Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          7su5O2aI8y3DHZ5HZFlsMYxcsBEUIVXScomZCMxzacg=
Subject key identifier:   46:9C:D2:44:0F:6E:8A:27:D1:C5:75:EC:5D:89:A4:94:04:CC:49:D7
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2EB9BDAAEB831F6ED629E4C576F84D0D90C887C9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
Signing time:             Fri 18 Sep 2026 09:55:55 +0000
ROA not before:           Fri 18 Sep 2026 09:50:55 +0000
ROA not after:            Fri 17 Sep 2027 09:55:55 +0000
asID:                     152179
IP address blocks:        192.227.250.0/24 maxlen: 24
                          192.228.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b9:bd:aa:eb:83:1f:6e:d6:29:e4:c5:76:f8:4d:0d:90:c8:87:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 18 09:50:55 2026 GMT
            Not After : Sep 17 09:55:55 2027 GMT
        Subject: CN=469CD2440F6E8A27D1C575EC5D89A49404CC49D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:35:9f:ab:50:00:af:6b:7e:38:a7:37:b2:
                    b1:98:55:5d:e9:8c:c8:8a:04:0e:6a:4d:29:24:a5:
                    68:86:c7:96:72:50:7e:9f:66:72:4f:69:5e:94:a6:
                    df:02:f8:4b:9c:65:f2:cd:5a:3f:68:af:14:5b:c2:
                    fe:4f:ef:0d:93:9f:5c:fe:2f:2b:83:a9:08:d2:b9:
                    d1:7b:0c:f3:99:89:60:0a:c9:5e:64:f8:cf:05:87:
                    24:c9:17:2e:74:d5:80:11:bf:12:f2:c6:41:11:9b:
                    4a:c2:db:e8:4c:3d:f5:a8:e5:7a:4c:71:b4:dd:b9:
                    3e:ba:8d:91:20:bb:03:f2:8e:cd:d7:fc:3d:aa:80:
                    e8:02:e6:12:0f:bd:1e:23:65:3a:79:05:12:0d:bc:
                    c7:2c:30:ae:66:2c:f0:dd:33:68:3c:20:97:ba:55:
                    0c:58:87:1b:4f:0e:89:c1:7d:74:c4:c7:6b:75:17:
                    89:97:96:ba:55:4a:90:ed:a6:a0:f8:ab:3b:43:d3:
                    c7:7b:23:6d:9d:c8:e5:72:5f:0e:65:4b:b7:21:cc:
                    a8:2c:fb:b2:9e:e0:06:9e:aa:86:9b:73:b5:7b:c8:
                    c9:31:3d:89:e1:ac:bc:ca:2a:b6:50:be:bc:4d:88:
                    7a:a5:05:27:c1:4a:d9:6f:af:44:0a:46:b4:ee:f3:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9C:D2:44:0F:6E:8A:27:D1:C5:75:EC:5D:89:A4:94:04:CC:49:D7
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.227.250.0/24
                  192.228.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:8d:f8:5e:55:23:69:35:7d:c2:da:cd:f2:4e:cf:bd:02:
         67:e8:3b:be:52:b8:5b:b0:1f:aa:2f:1d:53:7f:6b:21:bf:a1:
         26:51:83:75:55:05:cc:f3:c6:06:88:94:a1:89:a1:c3:61:02:
         c3:15:e9:6e:06:bb:7b:49:85:0b:7a:2c:ce:58:5b:fc:5a:81:
         d4:ee:09:fb:27:02:2b:be:18:6b:1d:eb:09:b1:de:98:2f:53:
         e8:9f:5e:99:58:5c:5c:c1:a9:1f:30:87:32:2e:3d:0b:1e:98:
         0b:d0:a6:86:68:dd:c4:a6:56:26:ee:a3:54:62:f3:62:a7:1c:
         c3:42:12:2b:d9:ad:9b:a5:53:27:2c:fd:90:67:a4:97:9c:ea:
         d2:33:ba:7c:ea:23:69:c5:68:e5:35:1b:6b:21:13:90:ca:bd:
         b0:5d:91:03:2d:58:e5:b4:46:bf:d8:df:12:0b:ea:04:a7:aa:
         41:e8:25:81:75:ea:07:65:39:47:0a:e1:0b:c3:5d:af:33:be:
         2a:fd:2a:f7:9a:14:c0:cd:d8:1a:d7:4f:9c:77:09:1f:26:b6:
         2e:09:80:b6:57:27:0d:d9:8a:3a:eb:aa:f4:20:3b:82:03:41:
         45:74:f7:e1:d3:51:f5:f3:a1:55:a3:11:39:c0:20:2e:32:86:
         d8:f1:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:19:53 2026 by rpki-client