Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS204966.roa
File:                     AS204966.roa (raw, json)
Hash identifier:          3rIQDYnu9odB4SHl215lU753FdjuMXX/RmZzMIBU0ow=
Subject key identifier:   BC:57:DE:C9:A4:56:8E:2A:64:95:48:BB:99:71:17:20:94:20:FD:31
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5B92C0CF088F326BFD21804037D1833AD7A122B3
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS204966.roa
Signing time:             Thu 10 Sep 2026 20:05:08 +0000
ROA not before:           Thu 10 Sep 2026 20:00:08 +0000
ROA not after:            Thu 09 Sep 2027 20:05:08 +0000
asID:                     204966
IP address blocks:        40.27.114.0/24 maxlen: 24
                          40.27.115.0/24 maxlen: 24
                          40.27.127.0/24 maxlen: 24
                          40.27.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:92:c0:cf:08:8f:32:6b:fd:21:80:40:37:d1:83:3a:d7:a1:22:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 10 20:00:08 2026 GMT
            Not After : Sep  9 20:05:08 2027 GMT
        Subject: CN=BC57DEC9A4568E2A649548BB997117209420FD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:ca:50:6f:1f:53:5c:0e:14:61:32:57:e2:
                    26:e8:a6:4e:d0:8d:e9:47:c3:e7:f4:d4:e9:16:33:
                    b8:7c:c2:16:55:78:c3:6c:97:14:77:3e:d1:8a:ba:
                    9f:5c:49:4f:dc:50:09:a7:a4:c1:70:56:38:67:8f:
                    c8:2d:d9:36:2b:5c:c6:e6:29:93:8e:8e:8e:71:54:
                    ab:40:ec:b6:31:61:22:6e:c5:fd:00:75:e7:aa:53:
                    5c:67:06:82:26:5e:7e:3a:5e:fc:82:05:07:62:2c:
                    4f:75:6e:bd:d0:1f:a8:06:c5:c7:a9:ba:6d:ad:e9:
                    4a:f2:1c:c4:e7:e0:60:89:0f:0e:1a:46:dd:83:4a:
                    a1:e7:86:af:e5:9d:c2:de:da:f3:88:1b:15:8f:de:
                    98:32:ca:51:c6:1e:7c:7a:80:63:56:f2:78:ba:fd:
                    1b:32:bc:fe:ae:93:d7:a1:ac:c3:5a:9a:24:ad:0f:
                    67:3d:9c:7c:eb:5c:d8:a4:3a:4e:e9:db:43:47:ce:
                    d1:8e:ae:2e:20:ba:5e:ae:5e:fe:3b:6e:cd:38:b0:
                    26:96:dd:42:ae:93:ff:f4:80:64:d6:cc:fc:4a:cf:
                    9a:8b:95:2f:ca:bc:4e:ff:70:a4:be:0d:f9:f7:4e:
                    cc:ae:aa:74:d6:8c:e2:dd:fb:da:ac:10:43:eb:bd:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:57:DE:C9:A4:56:8E:2A:64:95:48:BB:99:71:17:20:94:20:FD:31
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS204966.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.114.0/23
                  40.27.127.0/24
                  40.27.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bc:48:35:b1:31:22:01:e8:a1:9b:95:cc:d8:7c:79:c5:90:
         75:e8:6b:69:db:53:81:e9:bd:33:15:9a:9a:09:6c:63:f3:12:
         41:06:94:29:89:be:18:ab:02:15:d4:cf:74:f2:78:f9:c7:48:
         a5:f0:b9:0d:96:60:fe:f1:55:9d:a1:cb:3d:01:c8:4e:8b:de:
         bb:7e:d8:2a:4a:32:88:a5:52:3f:18:a1:4c:84:21:d8:a2:9a:
         b0:27:16:a5:08:33:0b:ed:6a:4b:bf:a5:a3:a4:d0:e8:de:b2:
         72:cb:72:4d:66:63:39:64:93:dd:93:56:45:f9:c4:01:cd:76:
         3d:8d:85:ba:bf:1f:11:96:5d:b0:93:31:d9:e4:a3:b7:ec:82:
         fe:05:35:aa:93:af:8b:5c:79:de:03:62:ae:52:7b:1e:af:26:
         2c:c7:57:38:cb:57:3e:29:72:e0:d9:65:80:42:29:27:04:18:
         a8:b0:5e:eb:e4:47:88:33:b2:3f:7b:89:97:31:ce:3c:4f:1d:
         3a:a8:96:06:f3:e1:d2:f3:42:2e:52:17:a7:8b:fa:07:ed:74:
         eb:85:71:da:b4:b8:bd:30:67:0e:19:f6:b2:e2:e5:2c:e8:bf:
         4d:30:95:af:c7:2c:49:91:55:a3:b4:21:e0:5b:2d:82:cd:38:
         07:be:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:44:47 2026 by rpki-client