Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
File:                     AS401486.roa (raw, json)
Hash identifier:          XIb8ckquECu0btFIZJEPLf0zFWNBiSZnw9/B76GZmzk=
Subject key identifier:   F6:E8:3D:45:CC:B3:CC:EA:44:F0:87:9D:AE:D9:C1:C2:6A:6E:5E:4A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       31D4770DED7E38AE42B7FC8BDBD807CFA14B4FC6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa
Signing time:             Sun 08 Feb 2026 19:25:18 +0000
ROA not before:           Sun 08 Feb 2026 19:20:18 +0000
ROA not after:            Sun 07 Feb 2027 19:25:18 +0000
asID:                     401486
IP address blocks:        74.50.10.0/24 maxlen: 24
                          74.50.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d4:77:0d:ed:7e:38:ae:42:b7:fc:8b:db:d8:07:cf:a1:4b:4f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb  8 19:20:18 2026 GMT
            Not After : Feb  7 19:25:18 2027 GMT
        Subject: CN=F6E83D45CCB3CCEA44F0879DAED9C1C26A6E5E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:ae:dd:8b:b4:cd:62:ce:b6:d4:9a:e0:33:
                    a2:9c:10:4f:43:33:3b:37:72:91:44:27:8e:2c:c7:
                    00:75:81:00:14:b6:51:95:64:58:2e:fd:a9:82:14:
                    53:c9:98:63:c4:4e:3a:75:6a:b6:38:f7:6d:a2:51:
                    d2:f2:b5:16:68:27:07:27:a8:6c:55:07:e4:68:5e:
                    d8:33:83:c9:a9:5f:8f:fe:e7:de:e8:6e:61:9b:86:
                    67:2e:fa:bd:4a:75:97:8b:52:57:85:6d:be:b9:26:
                    fc:65:5a:9b:c9:ca:e7:44:c9:d8:35:c8:49:0d:28:
                    fa:68:1c:33:47:45:31:b9:0b:26:d0:74:0b:c4:c2:
                    41:91:b0:83:ba:97:51:94:a8:d6:78:37:f8:61:f9:
                    86:59:6d:c2:4a:59:31:e2:ed:a3:f1:4b:dc:82:4f:
                    12:6f:8e:9d:01:5c:ae:f8:46:2b:ae:da:8d:f8:66:
                    a2:8e:ad:0c:43:a3:37:d4:f0:2c:3e:93:17:ef:39:
                    6a:95:56:68:dd:83:81:49:32:60:71:c9:83:ba:ec:
                    3d:3c:5c:e6:b1:93:82:28:ae:67:1a:9f:e7:95:15:
                    e9:39:d0:82:69:2d:58:32:97:75:37:9f:20:7c:96:
                    e8:78:92:23:ab:7c:52:25:00:5b:68:c3:d8:fc:99:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E8:3D:45:CC:B3:CC:EA:44:F0:87:9D:AE:D9:C1:C2:6A:6E:5E:4A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:de:50:f0:9c:c9:37:a2:05:ca:cc:1e:68:32:9b:94:16:d6:
         d7:6c:b0:bc:c7:18:38:b5:cb:a2:d8:22:52:d2:99:01:d1:ba:
         5c:3d:b0:3c:2d:42:fa:38:23:d0:9d:ac:95:4d:50:b9:84:28:
         af:d2:7d:2d:95:90:11:53:28:1d:4f:ff:3b:8e:d1:ac:97:ba:
         69:69:c4:89:00:c9:ae:1f:42:54:11:7c:fa:0f:95:8b:42:bf:
         de:66:b5:49:9f:5e:e0:34:b1:68:85:04:ae:41:e5:ad:49:7a:
         ce:e0:f5:79:3d:88:69:73:3e:07:01:d5:77:9e:2b:e7:f7:4f:
         1b:c6:6e:83:ee:a9:01:27:4a:7a:85:f7:bb:42:57:78:b5:a0:
         42:c4:45:e7:89:d1:b8:91:0c:39:6b:fa:9b:ff:51:30:14:9b:
         cc:c1:af:11:78:ea:6e:7e:8d:e2:28:79:25:79:fc:58:13:0d:
         90:fb:a6:4e:6d:9f:c1:5a:96:bc:ac:b8:ac:f9:a7:44:f1:d0:
         49:78:e1:15:ab:a8:19:f2:63:c0:0e:da:a2:93:07:d0:4e:7b:
         a4:d3:f3:1c:8d:37:13:55:a4:d6:2c:d2:29:1c:57:2d:e1:cc:
         aa:68:f3:68:6b:f3:33:00:41:87:ce:55:32:b5:d0:06:01:66:
         7b:c7:60:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:28 2026 by rpki-client