Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402866.roa
File:                     AS402866.roa (raw, json)
Hash identifier:          y0tVKDpQ2XEgYbLBL/H2aonCL+GSKYipYC0nEwur79c=
Subject key identifier:   7C:CA:DF:2A:E7:B9:A2:B2:92:C3:5D:DA:76:BE:44:2F:10:36:FA:A4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       556E6B8AD1A15361733D23ABAA1DBBE0113E9870
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402866.roa
Signing time:             Wed 16 Sep 2026 23:27:47 +0000
ROA not before:           Wed 16 Sep 2026 23:22:47 +0000
ROA not after:            Wed 15 Sep 2027 23:27:47 +0000
asID:                     402866
IP address blocks:        206.53.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6e:6b:8a:d1:a1:53:61:73:3d:23:ab:aa:1d:bb:e0:11:3e:98:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 16 23:22:47 2026 GMT
            Not After : Sep 15 23:27:47 2027 GMT
        Subject: CN=7CCADF2AE7B9A2B292C35DDA76BE442F1036FAA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:f6:4d:ae:a0:c3:11:6c:90:e3:72:68:bf:
                    1b:72:5f:97:6e:ac:99:31:40:37:54:11:8e:16:d9:
                    94:9d:0b:4b:a5:f8:33:45:03:3c:89:11:9f:c0:ce:
                    f1:ea:da:4a:ab:97:e3:4c:cc:f8:9d:d2:0c:ac:71:
                    f7:fd:ae:c8:e5:db:55:72:53:d1:63:4f:c1:d7:df:
                    8c:55:2e:56:5c:8d:07:68:f8:0c:e2:a2:bd:33:c2:
                    bc:fa:41:cb:3d:ef:f2:5e:73:85:98:a0:8e:38:ce:
                    c5:2d:fd:32:b7:66:e5:40:1b:91:de:95:78:62:86:
                    90:02:ec:cc:44:11:c3:b5:25:b5:32:44:1c:af:0d:
                    62:c9:4f:15:90:8e:14:01:66:a2:e2:5c:70:11:14:
                    d4:cd:4e:93:c9:75:8d:76:36:4f:b6:86:f8:48:fe:
                    1a:8c:49:b6:f8:73:03:a9:d6:ab:df:b6:e6:ac:9d:
                    0f:49:90:2c:99:f9:57:e3:9f:d5:4f:5e:fc:88:dc:
                    de:0d:13:09:dd:f0:84:49:d3:b3:49:37:a6:ac:95:
                    4f:6f:f9:06:fd:d4:ce:6c:08:ea:33:75:7d:f5:fa:
                    78:c0:15:79:c6:91:4c:0d:44:2e:35:65:2e:d0:7f:
                    da:de:68:e3:6a:ad:95:02:1c:7e:8c:56:5c:02:cf:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:DF:2A:E7:B9:A2:B2:92:C3:5D:DA:76:BE:44:2F:10:36:FA:A4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:86:f5:49:f4:74:89:2a:1c:31:af:2a:5e:b8:72:d9:19:
         83:4c:1c:46:70:b1:f3:19:af:61:5b:c9:01:7a:11:0c:d0:ec:
         e4:e7:4f:72:e1:9b:5b:7d:19:ac:44:cc:53:dc:42:9a:db:44:
         eb:21:c2:af:c0:0f:94:3f:97:40:40:79:06:22:cd:3e:2c:da:
         e9:7c:45:fc:1c:9b:26:82:ab:86:18:87:b4:5a:fb:87:89:de:
         18:98:fc:e4:f1:87:e6:63:f9:4f:17:24:e1:16:97:b9:03:4e:
         cb:06:2b:3d:3b:ba:b8:43:47:a8:b1:cb:f6:36:73:1a:a5:b1:
         3b:f9:73:bd:43:2f:e0:d3:06:a2:dd:25:d1:a3:2c:cf:0b:d0:
         ea:fd:9d:27:07:79:22:c0:26:55:e1:33:e1:66:62:ef:fb:03:
         60:23:29:33:f5:f8:6b:07:c1:5a:8f:eb:39:f4:3b:1a:68:68:
         c5:41:3e:ba:13:06:e1:ce:22:0a:6c:44:2a:9b:48:68:0e:9a:
         59:50:2f:8c:be:93:1c:22:2d:d0:e9:13:d7:be:08:d4:53:aa:
         62:22:20:2b:8d:67:76:a8:86:1c:fe:53:c3:ac:73:39:1f:70:
         90:4a:72:38:ec:59:8e:25:49:a6:75:f7:95:b7:d3:db:e0:40:
         2b:4e:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:43:09 2026 by rpki-client