:30:8a:47:02:72:f7:76:31:c2:8a:e1:e0:5c:eb:
         17:4d:15:2b:4a:d9:8f:5a:96:1a:57:08:ed:a1:1b:23:a1:e2:
         18:03:e9:eb:04:02:7e:02:16:e0:66:5f:b8:a5:11:04:94:4a:
         d7:09:78:9a:e2:35:be:b5:a3:8d:ce:0b:ac:81:f4:14:01:f5:
         39:db:c1:0a:82:4d:ee:11:3a:be:bb:54:88:c2:ad:5f:17:21:
         08:24:1a:27:3b:e7:05:54:81:fc:0d:6d:7d:54:98:4c:d7:be:
         c9:56:a5:56:9a:1d:4c:35:f6:e7:44:a2:77:bb:f0:af:c5:e5:
         5e:fc:c3:5b:9e:c3:1a:4e:c4:02:02:ff:fe:63:4b:4c:12:bc:
         88:e9:4e:b4:de:0b:b8:b1:6c:3f:44:b3:c3:71:70:4e:31:45:
         86:97:23:cd:ce:36:09:ad:c6:59:1a:a4:46:27:06:69:1d:48:
         5d:0f:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 12:24:41 2026 by rpki-client