Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS984.roa
File:                     AS984.roa (raw, json)
Hash identifier:          ApakElaBdDWMlaAhKE7yPHu3vYsngZ4UTvPHgklCfP4=
Subject key identifier:   E5:DC:FE:C0:13:0F:93:89:D1:E8:46:AE:8E:64:F7:10:89:C8:DF:00
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       75B6711E0229E548B1D51CA32E8EB6C7F217F027
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS984.roa
Signing time:             Wed 18 Feb 2026 09:13:09 +0000
ROA not before:           Wed 18 Feb 2026 09:08:09 +0000
ROA not after:            Wed 17 Feb 2027 09:13:09 +0000
asID:                     984
IP address blocks:        64.50.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Mar 2026 16:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b6:71:1e:02:29:e5:48:b1:d5:1c:a3:2e:8e:b6:c7:f2:17:f0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 18 09:08:09 2026 GMT
            Not After : Feb 17 09:13:09 2027 GMT
        Subject: CN=E5DCFEC0130F9389D1E846AE8E64F71089C8DF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:7b:a8:b9:29:a1:ab:ef:f8:15:17:12:82:
                    19:78:ec:e8:cc:c2:17:e7:13:3d:9e:a3:19:7b:88:
                    12:b3:3c:1c:5b:c6:70:c3:8c:fa:e0:ad:8c:86:e0:
                    a1:f8:b5:2d:e9:66:bd:fb:7e:f9:34:36:a5:69:8b:
                    ff:23:fd:0f:ed:13:d0:6d:b2:0b:17:ff:99:83:5a:
                    b8:39:28:56:1a:09:8e:bc:64:2a:41:fc:9a:85:8a:
                    1d:41:ab:b1:ff:9f:d0:77:f7:7a:c9:1b:30:1d:5c:
                    be:60:37:1c:7a:b2:cc:d9:01:d6:fd:b3:32:25:92:
                    e8:5a:70:ed:b0:c5:ce:ec:f9:fc:9f:4b:fd:aa:8d:
                    67:50:4d:cb:09:ed:b6:00:bf:17:b5:53:b5:be:77:
                    71:29:52:23:e1:45:04:77:a4:41:cc:e3:f0:d1:29:
                    ec:ed:f2:29:74:c0:32:da:9d:bb:2b:bf:14:88:79:
                    80:ab:12:81:fa:ca:3b:cd:ef:82:bf:d4:fa:64:f2:
                    92:aa:5d:1f:f3:d2:30:14:5d:f2:d3:79:56:cc:1c:
                    99:35:40:75:ca:38:23:0c:b1:1f:5c:de:2b:4a:0a:
                    b5:35:03:31:91:e0:b5:92:ec:9d:3a:35:0d:d3:61:
                    7b:76:2c:21:6b:2a:ce:a2:77:f8:f4:b7:5c:d0:e7:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DC:FE:C0:13:0F:93:89:D1:E8:46:AE:8E:64:F7:10:89:C8:DF:00
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS984.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d0:a5:24:52:78:a8:1c:cc:ee:f6:db:bb:bf:77:49:5a:b2:
         b4:3f:a5:c1:02:03:17:e0:3c:fe:0a:15:c6:6c:c8:cc:c6:9a:
         cd:2d:f2:ad:ed:b0:87:a6:6c:b3:db:47:b2:f9:31:e4:fc:f9:
         ff:f9:e8:b1:89:bd:82:c9:e3:16:e6:36:35:e1:8b:96:4a:c1:
         89:9b:8d:8a:8b:5e:11:20:75:cb:b2:81:e2:a5:72:9d:08:26:
         ad:5d:7e:ac:56:5d:c5:16:80:c6:df:54:ea:e7:4c:6c:31:0a:
         7c:b2:e1:74:b9:b0:4d:16:da:6b:f3:24:55:6a:59:3c:a9:82:
         d8:19:b9:a7:e4:89:b2:24:bc:fb:72:40:25:3b:b4:e2:e0:6f:
         24:0f:40:bc:5e:16:0c:fa:e3:8f:07:ab:90:81:e1:33:b2:b2:
         68:a0:3e:0e:1f:84:e6:c9:3c:95:63:f7:be:6b:69:9c:f8:45:
         cf:a4:7f:ad:4e:6d:f0:b6:f2:4b:31:9d:3a:56:92:fc:7a:44:
         8f:f9:c9:30:f3:c2:e5:4d:c7:e0:96:59:06:10:53:82:09:00:
         d9:11:ab:df:61:ce:b4:fd:4c:7d:81:05:df:43:62:df:c5:0c:
         dc:6f:46:b1:3a:ee:1c:ae:4e:fc:03:75:25:7f:97:5d:03:25:
         cc:d5:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 19:27:03 2026 by rpki-client