Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401186.roa
File:                     AS401186.roa (raw, json)
Hash identifier:          Q00hCh8wiCGyFhKruRfEiocdi4WGYzEddavLfJ2+hEs=
Subject key identifier:   66:80:43:1F:DF:53:5C:92:D8:B9:D1:F9:10:84:CF:B8:D9:B2:74:2D
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2969F2E54AA19FE9B3AF035566A6A5267469096F
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401186.roa
Signing time:             Tue 04 Nov 2025 11:15:18 +0000
ROA not before:           Tue 04 Nov 2025 11:10:18 +0000
ROA not after:            Tue 03 Nov 2026 11:15:18 +0000
asID:                     401186
IP address blocks:        40.183.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:69:f2:e5:4a:a1:9f:e9:b3:af:03:55:66:a6:a5:26:74:69:09:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov  4 11:10:18 2025 GMT
            Not After : Nov  3 11:15:18 2026 GMT
        Subject: CN=6680431FDF535C92D8B9D1F91084CFB8D9B2742D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:2b:3f:0b:60:8b:39:e2:3c:35:fd:91:fa:
                    65:b4:fb:44:68:1f:1e:87:e5:62:4c:31:64:18:65:
                    cf:a5:f4:8e:2d:6a:d3:3a:24:a8:92:fd:aa:1f:29:
                    04:91:0a:8e:04:75:ca:cf:5e:df:f2:57:c9:d8:13:
                    ab:26:71:07:f2:41:82:b4:24:d5:fb:07:0c:55:a7:
                    13:03:f6:05:09:4c:fa:ed:12:e7:94:e7:e2:13:7c:
                    03:b7:13:5f:76:84:4b:0b:59:a2:1b:fe:fd:39:4f:
                    a1:05:92:f1:4e:c1:e8:d6:d0:a4:f7:03:db:5c:79:
                    04:de:48:e9:4e:27:f5:2e:e2:ad:4d:2b:51:ca:72:
                    24:68:b4:17:48:b5:6d:a1:fd:30:0c:09:d3:9d:f2:
                    b1:04:30:b1:4e:1d:82:77:d4:c3:7a:b2:62:24:75:
                    aa:b5:d7:f3:6d:00:94:4b:fb:e3:b7:83:b9:79:ff:
                    59:5d:f5:bb:d2:62:07:d2:43:cd:5f:50:78:b8:aa:
                    7d:a9:ce:b0:fb:5f:28:1d:75:4c:b2:dc:75:c8:53:
                    4d:f3:4f:00:13:db:bc:94:cf:e3:01:25:f4:50:95:
                    5e:96:23:15:91:73:e6:d4:39:09:13:68:3f:4d:84:
                    66:0a:10:63:70:37:ff:88:ef:d2:71:ad:f4:7c:9d:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:80:43:1F:DF:53:5C:92:D8:B9:D1:F9:10:84:CF:B8:D9:B2:74:2D
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:d0:3c:0e:58:a7:fd:91:bc:39:1f:09:d3:d3:2d:f0:2f:
         d8:30:95:ee:e0:39:dc:ef:b6:85:ee:61:73:5f:19:88:5f:ce:
         65:00:94:a1:8a:41:69:12:cb:60:df:da:ef:ce:8b:d8:e2:65:
         83:3a:11:78:c7:49:d8:8f:d4:0f:4d:d9:b9:e2:d0:c4:be:a7:
         73:01:39:05:5b:38:58:e4:7b:12:f0:22:b6:8e:33:74:bc:97:
         c4:8c:45:55:92:dc:89:bb:b7:da:c9:ea:6c:0f:5f:3c:46:91:
         ac:01:b8:f5:10:f7:fb:18:41:3b:5b:93:01:10:11:dd:aa:2e:
         1c:a8:4d:bb:48:1c:43:e3:70:4f:24:58:00:c9:88:2b:41:56:
         43:0f:3c:3b:ff:b1:1d:ea:3c:eb:8d:88:a1:5b:66:b2:8b:21:
         8e:62:69:6d:39:a7:39:3f:05:4d:f7:1a:f6:ce:d0:98:c0:fb:
         94:b9:27:ac:3f:db:56:41:40:8d:ef:5c:9a:67:cc:db:fa:b9:
         32:49:df:03:26:ba:08:65:49:99:fc:ff:37:3b:1f:6b:99:5f:
         7f:f5:f1:e1:f6:d3:4c:70:5d:4f:35:f5:20:8e:42:1d:61:e1:
         08:9e:52:71:0b:3c:dc:c4:73:c0:d9:ec:e3:4c:7f:79:ea:27:
         af:30:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:19:09 2025 by rpki-client