Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS39944.roa
File:                     AS39944.roa (raw, json)
Hash identifier:          GfBpdLVjv92xt672nbkDLXEblsPjb2K7GCsN7xWHTn0=
Subject key identifier:   2F:DF:0A:4E:CF:81:5E:2C:75:17:10:60:35:C9:17:5E:7B:73:D8:9B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       340863898259EA54AB72AF8FFDDF17EE2F7111D6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS39944.roa
Signing time:             Fri 14 Aug 2026 15:36:20 +0000
ROA not before:           Fri 14 Aug 2026 15:31:20 +0000
ROA not after:            Fri 13 Aug 2027 15:36:20 +0000
asID:                     39944
IP address blocks:        64.50.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:08:63:89:82:59:ea:54:ab:72:af:8f:fd:df:17:ee:2f:71:11:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 14 15:31:20 2026 GMT
            Not After : Aug 13 15:36:20 2027 GMT
        Subject: CN=2FDF0A4ECF815E2C7517106035C9175E7B73D89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:35:92:d1:99:21:5c:2e:36:ca:72:c2:12:
                    05:e6:d2:3d:e3:5f:2e:b4:a8:ed:4c:f9:a7:58:4c:
                    d3:a8:54:b5:ab:53:30:41:3c:8a:63:8a:11:f7:fc:
                    16:4b:53:37:c5:39:e7:9f:a2:a8:42:6a:13:f9:b6:
                    d5:b1:34:dc:df:cd:ec:a3:54:23:93:01:8c:9a:8d:
                    f7:cc:1e:a4:fb:82:d4:a7:36:f4:31:da:91:44:36:
                    98:d5:75:8e:c2:07:dd:ef:f5:67:a4:89:50:25:e1:
                    b6:06:c1:55:aa:ab:de:cc:f2:7a:d0:77:80:1d:86:
                    87:86:bf:49:29:9a:6f:0d:31:20:27:05:19:66:d7:
                    6e:7f:82:34:b8:01:dc:71:93:31:d3:9d:2a:a4:28:
                    3b:f9:4b:e8:10:15:40:a0:9e:66:3b:51:68:e5:7e:
                    04:98:4a:1f:95:9a:a7:70:7a:a7:15:6d:b1:22:64:
                    8d:1d:01:e1:41:ab:c8:ae:b2:08:27:0a:ef:c8:be:
                    99:e8:52:92:e0:4b:90:09:c9:47:27:e9:6c:6c:3e:
                    56:61:f0:4b:2b:09:eb:af:c7:42:d6:22:1f:5f:65:
                    ea:34:1f:4e:de:d8:13:7e:d7:06:1b:3f:86:79:e1:
                    5b:5c:b9:f4:24:12:4d:57:9d:47:0a:a0:27:20:9e:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:0A:4E:CF:81:5E:2C:75:17:10:60:35:C9:17:5E:7B:73:D8:9B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS39944.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:5b:b2:12:df:b0:b8:c3:83:8f:d7:fa:aa:40:c4:92:76:
         6a:e9:26:09:1f:71:ab:84:58:f3:98:43:b9:68:e6:7c:d1:6a:
         43:a9:b3:4a:0a:8d:51:34:63:3c:e3:3a:f1:20:55:47:ba:37:
         1b:31:a9:2f:ab:23:12:ef:9d:99:a6:4c:7a:2a:0a:17:b4:8a:
         2e:b7:cf:74:8f:d7:c1:9f:70:79:36:1a:21:8a:38:db:77:99:
         bb:0f:5d:02:9d:59:83:aa:d4:92:48:c1:df:8a:fd:3f:85:c9:
         67:29:44:5c:b8:a3:5b:06:e1:98:ee:c3:39:7a:d7:f0:b2:c9:
         09:61:41:d9:a8:e4:90:39:28:9a:80:ba:2d:91:cc:7d:ac:b1:
         df:cd:8c:4c:6f:72:b2:54:19:79:99:d6:28:73:ef:97:47:52:
         13:c9:86:56:10:7d:78:2e:21:26:c1:21:46:aa:5b:77:f5:cd:
         32:3b:c0:b0:52:9d:c7:f1:d5:f6:26:98:9f:75:57:04:80:18:
         69:f6:42:40:2b:96:e5:78:44:5b:b4:97:e1:73:9c:a2:c6:0e:
         70:65:bb:50:0c:5d:45:16:cf:be:da:e4:76:1f:b3:d7:b7:48:
         5c:8c:d8:19:91:77:a3:0e:f5:fd:66:f1:46:cb:3b:6e:5d:0c:
         dc:a8:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:14:14 2026 by rpki-client