Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS18733.roa
File:                     AS18733.roa (raw, json)
Hash identifier:          mWcfXnLgXtR8obernjVuXTY7vlPhPzJ9OnquG/m+CFI=
Subject key identifier:   B0:2A:45:73:1D:CD:B9:F9:F1:CA:AE:DD:5F:BF:52:E9:CA:C5:EC:5D
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5E40A889FCC80A808DB3692DEF447BBCB6821437
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS18733.roa
Signing time:             Mon 27 Jul 2026 15:21:34 +0000
ROA not before:           Mon 27 Jul 2026 15:16:34 +0000
ROA not after:            Mon 26 Jul 2027 15:21:34 +0000
asID:                     18733
IP address blocks:        40.223.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:40:a8:89:fc:c8:0a:80:8d:b3:69:2d:ef:44:7b:bc:b6:82:14:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 27 15:16:34 2026 GMT
            Not After : Jul 26 15:21:34 2027 GMT
        Subject: CN=B02A45731DCDB9F9F1CAAEDD5FBF52E9CAC5EC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:94:68:fc:e9:62:4b:6f:ab:bd:75:58:5a:
                    4d:9b:40:d5:73:13:67:b4:de:37:51:d7:d9:7e:1a:
                    e8:a8:46:ee:db:48:d9:bd:2b:31:91:c5:0d:51:a3:
                    ee:87:91:4d:43:9a:67:23:38:86:30:04:ba:bb:7b:
                    ce:e9:1f:0e:da:ce:f5:9b:f7:fa:55:d6:35:4f:d1:
                    a8:e2:c9:c4:f4:07:04:47:61:53:1d:ac:14:44:e3:
                    6d:02:89:b5:d0:c1:17:e6:01:0c:0d:9b:4d:16:46:
                    18:06:1c:cd:6b:ff:fe:45:ba:61:8f:06:07:3c:2c:
                    91:25:1f:d3:de:d0:35:84:37:40:75:e2:0d:c9:52:
                    41:5e:66:23:71:90:67:a6:c0:5a:9b:3d:8b:98:fb:
                    d1:76:59:c3:97:6f:62:d4:60:fb:d4:70:4b:df:e6:
                    5c:8b:c0:6f:3b:e9:9a:d3:2e:cc:17:b9:5c:9e:f9:
                    83:0e:4d:b4:6f:4a:44:dc:5f:6b:d7:bb:26:d7:54:
                    92:3f:25:7e:c6:a9:12:f4:9f:cd:7b:65:b0:86:15:
                    37:21:49:76:22:a8:fd:b2:d5:1a:8a:4c:a2:6f:48:
                    40:ac:50:ae:06:b4:6a:58:d0:7e:9e:62:0e:82:52:
                    b5:04:04:f9:79:28:50:cf:fd:0b:64:6e:9d:b9:33:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:45:73:1D:CD:B9:F9:F1:CA:AE:DD:5F:BF:52:E9:CA:C5:EC:5D
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS18733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:1d:8b:af:6b:e2:08:a9:5a:a4:ed:c6:fd:5e:db:7f:07:7b:
         34:70:a1:6e:23:ed:bc:c9:c2:c6:f4:02:8a:67:dc:5f:4d:c6:
         62:7d:bb:f4:ab:51:7a:0a:be:73:dd:65:ac:70:0a:18:f4:ea:
         8c:a7:97:71:40:63:4c:1a:7a:44:4b:61:11:10:d4:6e:a7:54:
         0c:c2:68:60:9f:f0:b3:0f:b9:1e:0f:79:c4:49:b7:5b:4f:89:
         5e:4d:ed:10:43:60:33:d3:0e:ef:07:75:fd:4c:22:35:20:ef:
         c0:a3:80:aa:f3:82:2c:7a:e5:e5:9d:5d:2d:da:27:fc:13:73:
         2e:e0:06:f1:53:73:5b:5e:1c:c7:ee:5c:ec:6f:e0:bf:91:dd:
         4d:56:2b:26:6b:95:1c:77:46:f5:dc:98:b3:19:65:85:8d:e1:
         d9:6e:c9:a0:71:97:43:1e:da:24:f9:22:a6:79:ce:cd:f2:34:
         21:0e:b3:78:a8:ee:a9:70:13:5f:8d:ab:cf:2c:51:fe:14:21:
         90:60:7b:ff:de:24:50:90:3e:fc:d6:0c:12:4c:ae:9f:cb:9c:
         b9:2f:13:e2:e3:1d:0c:f1:7c:16:55:e0:a4:1c:2f:ef:2f:8c:
         bf:83:2a:2e:09:58:8a:14:da:18:b0:64:e0:7c:53:96:89:95:
         11:75:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:18 2026 by rpki-client