Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198250.roa
File:                     AS198250.roa (raw, json)
Hash identifier:          ekXQdslGGoK3Ux50dHQuTCDCjcePuuSRRRhgDDrYcr0=
Subject key identifier:   4C:2E:9E:2D:5B:4E:21:20:16:39:5B:23:DF:C9:48:88:83:ED:3E:45
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       203E64F1547CA9B812A83F0BBC00CC77EAB5D72B
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198250.roa
Signing time:             Wed 06 May 2026 07:17:20 +0000
ROA not before:           Wed 06 May 2026 07:12:20 +0000
ROA not after:            Wed 05 May 2027 07:17:20 +0000
asID:                     198250
IP address blocks:        207.180.37.0/24 maxlen: 24
                          207.180.46.0/24 maxlen: 24
                          207.180.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:64:f1:54:7c:a9:b8:12:a8:3f:0b:bc:00:cc:77:ea:b5:d7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:20 2026 GMT
            Not After : May  5 07:17:20 2027 GMT
        Subject: CN=4C2E9E2D5B4E212016395B23DFC9488883ED3E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:bb:d9:f2:28:39:e3:67:d9:66:28:1b:79:
                    32:de:1f:b1:c3:d8:a5:b0:42:bd:3d:02:93:69:1a:
                    1e:ba:f1:6a:16:23:c8:f8:1e:0d:c3:9d:84:89:31:
                    68:51:8f:52:86:ae:8f:eb:9c:53:7d:6b:4c:da:35:
                    e2:d8:85:7e:a1:d5:c9:82:2d:04:08:38:6b:ce:7b:
                    da:b4:80:e5:23:4f:4a:6d:66:ef:66:75:dd:34:a0:
                    2f:74:e8:72:13:a9:b8:59:34:b9:82:14:c9:69:69:
                    12:77:21:c9:80:3d:7a:88:f5:93:43:05:e6:c3:b6:
                    38:8a:ab:0f:4d:16:c2:4d:19:cf:83:1f:4d:4d:fc:
                    40:ff:aa:6d:3c:66:a5:cb:35:c7:dc:dc:ae:36:90:
                    47:93:b9:19:47:28:88:59:1b:b8:a7:60:92:ad:d2:
                    1b:b7:1d:4e:04:f2:a6:8f:c1:d1:f6:02:c9:19:66:
                    77:65:6b:1b:b0:64:e2:c7:20:23:54:d0:9a:be:7f:
                    93:62:03:fd:b9:2f:1e:82:e9:cd:bf:a7:f3:10:da:
                    4e:15:f9:c7:44:ff:ac:70:b4:ad:ca:14:0e:db:20:
                    b2:38:84:e6:83:c0:c1:5c:b0:92:8d:e4:3c:72:5d:
                    60:d2:14:42:90:c3:4a:7b:7b:ff:9e:1d:0c:db:59:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2E:9E:2D:5B:4E:21:20:16:39:5B:23:DF:C9:48:88:83:ED:3E:45
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198250.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.37.0/24
                  207.180.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:7b:a4:49:65:b7:9e:84:e1:6f:39:f1:df:29:b5:1f:52:
         9d:32:33:19:e0:8f:08:a9:63:de:7c:3b:59:f7:5e:a6:39:e3:
         ed:50:91:ca:89:fc:b1:f2:de:bc:ce:0b:74:f8:eb:b3:d7:65:
         17:5f:b2:50:a2:be:0c:4b:c7:a6:37:f3:44:36:12:60:20:17:
         1a:75:42:77:80:a7:cd:50:d0:71:80:85:fe:4d:02:6e:47:10:
         50:04:d7:0d:ed:1a:69:ca:16:59:cd:3d:e3:1d:84:31:14:fd:
         4a:44:ec:e0:9d:28:9b:4e:a0:2f:b2:e1:2d:0f:72:3d:11:12:
         d7:ff:f3:20:72:44:d1:5d:53:10:fa:82:91:7a:44:39:7d:34:
         2a:0a:d4:9b:b7:ea:d6:94:29:98:1e:bc:55:1a:d6:92:bb:12:
         63:3b:8b:c6:bb:b8:17:b3:d5:8d:73:08:6f:c3:97:65:7e:70:
         fd:b4:10:d4:f0:4c:48:29:b4:06:37:47:35:0c:af:4f:bb:76:
         9c:72:ac:fc:91:76:c2:c8:6d:fa:3a:7d:3e:9c:b6:54:e1:d3:
         51:b8:43:76:0a:c9:18:f9:c7:f4:14:e1:0a:8c:6b:f5:2b:98:
         04:8c:42:39:03:ec:a8:39:39:f9:23:4f:9b:31:3f:9f:42:ee:
         ef:a6:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:31 2026 by rpki-client