Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa
File:                     AS218955.roa (raw, json)
Hash identifier:          tVTOUauSoO5QRUYmIRtm6Z6BHyrL3eFmItlkAYSBuHk=
Subject key identifier:   88:06:E5:F9:A8:29:AA:C6:19:C1:01:58:63:32:9D:01:26:16:1F:7F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       726AF80731F41B4A6DA5BFD1429D652A9600051C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa
Signing time:             Fri 02 Oct 2026 12:45:39 +0000
ROA not before:           Fri 02 Oct 2026 12:40:39 +0000
ROA not after:            Fri 01 Oct 2027 12:45:39 +0000
asID:                     218955
IP address blocks:        40.223.80.0/24 maxlen: 24
                          40.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6a:f8:07:31:f4:1b:4a:6d:a5:bf:d1:42:9d:65:2a:96:00:05:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct  2 12:40:39 2026 GMT
            Not After : Oct  1 12:45:39 2027 GMT
        Subject: CN=8806E5F9A829AAC619C1015863329D0126161F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:39:3f:5d:99:bf:cd:9a:53:34:1c:85:4c:
                    48:8c:f0:b2:c2:cf:71:a9:89:ce:7d:79:19:3a:10:
                    b2:e6:29:51:15:8a:4e:76:ee:60:1f:3c:26:12:29:
                    b4:55:be:d5:a9:77:30:b7:68:7a:00:75:c2:6a:69:
                    dd:f8:06:1e:79:ac:31:10:0c:3c:c1:63:a4:d8:03:
                    60:aa:9a:6f:8d:92:f7:ef:7b:40:b5:1d:03:d2:34:
                    e0:cf:b3:72:41:a5:42:3c:f5:be:c1:c7:4c:ee:b9:
                    bc:24:17:6f:1d:d9:8a:e2:2f:ce:26:7c:03:44:72:
                    a5:64:1a:ce:f1:ad:6b:93:5d:ae:0f:3d:61:86:6f:
                    6b:b4:86:be:27:1e:0a:65:8f:93:a2:0a:b5:7d:47:
                    8f:93:88:d3:01:75:97:99:e9:7a:47:6e:b1:a2:17:
                    bf:f8:d0:89:84:51:11:17:e2:1e:84:6e:c8:3f:b2:
                    26:54:2f:c4:e9:97:5b:a1:e5:5f:e7:8d:fe:fb:e6:
                    49:b6:57:8c:c1:27:91:61:fd:5c:49:c7:ec:9d:b9:
                    41:5e:bf:6a:04:50:1c:00:d6:07:74:5f:e9:26:03:
                    99:3f:70:66:6b:79:c3:7b:ba:db:01:af:72:de:93:
                    44:b0:19:31:2b:a2:77:1d:da:c6:20:4d:06:91:b3:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:E5:F9:A8:29:AA:C6:19:C1:01:58:63:32:9D:01:26:16:1F:7F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.80.0/24
                  40.223.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:3a:21:a4:a1:a3:98:a9:72:dc:d4:f7:cc:7a:bc:9e:89:a2:
         e4:41:dc:db:85:fc:47:be:4b:9b:fd:88:92:cb:dd:8b:0a:15:
         f9:02:1d:b5:a4:f2:8a:11:2c:3e:8e:ed:e9:1f:f1:6b:fe:26:
         66:d9:9f:f0:1d:46:5a:bc:67:68:2d:dc:10:5a:c9:81:a9:e2:
         ac:5b:ef:0d:33:37:e2:dc:38:b9:ca:10:fb:2e:df:71:1a:fa:
         b8:b2:bd:2d:61:b5:88:40:c1:7a:b4:eb:8d:1d:be:e9:38:5e:
         3f:47:c5:7a:90:ee:7c:ca:2a:1a:10:e3:21:d2:84:9a:bc:0d:
         cb:91:08:be:38:17:d2:0f:95:56:13:32:4a:df:b2:ac:47:3d:
         53:1f:a7:46:e5:48:a2:d6:b2:41:10:d4:fc:36:b5:7d:4a:ea:
         4a:cb:53:b9:35:55:a7:8d:f9:29:7e:b2:bd:c1:39:a5:4b:02:
         9c:b2:73:58:43:e3:fd:49:b5:50:20:c7:bd:88:aa:bc:75:47:
         dc:4e:97:a4:5c:07:75:d6:2f:24:a5:14:51:b7:8f:b8:fd:78:
         36:27:62:3b:13:2c:85:d6:fc:02:36:0b:cd:45:3f:75:23:d9:
         da:e8:ac:55:55:7c:ec:0a:8d:f3:bb:b1:36:be:b0:c5:09:6d:
         de:37:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:34:38 2026 by rpki-client