Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401443.roa
File:                     AS401443.roa (raw, json)
Hash identifier:          VkBV1pZSn+dJNPCgYckB0gBJeaSSyD+JCfgTCqvm9P4=
Subject key identifier:   DD:B5:CE:96:4C:FF:F4:32:8B:28:7D:0F:CC:09:DD:09:86:D0:F7:A5
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       78185963098F523F5EF6B30FBA807A57C33D16BB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401443.roa
Signing time:             Thu 08 Oct 2026 11:36:20 +0000
ROA not before:           Thu 08 Oct 2026 11:31:20 +0000
ROA not after:            Thu 07 Oct 2027 11:36:20 +0000
asID:                     401443
IP address blocks:        23.94.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:59:63:09:8f:52:3f:5e:f6:b3:0f:ba:80:7a:57:c3:3d:16:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  8 11:31:20 2026 GMT
            Not After : Oct  7 11:36:20 2027 GMT
        Subject: CN=DDB5CE964CFFF4328B287D0FCC09DD0986D0F7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:c6:37:5b:2e:66:30:4a:ca:81:d4:00:b2:
                    de:a9:71:31:30:47:82:9f:81:03:93:a7:65:1b:00:
                    4a:08:c4:11:ae:37:50:8f:93:98:b9:5a:fd:7f:c3:
                    ab:c1:56:3a:a0:fe:00:ab:8b:25:58:0a:5e:52:10:
                    4c:c6:f7:a1:f5:6b:77:02:f6:bb:49:83:af:68:1a:
                    80:91:10:b8:29:c2:88:2a:ae:ce:45:3e:7e:2e:9b:
                    59:72:fd:f2:aa:a6:f9:f8:36:f4:88:b3:c2:8d:86:
                    1c:44:4e:24:2d:30:30:3a:e9:32:bf:5d:c4:f5:64:
                    54:ef:a2:9b:bc:ac:9a:96:a8:6d:b4:86:c3:fa:89:
                    5a:a7:b2:38:e6:38:56:2c:05:9a:8e:ef:ff:f8:f0:
                    c1:61:60:dd:b1:4b:76:f9:f6:23:da:6d:e3:47:1e:
                    d3:e9:39:54:2d:d3:4c:b0:d9:4a:3c:54:30:e7:a2:
                    0c:8c:e0:bf:4d:b6:97:c2:7e:9a:18:60:a7:d5:8e:
                    1e:95:bd:4c:56:78:90:42:2d:a5:b1:9b:42:90:11:
                    ca:9b:00:15:39:43:dd:6e:2f:bf:a0:5a:2c:1e:14:
                    5e:9f:02:64:87:9a:b8:29:e7:44:1b:c0:b1:bc:e0:
                    c3:08:4b:1e:01:23:be:06:9d:ab:0b:e7:bb:b1:eb:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B5:CE:96:4C:FF:F4:32:8B:28:7D:0F:CC:09:DD:09:86:D0:F7:A5
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401443.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:82:63:c2:7b:43:0d:9a:68:6a:9a:41:03:55:17:27:07:06:
         19:01:dc:85:5f:0b:52:72:4c:02:ca:75:bc:55:96:b1:e2:fc:
         8c:12:33:5a:04:93:b8:a7:e8:56:f8:65:4d:d1:07:6b:2b:00:
         b7:93:20:52:76:24:31:ed:c8:24:89:92:fb:9a:35:49:ab:6a:
         3d:6f:6a:b4:01:fb:b9:f0:0d:00:55:64:51:9b:d3:d8:0c:ed:
         21:ab:d9:72:47:e3:38:c8:de:3a:3a:53:e3:0c:d0:e8:1a:59:
         7f:a2:fa:39:f3:b2:fe:a9:05:e6:17:da:09:86:a7:09:2e:a1:
         92:5b:70:b5:de:63:56:a1:b7:62:b9:cd:9c:9d:e1:7e:8d:d2:
         19:ab:04:1a:de:58:5b:13:51:99:b9:7f:a8:20:2a:22:53:69:
         e6:03:4b:44:9a:1e:5a:94:34:e9:78:28:0e:aa:43:ee:d9:94:
         8b:03:e1:02:a2:b8:1f:a9:a4:5b:35:d8:93:96:41:9d:f6:a1:
         17:8b:0a:58:21:7a:ae:4b:4e:f7:3c:90:0b:6c:bd:65:f7:36:
         13:66:85:d1:77:a4:da:f4:d6:e0:94:53:63:93:2b:05:ef:e8:
         ab:88:1c:58:f1:d2:06:3c:2c:98:99:cf:d6:e6:84:55:39:9a:
         c8:8f:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:53:50 2026 by rpki-client