Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS39944.roa
File:                     AS39944.roa (raw, json)
Hash identifier:          Ag3m8NNln/oUSGjpPYtiKpeNHyuPS9/idOQkxxVlJCU=
Subject key identifier:   CB:93:CF:BA:37:ED:14:B1:50:5B:16:ED:01:8D:E2:A7:B3:38:F5:2B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7873FFED8D3F793BD9CE41BD1416FB15C4214317
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS39944.roa
Signing time:             Mon 04 May 2026 14:41:25 +0000
ROA not before:           Mon 04 May 2026 14:36:25 +0000
ROA not after:            Mon 03 May 2027 14:41:25 +0000
asID:                     39944
IP address blocks:        157.254.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 08:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:73:ff:ed:8d:3f:79:3b:d9:ce:41:bd:14:16:fb:15:c4:21:43:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  4 14:36:25 2026 GMT
            Not After : May  3 14:41:25 2027 GMT
        Subject: CN=CB93CFBA37ED14B1505B16ED018DE2A7B338F52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:61:e8:30:40:ac:49:c1:f9:a0:5f:12:32:
                    19:52:b0:0f:27:36:01:7a:71:82:12:b5:3e:9d:e3:
                    f4:2e:a0:3b:e0:35:d5:91:7e:d9:35:84:64:7f:68:
                    0c:b0:e3:4b:26:66:63:a9:7d:09:6f:2c:b5:5a:00:
                    91:5f:77:05:7b:32:79:4d:e7:cd:31:00:4e:c6:4c:
                    1c:d5:d6:39:1e:88:dc:d4:74:6f:61:6b:ec:d9:87:
                    21:60:68:a4:63:e7:1a:64:67:13:bc:ff:49:03:67:
                    91:9e:66:da:88:7e:d5:4f:c2:80:bf:05:82:03:cc:
                    f2:10:4a:cb:d4:05:bd:55:0b:a2:2d:5e:41:57:45:
                    0a:57:61:0d:63:5a:f7:14:6a:34:16:80:cc:32:92:
                    91:02:e5:ad:63:60:50:62:12:74:f6:10:50:5b:80:
                    bd:57:07:26:23:66:d3:36:94:4b:1e:63:9f:90:3a:
                    68:e7:bf:42:2e:56:c5:45:a1:f7:b9:97:bd:25:ad:
                    55:8f:ba:e4:86:84:fa:c8:05:d3:2b:5c:d7:ba:33:
                    55:63:23:04:da:1e:6d:eb:9e:a8:83:c4:1c:58:cc:
                    6b:55:ed:77:81:d2:51:63:c8:1c:52:e2:e5:bb:32:
                    a1:4b:15:1d:49:59:d3:da:3f:c8:37:63:13:10:e8:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:93:CF:BA:37:ED:14:B1:50:5B:16:ED:01:8D:E2:A7:B3:38:F5:2B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS39944.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:29:a4:af:22:3f:06:f3:ff:2f:80:ad:cb:ca:e3:ae:24:
         8b:8f:55:8f:db:77:70:48:bf:7b:e2:d0:be:94:89:15:85:e3:
         48:77:25:6a:f7:79:b1:59:97:0b:f2:90:d9:d1:7d:92:12:b8:
         cc:23:15:96:8a:e8:7e:de:80:ad:cf:03:02:b5:36:99:d5:b5:
         07:68:88:ab:e5:a9:b8:ff:6f:b7:02:3c:5b:fe:10:23:35:45:
         74:9d:da:f5:cc:ad:6f:88:30:31:b4:2e:85:6d:18:14:53:2d:
         8d:b2:a9:87:6d:15:7e:38:fe:01:a1:48:fe:7e:16:7d:2f:37:
         3b:95:1d:74:37:e6:f0:ff:54:94:36:dc:8e:4d:c4:b1:85:f1:
         05:ae:5d:0a:3c:8d:4a:7c:1d:37:b6:74:2b:fa:79:f2:0d:6d:
         26:de:cc:86:17:03:64:fa:17:18:bf:2a:3b:77:b5:27:ad:b1:
         9a:2a:c6:49:e2:d3:91:8c:eb:d3:94:0f:a3:b2:8d:74:9d:7a:
         f9:7f:99:44:ec:13:49:4d:cb:66:70:74:f5:10:29:e9:89:04:
         29:32:fa:17:08:19:84:65:f3:5e:52:21:f0:4d:6d:96:f9:e6:
         94:9f:a6:09:2e:2c:54:f3:ec:7c:86:a2:ac:ec:e8:ed:38:3e:
         b0:fe:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 14:01:47 2026 by rpki-client