Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa
File:                     AS48266.roa (raw, json)
Hash identifier:          3EEtjps2cOh1XDidZY3TaiXkLyCN57zzaSVcMTJSVOo=
Subject key identifier:   96:B8:94:DD:7F:C8:5E:62:37:43:1B:21:6B:93:F5:2C:A5:B6:61:C7
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       736669B0410F0B045ED0990018124EF90E9A60F0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa
Signing time:             Wed 04 Nov 2026 20:59:12 +0000
ROA not before:           Wed 04 Nov 2026 20:54:12 +0000
ROA not after:            Wed 03 Nov 2027 20:59:12 +0000
asID:                     48266
IP address blocks:        144.48.80.0/24 maxlen: 24
                          2a06:a005:90::/44 maxlen: 48
                          2a06:a005:a0::/44 maxlen: 48
                          2a06:a005:350::/44 maxlen: 48
                          2a06:a005:870::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:69:b0:41:0f:0b:04:5e:d0:99:00:18:12:4e:f9:0e:9a:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov  4 20:54:12 2026 GMT
            Not After : Nov  3 20:59:12 2027 GMT
        Subject: CN=96B894DD7FC85E6237431B216B93F52CA5B661C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:71:c5:3a:c9:7c:00:8c:d4:96:bf:cb:8f:
                    24:18:5d:7a:6c:ad:c4:4b:f9:b9:dc:84:f4:ea:65:
                    d4:58:da:ef:e0:13:70:0f:ba:4e:de:f4:26:0b:37:
                    28:ae:00:d0:d7:b9:74:28:b4:e6:7b:73:d2:85:25:
                    7e:ea:82:2a:c5:ae:c1:3c:ee:3c:4a:ec:80:38:cd:
                    66:38:c4:9f:a3:7b:65:e6:f9:01:d6:aa:8e:1f:92:
                    db:b6:a5:0d:3d:bb:f9:5b:e1:7b:9f:ae:1e:3d:eb:
                    de:03:32:37:f0:d9:10:1f:bc:4e:68:f6:bc:85:d3:
                    e2:63:39:57:6c:69:8a:ae:8e:c8:20:d6:9c:9e:39:
                    d1:c2:80:b1:a5:c3:ce:cf:ec:44:83:f4:78:9e:9a:
                    a3:cd:f3:8d:51:f4:50:8f:83:2e:ee:dd:82:c3:e1:
                    1b:6e:1f:f8:e5:61:7a:a5:00:9a:03:82:39:30:97:
                    7e:fe:6f:85:0c:c1:44:43:04:e1:74:4a:00:6f:9a:
                    dc:24:eb:06:11:6c:a9:4b:89:d5:a1:64:1c:e8:50:
                    9e:8d:12:84:e7:a7:c9:92:1f:a1:60:ad:73:28:ea:
                    af:6b:14:09:79:16:39:69:6e:12:02:51:a2:b6:ca:
                    9f:2a:78:4e:1f:60:1f:6b:5c:d0:94:bf:cf:56:7a:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B8:94:DD:7F:C8:5E:62:37:43:1B:21:6B:93:F5:2C:A5:B6:61:C7
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.80.0/24
                IPv6:
                  2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:350::/44
                  2a06:a005:870::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:b9:94:be:29:a1:a5:cc:f4:15:19:bd:08:38:b5:aa:9f:68:
         cd:30:bd:b5:45:51:38:47:96:2b:e9:dc:c8:68:d2:c7:98:92:
         48:95:0b:ab:c3:0e:75:5b:a7:15:0c:08:25:6d:00:f6:5e:1d:
         74:dd:c6:5e:8e:78:28:ed:a3:96:b2:c2:f5:84:5e:d3:3b:3d:
         85:b6:3d:de:74:b9:8f:6c:8e:be:e4:2a:e7:a6:4a:7e:9f:d2:
         6f:2c:af:78:9c:34:ab:8d:de:7d:7a:c7:0a:e7:bd:e3:fe:2b:
         60:ec:ab:26:f7:54:cb:31:e1:ba:66:bb:bd:94:84:4b:dc:94:
         48:a2:4e:bd:39:b0:2b:cb:f0:3c:f6:0f:a9:61:b6:70:3e:17:
         59:ce:b3:78:e0:a3:c7:cc:13:41:27:95:9d:30:fe:82:93:17:
         e4:e3:a9:96:e5:70:b4:10:b7:31:eb:6e:86:6e:9e:57:cd:b5:
         96:51:8d:0c:67:44:82:d9:45:26:7b:9b:b7:83:7a:31:6c:62:
         ac:1d:21:2a:f9:35:98:60:dc:23:b4:6d:99:d7:16:db:25:b6:
         29:f0:a6:56:ba:e5:18:b0:93:91:36:87:54:9e:cc:fb:f5:b8:
         71:ec:07:fe:16:42:f0:fc:69:28:8f:ff:b0:f7:aa:4c:7e:c5:
         e6:05:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:09:30 2026 by rpki-client