Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          kZ+XYoEpvIFMK5l/5ALCsw5hAIhL5oC45niTSuIhccU=
Subject key identifier:   DB:18:71:0F:04:36:5A:33:4D:8F:8C:B2:98:31:59:18:C1:AD:26:02
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       369AEF4DB9D210C9FCEFEE41089CD0389019AE9F
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS174.roa
Signing time:             Thu 16 Apr 2026 06:56:07 +0000
ROA not before:           Thu 16 Apr 2026 06:51:07 +0000
ROA not after:            Thu 15 Apr 2027 06:56:07 +0000
asID:                     174
IP address blocks:        40.183.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9a:ef:4d:b9:d2:10:c9:fc:ef:ee:41:08:9c:d0:38:90:19:ae:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 16 06:51:07 2026 GMT
            Not After : Apr 15 06:56:07 2027 GMT
        Subject: CN=DB18710F04365A334D8F8CB298315918C1AD2602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:26:af:82:64:02:23:15:77:8f:83:9a:a3:
                    17:33:ad:6e:c9:41:61:ed:91:7e:6d:1f:33:13:fe:
                    a6:61:03:e3:d3:d1:b0:1c:ff:3a:d8:55:ab:70:c7:
                    e8:8e:c8:61:6d:d0:61:15:fb:df:16:2d:89:0b:04:
                    45:cc:71:68:13:d8:83:91:8f:7a:00:5f:f7:14:63:
                    86:ec:2d:3c:a1:c3:ca:10:b4:2c:f5:42:2d:b4:23:
                    24:83:82:f4:63:de:95:95:e5:08:73:ab:36:11:6d:
                    c3:79:3d:3b:7d:96:82:3c:c6:e6:e9:50:af:4a:d2:
                    fd:eb:a1:07:2f:a8:9c:8a:30:c7:dc:66:e7:24:e6:
                    69:a9:19:d3:0c:e0:e2:ec:28:2d:df:e6:79:b1:6f:
                    9b:6f:1f:8e:f6:f1:72:10:4f:94:6f:d8:e6:92:b9:
                    58:fe:0e:23:4d:9a:25:6b:73:61:25:4d:bf:5a:b7:
                    16:4d:2b:88:a2:a8:c3:99:20:ad:0c:3c:23:ae:a4:
                    c1:28:11:e2:c4:36:ba:1b:11:9e:49:dd:93:b5:ef:
                    d9:6e:91:e1:4a:d5:65:cd:c0:fe:93:e5:4c:70:52:
                    05:57:df:9b:fd:af:d4:bd:a2:8f:25:ef:59:6c:e1:
                    5a:ae:9d:d0:2f:4d:6f:c6:d5:03:bf:95:59:e2:0b:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:18:71:0F:04:36:5A:33:4D:8F:8C:B2:98:31:59:18:C1:AD:26:02
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b1:0d:c4:bb:2b:53:48:67:f1:4c:99:7e:ea:01:05:df:e8:
         0d:71:72:f0:b0:16:7c:3d:61:b2:21:a1:bb:08:57:a0:fc:a7:
         e8:7e:a7:f5:c0:33:70:5e:22:6b:b8:71:f5:31:ef:97:46:fe:
         6a:3c:e4:c1:73:b1:9b:77:4c:c7:38:6c:ae:68:d6:49:ee:6c:
         bf:45:57:73:cf:55:e2:eb:4a:01:bc:25:3d:b0:c5:e5:e3:58:
         bd:8e:ab:9e:e5:0e:22:f9:4a:40:b3:ba:ca:6c:6f:82:36:09:
         3a:f3:37:ab:69:1a:78:03:07:06:78:40:2c:40:6d:ea:c9:36:
         b1:ca:e0:0f:8c:90:5d:97:5f:df:e1:0e:20:91:e1:81:9a:65:
         1f:10:56:ff:11:49:ce:87:0e:d8:db:37:be:a7:67:3a:3c:45:
         42:2a:8f:b5:5c:28:37:bb:6d:fe:82:7f:11:f1:66:13:f6:4e:
         27:92:58:84:1b:4e:54:b2:ad:c6:c4:47:61:5c:6e:2a:1e:09:
         70:9b:3b:52:9b:1b:35:84:b1:7a:7f:5f:e0:39:74:77:7c:5d:
         4c:39:ec:64:79:70:22:85:c2:e0:38:66:04:4f:b4:f9:70:fb:
         1e:55:48:f6:ce:aa:73:ae:f6:c5:38:80:ab:87:c8:27:49:eb:
         16:8b:13:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:04 2026 by rpki-client