Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          P63v74vUshRjewp+aQ4LaxFPojsOmxSEcIxszHGEvrM=
Subject key identifier:   D8:39:DC:A8:22:11:C6:64:81:8F:D8:BA:5D:63:64:32:0A:CB:A4:FD
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       690655B6725AC0AB8E9E81CE573038BB40A39E91
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa
Signing time:             Sat 19 Sep 2026 06:36:20 +0000
ROA not before:           Sat 19 Sep 2026 06:31:20 +0000
ROA not after:            Sat 18 Sep 2027 06:36:20 +0000
asID:                     396356
IP address blocks:        75.102.48.0/24 maxlen: 24
                          205.234.163.0/24 maxlen: 24
                          205.234.184.0/24 maxlen: 24
                          205.234.185.0/24 maxlen: 24
                          205.234.186.0/24 maxlen: 24
                          205.234.187.0/24 maxlen: 24
                          205.234.222.0/24 maxlen: 24
                          205.234.223.0/24 maxlen: 24
                          205.234.224.0/24 maxlen: 24
                          205.234.225.0/24 maxlen: 24
                          216.246.0.0/24 maxlen: 24
                          216.246.1.0/24 maxlen: 24
                          216.246.2.0/24 maxlen: 24
                          216.246.24.0/24 maxlen: 24
                          216.246.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:06:55:b6:72:5a:c0:ab:8e:9e:81:ce:57:30:38:bb:40:a3:9e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 19 06:31:20 2026 GMT
            Not After : Sep 18 06:36:20 2027 GMT
        Subject: CN=D839DCA82211C664818FD8BA5D6364320ACBA4FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:ae:e3:7e:8f:8a:7b:b6:50:88:35:3e:2f:
                    d9:79:46:80:37:bf:05:de:06:a6:90:68:62:43:64:
                    59:1c:3c:02:ab:c8:75:f1:b4:7d:79:e7:64:9a:7c:
                    6a:b8:22:80:03:e9:87:26:99:b1:45:b0:5a:a6:fa:
                    cb:e0:0d:91:15:a6:91:91:be:a1:53:cc:26:bb:eb:
                    a5:22:d4:9a:fd:15:4a:87:8b:35:1b:3e:20:3f:f0:
                    b5:24:5f:63:52:9e:b6:38:c9:d4:e1:a9:ae:1b:45:
                    74:ca:61:9d:94:2b:7f:15:89:c1:b4:ff:6f:ea:7d:
                    9b:ba:60:95:ba:2b:b5:29:f1:1d:55:5b:e7:5b:20:
                    c6:60:54:5f:d7:cb:5f:6e:c5:11:21:86:22:dc:c7:
                    67:63:95:f7:34:29:a4:51:f4:51:79:ab:d8:ce:1c:
                    2d:14:cb:76:3f:5f:c6:b6:2f:93:c8:b8:99:c4:05:
                    8f:98:1c:44:89:8c:fc:a0:2e:2f:e7:31:3c:4d:d1:
                    93:2e:c1:4a:4a:24:4b:fa:f7:52:44:b6:08:ec:cb:
                    d0:ee:c2:69:05:23:4c:0d:65:0d:9f:e7:86:a6:b2:
                    a6:d3:13:a2:6d:c0:c3:1a:7c:ad:01:41:8d:20:40:
                    b8:19:bf:27:76:2b:13:5b:7d:67:75:88:37:86:1e:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:39:DC:A8:22:11:C6:64:81:8F:D8:BA:5D:63:64:32:0A:CB:A4:FD
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.48.0/24
                  205.234.163.0/24
                  205.234.184.0/22
                  205.234.222.0-205.234.225.255
                  216.246.0.0-216.246.2.255
                  216.246.24.0/24
                  216.246.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:53:ec:ce:a0:c8:fa:c6:95:e9:bf:1c:a4:24:c5:64:49:
         84:16:70:be:a2:ee:92:08:8b:bd:7f:96:9a:63:34:6e:45:ef:
         07:72:a7:20:b5:7c:a9:aa:43:ea:06:9a:37:90:79:3c:3d:8a:
         87:95:4f:bc:18:fa:7a:ec:92:d6:ab:38:63:d9:15:49:b2:43:
         7a:d9:5e:bc:0b:4f:9a:9f:48:6b:8c:7c:76:9a:0f:97:18:20:
         38:1c:c0:b4:78:79:3d:dd:52:ad:b2:90:62:bc:7b:9c:19:f2:
         ad:43:42:0f:1a:09:bd:c0:9d:47:a3:17:2f:fc:b2:56:80:d0:
         67:6f:a7:84:b4:42:4d:4f:c2:9a:a2:25:53:5b:6b:9f:08:8f:
         9d:92:80:4f:7f:15:55:73:6a:38:74:19:2c:2d:8e:db:6e:70:
         34:5f:80:44:08:0f:27:57:ca:e7:2f:75:39:a2:79:9b:c1:0e:
         b3:2a:5e:1f:e0:1e:e4:ec:3e:94:ec:bf:d7:b4:d5:d1:b4:d0:
         2c:57:98:69:7a:5a:c0:24:c2:90:5a:a1:0b:ab:7b:f5:9a:a4:
         59:ef:0f:72:42:61:14:69:c7:29:2b:28:a9:04:1a:58:ec:e3:
         bb:59:32:60:89:1d:a9:2a:d8:18:56:2b:a8:38:45:c2:57:1a:
         0d:a4:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:09 2026 by rpki-client