Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397373.roa
File:                     AS397373.roa (raw, json)
Hash identifier:          f7kf+TjagwQnrLu4lw9JgcwpU4i6r1J5MJ7dYfMU7KU=
Subject key identifier:   8D:13:15:58:D9:CF:4D:E4:2D:FE:0F:D1:7F:C4:7C:DD:C8:FA:85:71
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       55A65C002355CEC931F82BDCC4966E65D46D1BA8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397373.roa
Signing time:             Fri 10 Apr 2026 13:35:56 +0000
ROA not before:           Fri 10 Apr 2026 13:30:56 +0000
ROA not after:            Fri 09 Apr 2027 13:35:56 +0000
asID:                     397373
IP address blocks:        198.46.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 16:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a6:5c:00:23:55:ce:c9:31:f8:2b:dc:c4:96:6e:65:d4:6d:1b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 10 13:30:56 2026 GMT
            Not After : Apr  9 13:35:56 2027 GMT
        Subject: CN=8D131558D9CF4DE42DFE0FD17FC47CDDC8FA8571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:34:5c:5c:ad:6f:0e:c0:b3:e0:12:66:7d:
                    a9:b9:cc:0c:35:77:ff:03:26:bc:21:c3:b5:48:c2:
                    25:fc:dc:a9:04:02:fc:1f:42:4c:8a:3e:ae:06:da:
                    d7:8b:1f:7c:1a:2d:cd:61:3e:8c:9f:9b:19:aa:b5:
                    b0:a1:3f:e8:d6:ec:3c:79:3b:c8:64:5a:ca:2d:4d:
                    91:42:2a:69:5d:05:0a:6d:c0:d0:25:05:0f:f6:46:
                    f9:01:38:59:04:87:5b:b8:d6:16:3f:c9:7f:17:ac:
                    20:fd:22:4f:31:10:cd:ef:ec:ec:b8:aa:e5:ad:9c:
                    e2:b1:61:af:46:11:ae:31:dc:98:41:a8:91:34:76:
                    d2:e8:71:ca:5e:64:8f:35:4f:d9:db:99:bd:a8:10:
                    2a:3e:26:ea:e7:d2:ee:53:e4:c3:22:9d:1f:6b:86:
                    a3:97:25:a0:03:85:c7:3e:3c:aa:5d:b4:94:4b:4b:
                    6c:a8:7e:ee:f5:e1:53:35:52:98:0c:96:6e:6f:5d:
                    2e:40:91:d1:2d:02:93:e7:6a:ff:28:3f:8d:12:d5:
                    7f:65:08:40:34:bd:ba:a5:25:da:a7:8c:60:7a:9a:
                    22:b5:0a:87:e8:5a:2c:e4:1b:61:70:d3:58:b2:e9:
                    af:98:c8:8b:b7:08:1f:35:fa:f6:83:dd:39:6d:47:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:15:58:D9:CF:4D:E4:2D:FE:0F:D1:7F:C4:7C:DD:C8:FA:85:71
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.46.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:87:1a:37:2d:0e:52:17:c1:a8:12:ab:14:0d:e2:cd:4d:
         ce:e7:8c:41:3f:64:1c:32:be:d7:94:ff:2d:bb:89:a8:8c:f1:
         29:88:7f:7a:15:98:b9:e7:41:99:16:98:fd:fe:a8:2e:bf:14:
         ef:7b:16:1b:a3:28:04:7e:a7:2a:e2:1e:39:20:bb:72:5f:2a:
         7c:d6:65:32:7e:d7:e9:f1:a4:9e:76:58:5c:7c:09:54:cc:d9:
         a7:b3:63:7c:76:18:e7:b3:8a:90:28:24:07:3b:e2:db:62:24:
         5d:d1:10:e7:1c:6e:b2:5f:c1:16:e1:98:c7:df:b7:26:00:55:
         13:2b:cb:a7:8d:ca:0c:22:df:02:94:cb:8f:5e:ae:73:0a:4c:
         16:8f:30:47:09:2e:ed:43:98:ea:f8:4d:f8:1c:e2:42:0b:d1:
         1b:79:bd:8d:ae:dd:4a:ee:c8:4e:26:d0:eb:08:56:03:f6:6f:
         54:db:81:68:08:b8:f0:5b:b9:9c:a5:94:9b:69:10:71:b2:c7:
         f5:95:9e:78:e5:15:67:e5:48:2c:6e:3d:75:64:db:8d:60:80:
         09:c9:ba:a2:44:e0:87:14:34:ca:35:88:71:fa:96:6e:eb:2d:
         d1:6c:58:17:78:62:7e:c2:a4:46:91:78:87:67:c0:da:12:63:
         ab:0b:fe:72
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUVaZcACNVzskx+CvcxJZuZdRtG6gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDEwMTMzMDU2WhcNMjcwNDA5MTMzNTU2
WjAzMTEwLwYDVQQDEyg4RDEzMTU1OEQ5Q0Y0REU0MkRGRTBGRDE3RkM0N0NEREM4
RkE4NTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGg0XFytbw7A
s+ASZn2pucwMNXf/Aya8IcO1SMIl/NypBAL8H0JMij6uBtrXix98Gi3NYT6Mn5sZ
qrWwoT/o1uw8eTvIZFrKLU2RQippXQUKbcDQJQUP9kb5AThZBIdbuNYWP8l/F6wg
/SJPMRDN7+zsuKrlrZzisWGvRhGuMdyYQaiRNHbS6HHKXmSPNU/Z25m9qBAqPibq
59LuU+TDIp0fa4ajlyWgA4XHPjyqXbSUS0tsqH7u9eFTNVKYDJZub10uQJHRLQKT
52r/KD+NEtV/ZQhANL26pSXap4xgepoitQqH6Fos5BthcNNYsumvmMiLtwgfNfr2
g905bUey0wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFI0TFVjZz03kLf4P0X/EfN3I
+oVxMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzM5NzM3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMYu8zANBgkqhkiG9w0BAQsFAAOC
AQEAFl+HGjctDlIXwagSqxQN4s1NzueMQT9kHDK+15T/LbuJqIzxKYh/ehWYuedB
mRaY/f6oLr8U73sWG6MoBH6nKuIeOSC7cl8qfNZlMn7X6fGknnZYXHwJVMzZp7Nj
fHYY57OKkCgkBzvi22IkXdEQ5xxusl/BFuGYx9+3JgBVEyvLp43KDCLfApTLj16u
cwpMFo8wRwku7UOY6vhN+BziQgvRG3m9ja7dSu7ITibQ6whWA/ZvVNuBaAi48Fu5
nKWUm2kQcbLH9ZWeeOUVZ+VILG49dWTbjWCACcm6okTghxQ0yjWIcfqWbust0WxY
F3hifsKkRpF4h2fA2hJjqwv+cg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:24:16 2026 by rpki-client