Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198566.roa
File:                     AS198566.roa (raw, json)
Hash identifier:          XoKHsGQgK7d82XJgDQ3J/U5RW+PC981aREY1JibDWaA=
Subject key identifier:   80:CC:15:01:7D:6C:4A:F1:80:14:01:86:3C:8E:4C:98:BF:AB:93:9F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2CC0D322403733625E7B1F899E30D9D67504BB80
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198566.roa
Signing time:             Sun 04 Oct 2026 20:19:47 +0000
ROA not before:           Sun 04 Oct 2026 20:14:47 +0000
ROA not after:            Sun 03 Oct 2027 20:19:47 +0000
asID:                     198566
IP address blocks:        104.234.55.0/24 maxlen: 24
                          104.234.62.0/24 maxlen: 24
                          104.234.107.0/24 maxlen: 24
                          104.234.112.0/24 maxlen: 24
                          104.234.123.0/24 maxlen: 24
                          104.234.152.0/24 maxlen: 24
                          104.234.157.0/24 maxlen: 24
                          104.234.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 14:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:d3:22:40:37:33:62:5e:7b:1f:89:9e:30:d9:d6:75:04:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  4 20:14:47 2026 GMT
            Not After : Oct  3 20:19:47 2027 GMT
        Subject: CN=80CC15017D6C4AF1801401863C8E4C98BFAB939F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:dc:6a:93:61:13:1a:3e:c6:41:1b:79:a6:
                    e0:1d:61:ba:db:87:ed:83:ad:72:af:7b:d3:f0:24:
                    fa:e0:7c:7b:1e:09:50:a7:5f:3b:74:1f:63:b6:d6:
                    f4:6a:e7:13:4a:23:e5:67:5b:3e:8c:d0:47:05:8b:
                    a8:0b:f4:7b:09:1c:41:66:0e:55:04:92:52:75:46:
                    90:32:39:aa:23:fd:98:5c:d5:c2:c6:30:79:23:72:
                    ac:ff:6c:cf:d0:b1:f2:ba:65:97:1b:2f:5c:59:4d:
                    97:3a:b7:84:47:70:c4:bb:ec:7f:c2:99:33:d8:e5:
                    0a:04:4f:9c:07:a1:9a:08:cc:12:5a:e1:c5:5b:9a:
                    b9:d7:6d:94:db:54:3b:0f:fb:5b:72:76:b7:d4:c7:
                    4a:2c:e1:43:5c:67:b1:12:2f:90:be:16:ac:8d:13:
                    75:be:ad:3c:6b:9a:d7:c5:32:32:5b:38:6a:6b:87:
                    1e:8d:75:7a:f0:af:0e:e7:64:30:bb:aa:21:75:55:
                    06:7d:3c:c9:57:88:d7:08:de:dc:25:33:fb:36:9e:
                    c9:08:2a:8d:9f:09:42:49:b2:e3:e8:da:ed:5e:b0:
                    8d:53:21:29:00:49:f6:4b:0d:c5:2f:fb:a1:31:ef:
                    09:68:63:f9:23:80:9f:1d:02:95:1a:23:a5:76:d4:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CC:15:01:7D:6C:4A:F1:80:14:01:86:3C:8E:4C:98:BF:AB:93:9F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198566.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.55.0/24
                  104.234.62.0/24
                  104.234.107.0/24
                  104.234.112.0/24
                  104.234.123.0/24
                  104.234.152.0/24
                  104.234.157.0/24
                  104.234.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b7:35:b2:37:11:e6:72:1b:5c:d2:c7:02:85:34:50:40:c8:
         e3:83:1d:b4:80:d5:25:99:1c:82:ee:5b:2b:54:50:53:e7:a6:
         23:09:d6:fe:ac:e1:87:ad:39:af:d3:66:04:d7:9e:9c:09:d0:
         27:06:29:8c:84:a7:4a:a3:f5:5c:93:64:c7:80:c8:28:99:d1:
         33:fd:d4:61:e1:49:9a:ac:33:e0:eb:c1:3e:0a:35:a5:f2:91:
         52:dc:b3:a9:99:fa:e9:02:fb:23:11:69:49:d6:5f:74:9c:a2:
         14:d8:7a:83:7b:c1:d3:95:bc:5a:7e:e0:74:d2:4e:7f:31:8d:
         b3:f7:1e:ba:6b:56:e6:61:13:9d:a7:a6:7f:41:62:32:bd:f7:
         56:9a:fc:ef:15:71:87:62:9d:c7:29:3d:55:f5:c8:8f:5a:88:
         f4:bd:14:1f:9a:a4:e4:cb:cd:70:a0:c7:b9:fa:17:af:87:96:
         9b:9a:a1:86:43:29:1f:b1:11:d1:4e:a1:2a:03:82:d4:90:d8:
         7f:3c:00:d3:c3:93:cf:11:aa:78:23:07:1b:87:3a:33:f9:57:
         ae:f3:57:d3:2b:4f:c4:fa:12:84:c8:0e:33:f4:e9:ab:84:11:
         34:23:b7:1c:86:c1:86:60:50:e5:ea:a8:61:3d:52:c9:7d:5f:
         b0:c5:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:37 2026 by rpki-client