Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          r7qr5gJuZLE2HQaID3j3oQdIPIvWdlSJ0ds6E0GjTes=
Subject key identifier:   26:A1:3B:3C:96:EA:A5:07:27:D7:21:06:79:5F:B8:75:C5:CE:B9:FA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5CF1CCDCDB85D16E208A6E5C3BDF2F06BAE78B46
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS42831.roa
Signing time:             Sat 07 Feb 2026 16:50:47 +0000
ROA not before:           Sat 07 Feb 2026 16:45:47 +0000
ROA not after:            Sat 06 Feb 2027 16:50:47 +0000
asID:                     42831
IP address blocks:        192.228.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f1:cc:dc:db:85:d1:6e:20:8a:6e:5c:3b:df:2f:06:ba:e7:8b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb  7 16:45:47 2026 GMT
            Not After : Feb  6 16:50:47 2027 GMT
        Subject: CN=26A13B3C96EAA50727D72106795FB875C5CEB9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:63:c8:d5:9b:05:af:09:3b:2d:6a:b2:4e:
                    d0:97:16:e5:7a:23:bc:8d:8c:01:5e:1d:98:3a:cd:
                    9f:e0:8c:a2:c6:b1:d6:94:aa:2e:a7:fc:7e:ac:15:
                    c8:28:26:b0:99:e0:e3:8c:ff:2a:1b:4c:4e:db:12:
                    93:8b:ad:f5:4f:42:4f:23:e0:04:87:08:8c:ee:13:
                    22:58:cf:03:04:2b:35:f6:b1:31:1b:b7:f9:0b:0e:
                    fe:c2:51:80:51:3a:b0:45:8a:97:bb:8b:66:da:4a:
                    8d:89:57:92:82:e7:b7:59:e6:ff:fd:e5:fd:48:e7:
                    97:06:c4:e3:a8:37:ed:86:d2:f0:f0:80:09:77:8d:
                    62:85:67:89:29:bd:48:24:b3:7f:08:0c:ba:74:63:
                    3c:60:ac:36:90:2b:74:c0:72:fe:a9:52:a5:77:e9:
                    11:67:05:2c:08:14:af:1a:b5:ed:74:42:32:0f:c4:
                    02:37:8a:07:6b:eb:4c:19:80:4c:76:a1:06:0f:18:
                    55:56:e6:4c:7e:7c:2d:4c:9a:d3:53:71:dc:93:a7:
                    8f:c4:09:6c:27:bf:81:2e:73:a9:93:03:53:27:97:
                    be:da:26:53:15:90:55:02:9d:96:81:13:d8:3e:bf:
                    59:9f:e6:83:ff:d7:ee:d8:44:d8:cb:5f:4e:9d:51:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A1:3B:3C:96:EA:A5:07:27:D7:21:06:79:5F:B8:75:C5:CE:B9:FA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:6e:aa:d6:45:86:7a:ef:8e:46:3f:bd:08:b8:df:61:f6:
         51:5d:b7:45:e3:bd:23:13:86:72:16:01:60:f7:2e:0f:09:5d:
         91:49:9c:4e:c7:df:b9:a7:f0:3f:d0:13:45:63:5e:7a:60:15:
         4a:b5:dc:71:cc:1a:d3:cd:61:c1:1e:c7:e0:93:1a:0c:55:7a:
         8c:41:ec:3c:6c:68:e4:c2:c5:56:fa:17:66:9f:7c:73:f3:86:
         ec:f5:6b:c8:fd:46:67:b0:e8:69:12:cf:08:5b:a4:9d:40:81:
         5f:80:50:d8:e0:09:45:f8:0d:5d:59:62:bc:64:00:62:1f:ce:
         3e:56:28:cf:9a:6b:0b:bc:0a:40:56:26:86:87:3a:4f:ac:d4:
         c9:ea:06:c6:b4:fd:11:17:af:fe:17:1c:43:bc:75:6d:7d:73:
         92:ae:86:8f:0c:b0:02:11:b8:40:02:ee:f3:5f:95:60:bc:d6:
         9c:43:e0:a8:0b:ec:12:c3:37:a9:35:f0:c5:85:6b:d4:77:53:
         57:a3:3e:dc:2b:5d:a3:15:de:78:f6:06:6e:37:87:65:24:83:
         ca:01:4d:71:5a:8e:58:7a:28:28:50:26:17:49:a7:1e:91:d0:
         0d:46:e3:15:b0:35:1a:78:87:18:1a:1c:fb:8a:4c:02:4e:ef:
         3a:d2:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:19 2026 by rpki-client