Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401430.roa
File:                     AS401430.roa (raw, json)
Hash identifier:          BmvE+yd7vUWldGecJZy4jdAAUqxfHnswzOxyi/e6zOs=
Subject key identifier:   B3:35:8D:E1:66:49:42:2E:41:45:91:26:D7:F6:22:A6:37:C8:60:45
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       143C7FE40C98C3FA9C8CA7428BD712857FA1F69F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401430.roa
Signing time:             Sat 14 Jun 2025 19:34:09 +0000
ROA not before:           Sat 14 Jun 2025 19:29:09 +0000
ROA not after:            Sat 13 Jun 2026 19:34:09 +0000
asID:                     401430
IP address blocks:        64.50.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 04:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3c:7f:e4:0c:98:c3:fa:9c:8c:a7:42:8b:d7:12:85:7f:a1:f6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 14 19:29:09 2025 GMT
            Not After : Jun 13 19:34:09 2026 GMT
        Subject: CN=B3358DE16649422E41459126D7F622A637C86045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:02:bf:ec:19:c7:be:49:1a:3d:fa:80:30:
                    1d:cb:67:ee:b7:53:eb:cf:64:cf:78:2e:93:e4:01:
                    61:d6:cd:a9:7a:e8:63:ad:9c:0f:02:1b:72:20:50:
                    71:21:40:fe:52:0b:a3:74:32:ef:36:27:d2:85:ad:
                    93:73:0e:2e:d2:68:af:cc:4e:90:52:f3:94:db:7a:
                    4c:29:ba:10:a6:5d:c4:ac:13:fb:0f:82:09:73:4a:
                    bb:8b:cf:1f:84:ba:5a:ba:19:8c:46:5f:f2:42:a6:
                    2c:4d:81:91:dc:c9:f5:ad:1d:3d:7f:55:91:b3:be:
                    b6:aa:8f:c4:8b:94:96:ea:d8:cc:fc:56:ac:4b:ab:
                    8c:d8:bb:85:7c:5e:a4:68:85:79:17:07:7c:dc:e4:
                    c8:4e:4d:36:48:bf:1d:d9:50:63:8f:a7:ba:9d:50:
                    8d:8b:5d:58:43:6d:65:da:c1:97:60:b1:cd:ab:25:
                    25:ff:d1:7b:3a:e9:70:b0:38:2f:f2:9f:ca:b4:9d:
                    4a:c6:99:7c:a3:ea:b3:79:91:02:57:b7:42:b8:fd:
                    a1:af:54:51:dd:2a:03:75:94:f9:31:ba:f4:ed:68:
                    23:67:b7:72:95:bb:d9:e0:2e:5a:ee:25:ce:8d:29:
                    80:52:da:2b:5f:db:a5:d5:c1:69:e5:22:1b:38:f9:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:35:8D:E1:66:49:42:2E:41:45:91:26:D7:F6:22:A6:37:C8:60:45
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:04:73:4e:d1:83:2d:70:b2:de:e9:da:1c:29:23:2e:75:
         6d:b4:06:75:e5:8a:c3:25:a3:83:d1:d5:84:e9:ba:e9:23:c8:
         e5:c7:42:b0:5a:f6:25:70:48:42:ea:6f:e0:61:1a:65:b0:ec:
         1b:f0:3c:fd:7f:ed:4c:93:f3:91:12:03:2a:e8:89:3d:b8:40:
         63:61:1e:30:d6:9a:04:e4:3b:e2:f4:aa:75:bf:e3:94:5b:cf:
         38:5e:e0:82:c6:5c:44:e4:3b:54:8e:93:19:17:a3:ca:55:76:
         47:ea:64:58:ba:66:22:5b:32:59:e9:e4:3a:e6:54:0b:65:c5:
         7e:c9:87:f5:5b:73:3a:34:8c:ab:e3:91:89:e4:16:da:d9:d7:
         95:af:03:06:9b:96:e8:90:d9:02:d6:f7:de:80:65:ea:0b:ad:
         11:f1:23:d7:60:3e:6f:62:2b:63:47:d3:43:44:11:e6:25:7a:
         d8:21:5a:4e:b8:6f:15:18:03:a0:98:94:79:e2:46:b5:0c:31:
         0c:0a:08:ed:66:4c:8f:5c:06:bc:0f:8a:1e:93:a3:a6:76:f8:
         47:32:a5:f5:5b:7b:18:b0:a7:8c:a1:e2:11:dd:b6:71:77:cf:
         07:38:fc:99:15:22:0e:48:fe:67:60:2a:6c:26:f9:c2:e7:15:
         98:1c:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:17:40 2025 by rpki-client