Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa
File:                     AS203048.roa (raw, json)
Hash identifier:          +LsVn/PBb4GbxmUAKvXZy9xgiGm78eFT2BP5/EvolK0=
Subject key identifier:   14:8D:44:E7:D7:27:D4:1F:1A:E8:D7:F9:E6:79:FE:76:55:D3:2F:9A
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1BCDD965DF576982BCF373028508C12511B50C6D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa
Signing time:             Mon 08 Jun 2026 05:32:33 +0000
ROA not before:           Mon 08 Jun 2026 05:27:33 +0000
ROA not after:            Mon 07 Jun 2027 05:32:33 +0000
asID:                     203048
IP address blocks:        40.27.75.0/24 maxlen: 24
                          40.27.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cd:d9:65:df:57:69:82:bc:f3:73:02:85:08:c1:25:11:b5:0c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun  8 05:27:33 2026 GMT
            Not After : Jun  7 05:32:33 2027 GMT
        Subject: CN=148D44E7D727D41F1AE8D7F9E679FE7655D32F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:3f:ab:9c:3b:61:83:ad:8a:a5:3b:19:57:
                    7c:00:28:7e:94:29:ab:87:53:60:5e:53:72:0f:0f:
                    a1:b1:a9:ae:9a:de:05:5f:27:03:2f:04:e0:65:af:
                    ed:72:b7:12:da:87:e8:20:1e:e1:d0:54:c1:e7:dc:
                    90:c9:d5:13:ec:8f:a9:75:2a:e6:9b:98:14:75:40:
                    62:8c:d8:a6:26:4b:b7:2d:e7:71:86:1c:05:23:05:
                    5d:d9:0f:66:1c:37:09:ad:33:10:97:de:b9:e4:b9:
                    86:2d:0b:16:ac:ed:63:68:10:fd:19:a2:36:fe:40:
                    63:97:07:07:f0:af:cd:0d:21:84:b4:3b:c2:93:e7:
                    23:2a:4c:0f:3c:90:fe:3f:a1:48:8f:8f:e0:2c:3d:
                    cd:29:64:36:92:96:e3:e0:aa:3d:89:0e:fa:c1:1c:
                    fa:9b:0c:08:49:b3:ba:51:e0:11:7b:f2:3a:50:a1:
                    81:d6:bc:10:8a:07:7a:f2:df:4b:f3:61:80:6e:f3:
                    8f:36:07:e2:44:5d:8c:94:82:b2:82:06:91:04:74:
                    4d:04:1c:30:3c:56:64:23:a4:d0:06:83:c5:56:64:
                    b5:60:62:fc:12:0d:86:e0:26:cd:3d:36:46:0c:7c:
                    1f:c3:1a:56:aa:1d:7f:8f:d7:73:19:75:11:91:75:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8D:44:E7:D7:27:D4:1F:1A:E8:D7:F9:E6:79:FE:76:55:D3:2F:9A
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS203048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.75.0/24
                  40.27.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:72:80:86:71:cb:4f:e4:b9:26:1b:6f:fb:63:ab:a8:28:3d:
         03:42:c8:28:13:9a:4b:2a:09:c7:ca:3a:d2:15:9d:e1:ae:59:
         23:bd:42:f9:17:66:ee:b5:6a:07:42:3f:63:62:72:ef:c7:5a:
         d7:3c:09:3b:67:76:c5:42:07:1d:82:59:f6:2f:d9:87:2d:46:
         24:5a:af:93:a1:f3:48:9f:88:e4:e6:55:0b:37:3d:37:92:7a:
         b0:aa:d3:31:17:60:96:90:68:6c:24:9c:63:bb:1b:37:cf:37:
         55:48:b3:80:1b:bb:2d:62:50:5e:02:df:df:4d:1b:c9:16:68:
         28:0b:f4:88:39:9d:48:23:99:54:b3:bf:ba:8c:ea:ce:6b:19:
         9f:2c:37:11:8b:da:0e:f9:bd:87:25:2f:7d:25:06:36:96:3a:
         2e:1f:e3:9e:54:64:55:50:45:b8:8a:d3:c1:4a:83:b0:2b:ff:
         a7:0b:e8:fb:b5:12:fc:a2:9a:c7:e9:e8:63:8d:22:97:03:b7:
         1a:09:f2:16:74:6b:84:85:44:9a:ab:0b:8c:e2:d4:fb:df:98:
         e6:e6:53:94:5d:14:c4:da:56:54:a9:51:8b:9f:0b:b0:3a:db:
         4b:30:67:05:05:2d:8e:f6:ff:ab:22:a2:a8:70:1c:d0:06:23:
         20:35:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:01 2026 by rpki-client