Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402215.roa
File:                     AS402215.roa (raw, json)
Hash identifier:          Iwc/fmyOwOhtf/sgNzfGrvIztpUrgFb2ZmqmEAmwgV0=
Subject key identifier:   81:F4:0B:1C:10:FE:60:DF:24:2D:C0:33:E6:C5:FE:62:0B:EE:A8:76
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       02BE210C41B17CCD506AB67D8DCC3C69DC631396
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402215.roa
Signing time:             Fri 24 Jul 2026 06:49:30 +0000
ROA not before:           Fri 24 Jul 2026 06:44:30 +0000
ROA not after:            Fri 23 Jul 2027 06:49:30 +0000
asID:                     402215
IP address blocks:        107.173.205.0/24 maxlen: 24
                          198.23.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:be:21:0c:41:b1:7c:cd:50:6a:b6:7d:8d:cc:3c:69:dc:63:13:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 24 06:44:30 2026 GMT
            Not After : Jul 23 06:49:30 2027 GMT
        Subject: CN=81F40B1C10FE60DF242DC033E6C5FE620BEEA876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:00:f8:a4:59:4a:53:e4:b5:7e:1e:b3:fe:
                    c1:d8:11:8a:ab:12:bc:4c:d4:4b:bb:d5:6d:24:0c:
                    3d:8b:04:61:bf:23:6d:f5:95:88:29:a3:bf:a7:6a:
                    65:42:91:0d:9a:22:09:ce:4b:4a:69:27:ac:a5:16:
                    2d:a4:8d:e0:72:73:67:d9:ea:f7:f3:e3:f6:22:09:
                    d7:1f:3f:bd:e9:c9:a5:a2:5e:76:a4:0b:61:cc:22:
                    f0:99:21:9f:3c:3b:38:f4:3b:25:46:67:91:4e:c5:
                    99:de:be:86:d7:76:a5:ed:19:2e:0a:b4:92:9b:b8:
                    8c:2a:5c:0c:aa:6b:5f:ab:b0:40:65:eb:a3:b8:b9:
                    dc:0f:aa:7b:40:e3:79:7e:9d:00:18:f1:89:0b:16:
                    11:ac:a5:a1:d3:a4:46:30:2a:b6:54:56:6e:b1:f6:
                    e3:37:7f:f8:b1:b6:18:b6:1d:bd:3a:45:f9:3c:0b:
                    d8:5e:a4:28:ba:ba:0e:ab:e2:18:a6:e3:3a:3b:72:
                    34:9d:bf:83:51:7c:e7:f2:c7:fd:59:a6:bd:bd:f2:
                    92:5c:41:a2:f0:44:1f:72:b9:e6:ad:d2:fe:9c:7e:
                    d4:53:4e:ff:4a:0a:44:78:15:de:2b:64:96:a3:c8:
                    23:c0:c9:a1:a1:30:2f:51:86:c3:bc:e7:5e:a1:75:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F4:0B:1C:10:FE:60:DF:24:2D:C0:33:E6:C5:FE:62:0B:EE:A8:76
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.205.0/24
                  198.23.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:70:21:e8:0b:8b:ec:30:e7:61:c1:17:3b:0b:34:01:ee:b2:
         c5:a5:9d:51:77:31:bc:84:08:ba:68:1c:f1:e0:0b:7d:45:2b:
         db:85:4f:ca:f7:be:09:75:df:a7:44:9e:9d:52:70:2d:7c:14:
         2c:8a:69:93:a2:d2:c8:8e:15:14:c8:1d:d4:94:fd:ce:ee:d1:
         ca:9e:50:c0:0a:3f:f9:bd:30:c1:63:5d:00:c0:bc:04:b4:78:
         16:55:9e:15:c4:1f:8e:07:9d:db:64:54:c0:fc:65:5c:fb:05:
         89:3e:44:19:8c:a2:18:c2:16:77:c0:07:55:f0:3d:b5:62:40:
         49:65:e1:9d:bc:52:d1:4e:82:c2:15:74:4f:73:fe:f4:95:f2:
         fa:6e:60:01:41:6f:09:20:77:b7:a1:0d:b6:df:c5:de:f2:65:
         3f:79:a0:2a:38:cc:6a:cd:99:0e:71:03:28:f0:4f:b9:b9:85:
         82:ff:4c:d9:1d:01:a1:bb:ef:54:4c:c5:45:1c:7e:7c:c6:c2:
         8e:1f:ab:d7:df:83:69:f0:a9:10:71:ae:33:c1:4e:b6:c2:90:
         50:35:b2:2b:32:4d:2e:a7:ec:66:06:84:25:68:8c:d1:32:58:
         92:5e:a2:cf:c5:5c:e8:27:d3:e7:5f:14:49:f7:27:21:3c:4a:
         22:a5:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:20 2026 by rpki-client