Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS46242.roa
File:                     AS46242.roa (raw, json)
Hash identifier:          xBy0PTP/MRKSqFSch1vjPVLxXyogAJJsf+iOL8m6etM=
Subject key identifier:   70:EF:1F:9B:30:E2:AC:8E:5D:BB:08:20:AF:9D:5C:FE:75:BC:5B:22
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       0217EB2CC9651C05FA0157918A0FE339299EFE0B
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS46242.roa
Signing time:             Fri 18 Sep 2026 19:36:20 +0000
ROA not before:           Fri 18 Sep 2026 19:31:20 +0000
ROA not after:            Fri 17 Sep 2027 19:36:20 +0000
asID:                     46242
IP address blocks:        205.234.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:17:eb:2c:c9:65:1c:05:fa:01:57:91:8a:0f:e3:39:29:9e:fe:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 18 19:31:20 2026 GMT
            Not After : Sep 17 19:36:20 2027 GMT
        Subject: CN=70EF1F9B30E2AC8E5DBB0820AF9D5CFE75BC5B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:5d:15:2e:a8:62:11:00:03:1b:53:34:b4:
                    2d:2a:4c:9b:8a:fe:82:ec:f8:1b:77:99:7d:11:fd:
                    13:b6:68:56:5b:53:fc:9a:13:8c:fa:c9:24:5c:e6:
                    4c:85:d3:15:ff:74:3d:d9:ab:44:10:39:59:7f:2a:
                    6a:16:42:69:d5:65:8b:3c:9d:47:82:64:de:06:70:
                    70:22:0f:96:3e:46:d1:89:17:1b:72:04:d6:2a:0e:
                    35:27:a4:d2:57:25:6d:e9:0a:d7:2c:67:49:6d:1d:
                    9d:ef:5b:a7:8b:f8:7f:91:c6:b5:e3:55:d9:14:42:
                    7c:0f:5b:59:3c:d9:e6:1d:eb:17:22:60:c0:3c:22:
                    5f:cf:0e:9d:d9:da:f6:d5:e1:77:e3:0a:d3:ad:ca:
                    c1:bf:87:ec:ec:57:ac:ea:1a:13:dd:66:a5:26:4f:
                    1b:65:d2:36:5f:63:e5:1c:ad:ec:e0:c6:4a:eb:c9:
                    2a:f4:30:d6:90:96:f4:24:f1:87:60:03:ea:4e:8b:
                    95:8f:23:05:fd:66:54:cf:15:83:07:35:46:18:cb:
                    c8:f2:39:84:d4:03:6d:e2:f2:6a:90:0e:05:9f:91:
                    7e:2d:c1:3a:85:26:40:01:b1:2d:41:3b:32:6b:41:
                    7f:24:30:3e:9b:b0:9e:89:22:6a:95:a7:26:a7:7e:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EF:1F:9B:30:E2:AC:8E:5D:BB:08:20:AF:9D:5C:FE:75:BC:5B:22
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS46242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:e1:a0:e2:62:d3:c2:2d:45:4c:e3:ba:89:16:28:ee:54:
         80:5e:1b:53:73:61:b8:6e:c4:1e:c2:f2:63:84:28:6d:f9:14:
         3e:d3:9e:93:46:42:31:b6:dd:db:f3:72:66:91:b8:40:37:c5:
         a9:3f:c1:cc:a5:ba:4e:15:3e:69:c7:57:87:c0:0c:d4:1c:13:
         f5:9f:c2:19:0a:39:58:3a:8e:22:33:5f:50:0f:f4:e1:71:0b:
         52:a9:83:31:3a:ec:56:aa:e4:11:65:5d:e3:c1:76:b4:93:b7:
         6a:13:77:5e:62:01:07:ac:01:ab:b8:f8:90:c1:71:c2:9c:63:
         5d:e5:aa:24:72:f6:50:c1:af:d8:a8:46:ea:5b:62:52:99:c3:
         56:70:dd:d5:a2:4b:73:f7:4d:a2:6a:d1:61:c5:2f:8c:66:49:
         35:9d:32:48:70:aa:24:bb:99:fa:89:79:36:5b:07:4b:83:e2:
         ea:f3:1c:e0:53:37:af:59:d8:98:f9:eb:ff:e3:57:a3:82:d1:
         24:bf:17:da:0a:1c:74:16:4d:11:6d:85:1b:9f:54:ff:e6:61:
         12:03:87:36:5d:69:c2:10:40:83:8c:42:fe:ae:d0:f0:8c:6a:
         84:22:a3:37:54:95:8a:1d:7c:e3:4b:71:9e:1b:ef:97:3a:31:
         1d:4d:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:06 2026 by rpki-client