Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46432.roa
File:                     AS46432.roa (raw, json)
Hash identifier:          2bX8neW6RjBJgw5i86gG7IdlR72mIRaTDez4eUlneNw=
Subject key identifier:   CE:88:05:D6:8B:57:85:04:41:1E:35:3D:E3:81:A2:A4:2B:DB:08:C7
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       61F44185B665E9D0BEFE5116319275FCED46A355
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46432.roa
Signing time:             Tue 09 Jun 2026 21:36:05 +0000
ROA not before:           Tue 09 Jun 2026 21:31:05 +0000
ROA not after:            Tue 08 Jun 2027 21:36:05 +0000
asID:                     46432
IP address blocks:        67.210.111.0/24 maxlen: 24
                          192.228.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f4:41:85:b6:65:e9:d0:be:fe:51:16:31:92:75:fc:ed:46:a3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  9 21:31:05 2026 GMT
            Not After : Jun  8 21:36:05 2027 GMT
        Subject: CN=CE8805D68B578504411E353DE381A2A42BDB08C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:af:b3:9d:1f:51:b5:a4:7d:55:db:bb:a9:
                    b5:50:b2:8e:a6:d8:64:fb:ad:e2:4c:63:3b:cf:97:
                    45:a1:2d:e4:44:bc:10:95:a4:dd:e3:24:9c:52:5b:
                    fb:e0:c6:05:8a:a4:71:27:50:8e:2f:83:0c:66:90:
                    09:e3:da:ac:d3:6b:52:dd:16:7d:d1:be:51:2e:5e:
                    56:0c:75:53:7a:30:c8:ed:87:49:f6:73:06:1d:b4:
                    78:f6:ee:de:71:ca:7e:1d:95:52:c8:51:ba:f0:dc:
                    a4:95:4a:7a:64:d7:11:fc:26:41:35:e0:ae:15:94:
                    23:b2:ed:e0:22:6f:ee:b2:2d:18:8b:9f:b4:cd:29:
                    8c:3d:20:72:5e:9a:16:00:a7:9b:6f:89:fc:fd:16:
                    8e:e2:90:fc:d1:2f:95:31:87:51:9f:05:2b:08:ca:
                    5b:d7:e3:23:49:01:53:27:61:c7:1a:c8:4b:da:47:
                    22:c7:12:88:e7:ff:c8:6b:17:e3:91:a0:a3:a7:2f:
                    4e:d4:60:15:e5:2c:2d:5c:cb:1f:e6:3b:ee:d6:aa:
                    fb:39:d2:30:7e:b3:a6:93:bc:db:3f:13:58:f3:f3:
                    39:f5:c5:73:ac:3c:4c:d4:28:43:3b:0a:b3:5e:b4:
                    f7:c9:3b:e6:2b:e2:47:5b:04:20:3b:31:0b:64:5d:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:88:05:D6:8B:57:85:04:41:1E:35:3D:E3:81:A2:A4:2B:DB:08:C7
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.111.0/24
                  192.228.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f8:4c:d9:57:22:ad:f2:c9:eb:ea:2c:f8:53:c9:f2:1e:c8:
         b4:61:d9:68:9b:43:c9:1a:30:74:91:60:d3:07:91:49:c7:a0:
         b7:f1:5a:a7:5e:54:27:1b:b4:50:0e:b5:a0:72:e1:22:0a:32:
         4f:f0:e4:6d:19:3b:20:f0:5a:40:13:cc:b2:76:bd:21:bd:9a:
         ef:8b:5b:40:7d:2d:08:d0:32:17:83:72:f3:99:78:b3:e0:ad:
         e1:1a:7f:b8:c8:b8:88:71:a2:4d:eb:af:5a:cb:57:cd:b1:67:
         35:36:68:bb:28:74:24:8e:ba:5a:c6:18:7f:ee:0f:10:0a:5e:
         93:e6:97:29:9b:ab:62:30:1b:2e:c1:12:a5:5e:bc:cd:ec:b9:
         2b:d0:c4:4d:f1:3c:1f:4c:1d:51:87:17:7b:26:e8:36:f1:24:
         fb:d7:df:25:dd:a3:46:8f:ca:ae:2f:11:f3:72:76:8d:65:b6:
         73:3b:32:2e:46:d6:f9:90:21:2a:e8:00:57:26:29:18:f2:01:
         55:10:7d:eb:9d:bb:a3:bc:74:a6:fd:b8:d4:84:2b:d4:3f:b9:
         ab:f9:7d:cb:d8:ca:7a:d8:f4:42:bb:46:3e:f2:44:e0:39:4a:
         49:af:7f:60:51:20:38:77:2b:86:bb:75:46:d6:73:86:08:a1:
         5e:64:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:12:20 2026 by rpki-client