Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
File:                     AS401486.roa (raw, json)
Hash identifier:          X/g6O5uwPLI2NvgFZ9yWZ2y53GMMoEKrXhzrTBu5zFI=
Subject key identifier:   97:2A:F9:44:B8:50:20:60:17:C7:D9:DB:50:F5:2D:D4:5A:1C:E9:89
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       059F307EFE49B2ACA926FCBB34D1A95974353192
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
Signing time:             Fri 03 Apr 2026 04:30:25 +0000
ROA not before:           Fri 03 Apr 2026 04:25:25 +0000
ROA not after:            Fri 02 Apr 2027 04:30:25 +0000
asID:                     401486
IP address blocks:        74.50.10.0/24 maxlen: 24
                          74.50.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:30:7e:fe:49:b2:ac:a9:26:fc:bb:34:d1:a9:59:74:35:31:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  3 04:25:25 2026 GMT
            Not After : Apr  2 04:30:25 2027 GMT
        Subject: CN=972AF944B850206017C7D9DB50F52DD45A1CE989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:ab:95:31:05:4d:cd:bc:fc:f1:21:7d:a1:
                    6e:91:ec:ce:1d:c2:e6:70:6c:a1:c6:c1:e2:c5:5f:
                    7e:ef:8e:c0:67:f8:a0:25:01:74:fe:c2:24:85:dd:
                    0a:cd:84:3c:e1:bc:5a:d2:e0:8d:b3:94:90:d1:51:
                    12:c4:89:67:4c:94:7b:36:ae:67:e8:7d:16:a3:00:
                    f1:84:77:1e:9a:7f:23:d5:bd:b3:22:97:8e:56:76:
                    72:81:a6:b2:e5:85:cc:b0:5d:1d:7d:9f:6d:f6:bb:
                    13:21:eb:dc:9e:e8:e4:dd:ef:65:b2:a0:5e:48:02:
                    b7:fb:aa:e5:ed:48:3c:ca:29:08:67:ff:d6:1a:81:
                    fd:9a:64:94:b6:f4:28:3c:98:44:45:1d:bd:45:91:
                    20:6a:e4:92:a5:0a:f3:eb:ee:01:7a:c9:bd:3b:07:
                    4f:83:e3:a4:f1:69:78:fc:3d:ac:11:f3:16:f4:c1:
                    3b:51:94:fc:52:3b:f8:c9:41:3f:6f:1f:a3:54:91:
                    f2:76:c0:54:16:5b:c9:c3:a0:69:ab:20:69:dc:b0:
                    53:3e:d8:06:7f:4b:19:61:69:f0:0c:dc:14:40:e1:
                    a4:ce:7d:f5:78:dd:c4:70:8c:a2:c7:51:0b:48:47:
                    cd:60:79:59:e4:27:13:83:ca:31:80:96:c3:ef:b4:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:F9:44:B8:50:20:60:17:C7:D9:DB:50:F5:2D:D4:5A:1C:E9:89
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:ad:33:b2:7e:eb:bc:b8:d2:ab:14:1e:9e:79:70:7f:6c:ee:
         d4:b9:f6:45:d4:b3:bf:32:ea:79:a9:6a:aa:78:0d:dd:24:d2:
         23:64:9f:25:1d:d8:ff:1e:1a:c7:9f:75:7d:9a:16:dd:4b:2f:
         d2:84:a8:a6:6e:17:84:95:bf:15:a0:a0:55:d5:62:eb:62:65:
         d0:2e:51:5c:9b:38:94:45:a6:9b:c0:94:96:5e:1f:ad:a5:f0:
         1b:96:81:38:60:95:d0:d9:66:29:7d:65:bb:6a:bb:34:9a:9f:
         7c:3d:15:5b:b6:5b:cd:a6:94:f7:6e:21:ca:c5:e2:a4:38:2c:
         f9:e6:60:07:43:6f:b9:57:48:82:33:cd:26:98:a5:a9:35:fd:
         f8:7c:c9:fb:ca:86:2c:ad:dd:7c:65:68:8b:30:99:15:39:c3:
         9c:31:60:81:6b:b0:c9:43:95:55:fb:ba:f5:d7:e4:99:d0:98:
         ce:78:b9:38:20:e9:44:94:f9:a2:75:16:d6:47:c9:bd:89:81:
         a4:19:b1:a5:39:e8:df:35:0a:0b:3d:20:0b:09:ed:d3:66:eb:
         83:5c:06:f4:74:29:15:3e:e6:3c:50:ae:86:90:52:7e:ec:e8:
         f2:ad:66:1e:2d:5a:67:07:eb:bc:e2:a6:e8:05:60:af:db:cf:
         fe:ff:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:13:00 2026 by rpki-client