Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402186.roa
File:                     AS402186.roa (raw, json)
Hash identifier:          84Yn+QLr/Ch544pfEw9V9R19ZZ/ZzWmIl8C/FuVSOao=
Subject key identifier:   14:64:E9:9F:F1:84:15:DC:A1:34:17:3C:77:B4:42:85:E8:5C:49:7A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4A2C2F686A15CFBAF9C391C4FF1652CA0AF3AA36
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402186.roa
Signing time:             Mon 02 Mar 2026 03:32:04 +0000
ROA not before:           Mon 02 Mar 2026 03:27:04 +0000
ROA not after:            Mon 01 Mar 2027 03:32:04 +0000
asID:                     402186
IP address blocks:        192.231.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2c:2f:68:6a:15:cf:ba:f9:c3:91:c4:ff:16:52:ca:0a:f3:aa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar  2 03:27:04 2026 GMT
            Not After : Mar  1 03:32:04 2027 GMT
        Subject: CN=1464E99FF18415DCA134173C77B44285E85C497A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:60:b9:f3:7f:bb:8e:3e:c8:d6:33:e3:94:
                    9d:d9:c6:31:23:53:c3:97:25:8c:e9:dc:49:ad:f5:
                    47:c6:7c:1f:e2:e9:82:10:91:05:bf:1c:46:13:9b:
                    9c:91:e4:47:79:6b:a9:75:82:35:1d:75:a0:ab:f1:
                    3e:52:45:25:08:9f:fd:8d:7f:29:e4:62:c0:ba:3e:
                    7b:a5:66:b0:72:4e:29:ee:42:b3:fc:02:e5:42:eb:
                    ae:a1:d1:52:bf:ef:19:ac:a5:56:99:31:15:f3:2c:
                    74:c1:13:1e:98:99:78:ae:bd:ec:98:b9:1c:c7:5f:
                    03:95:f8:53:42:cb:ae:d3:f0:6f:e5:18:27:9b:27:
                    00:7c:db:89:72:e7:d3:e8:8e:35:a7:78:ba:75:54:
                    e4:0a:1a:8a:a2:68:b3:87:4f:d7:d7:8b:8f:db:f9:
                    b5:98:1a:27:71:36:af:26:95:26:71:92:67:cc:97:
                    7d:8e:e5:a6:3f:0c:25:e4:e7:c4:79:64:e1:02:37:
                    c0:35:86:97:3a:3a:c7:ff:4d:62:6e:ba:47:51:6d:
                    ad:d6:0f:d0:c6:19:7a:1e:1e:17:f7:26:06:73:fc:
                    9a:16:84:e7:21:d8:43:a3:8b:a7:91:10:fa:c5:69:
                    98:99:89:25:bc:c2:75:c5:41:50:f2:72:23:b1:d0:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:E9:9F:F1:84:15:DC:A1:34:17:3C:77:B4:42:85:E8:5C:49:7A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:55:7e:f0:11:bd:4b:ca:e2:8b:97:79:a8:ed:bb:57:38:
         4e:5b:62:39:03:b0:d8:95:91:7f:a4:90:b6:4d:b9:e9:57:44:
         95:27:35:35:95:0b:d6:8a:eb:3b:fe:37:5f:dd:77:7a:2f:f8:
         dd:ed:e8:62:30:41:ca:36:9e:58:b2:fa:09:66:79:b1:1b:37:
         9c:5a:8c:46:e1:49:2c:44:65:ee:8c:58:63:c6:05:2a:ff:63:
         01:8a:8d:47:3d:60:93:d6:91:8a:2c:d6:82:aa:49:05:5b:0d:
         af:f1:e0:41:01:84:30:92:62:23:91:85:b3:de:8a:28:35:c7:
         32:12:27:d2:55:7a:32:03:dd:36:b4:a5:87:3a:5e:ab:91:82:
         31:d7:10:d1:8a:4e:60:37:2b:30:83:33:da:00:33:b6:12:4f:
         88:c4:73:a9:36:0c:85:cf:98:29:c8:33:00:2b:12:96:74:87:
         a1:76:72:d8:cb:74:99:f3:9d:cf:6f:97:7f:a8:2a:e0:b9:dd:
         28:8b:d3:b4:15:ee:32:92:c5:2f:af:f8:c0:58:cf:d5:1f:35:
         a3:18:e3:eb:e4:40:7e:33:90:69:ab:94:9a:8b:4e:6f:28:d6:
         27:73:c6:b8:72:1f:e0:3f:0d:10:f9:cb:fc:b4:cd:ab:41:27:
         d5:39:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:59:00 2026 by rpki-client