Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198588.roa
File:                     AS198588.roa (raw, json)
Hash identifier:          4qMU4e6dfGEdBFH0EckfMeBi9wtEoRSx7sXB+Kxlvgg=
Subject key identifier:   F8:7E:4A:DD:49:C2:AA:A1:0D:B0:51:92:19:11:EA:84:7B:AF:99:D9
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0B0F15B1C7A1901D6DA13D185B7A755723225FF4
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198588.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     198588
IP address blocks:        207.180.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0f:15:b1:c7:a1:90:1d:6d:a1:3d:18:5b:7a:75:57:23:22:5f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=F87E4ADD49C2AAA10DB051921911EA847BAF99D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:71:ec:77:40:e9:23:7e:f5:34:ff:1a:a0:
                    cd:82:43:53:46:1f:c9:f1:e9:a8:1f:39:8c:63:e0:
                    0e:62:63:e4:96:0f:dc:a8:7f:26:4e:22:06:26:30:
                    5a:6b:0f:53:b5:6a:e6:f5:3e:5f:67:f8:db:1c:aa:
                    04:cb:5c:b9:ce:b4:26:d7:62:f9:76:74:b5:30:70:
                    7b:1d:5b:a0:0b:d7:1c:be:7d:66:28:26:c1:0f:3e:
                    cd:3e:8d:ad:d4:0f:03:dc:b0:43:7c:b5:37:b3:57:
                    93:6d:6e:15:e2:a7:d9:c3:f9:d0:2b:ce:d3:39:48:
                    ff:b7:4a:57:62:1a:9e:2c:8c:8e:74:77:8f:e0:59:
                    b4:ce:07:a1:9c:20:0b:03:14:4d:32:d5:84:68:b0:
                    41:03:1f:7a:f6:97:57:8e:51:3f:64:6a:bf:19:de:
                    1f:e2:ff:65:b4:22:17:28:b2:58:6e:f3:96:a6:50:
                    c2:07:93:10:ba:3f:eb:4a:50:b4:6f:86:15:f8:8d:
                    2c:18:29:a0:c3:db:cf:a5:89:48:d8:a4:8e:1e:85:
                    97:3d:19:5e:09:0a:83:8a:ff:0d:c7:c4:2d:23:40:
                    ec:06:04:42:26:6b:bc:bb:6a:33:df:04:08:c3:d2:
                    26:ef:05:e8:7e:be:bd:8f:46:fb:ac:78:7f:c6:cb:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7E:4A:DD:49:C2:AA:A1:0D:B0:51:92:19:11:EA:84:7B:AF:99:D9
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198588.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:09:16:de:51:cc:d2:75:b1:d3:ba:15:af:44:54:cc:6f:
         0f:03:7d:14:30:57:12:2d:87:68:4e:5e:0a:b2:86:8a:c6:4c:
         f2:3b:0e:a2:5b:57:2d:c9:1b:69:f4:72:de:0a:9c:c6:44:9d:
         26:06:6e:15:61:ac:c8:aa:71:23:e0:29:78:a8:70:c6:5a:51:
         1a:17:dc:53:ab:ad:2d:c2:d5:8d:be:a6:9d:96:a2:20:0c:8b:
         a6:63:f4:5b:65:56:ad:42:9a:84:20:6f:56:cd:3e:2e:73:cb:
         46:28:32:36:a0:e3:a7:29:c5:98:97:f1:f7:8b:cc:2f:c8:f6:
         8b:c7:11:6b:3b:9c:39:f2:7a:f4:4f:be:a7:9b:da:72:19:a0:
         4c:83:ed:c7:77:bb:5f:c7:b4:a2:f7:dc:2c:62:f8:be:c1:31:
         3f:8d:36:f7:8a:c2:cd:ed:85:e1:93:46:f6:00:8b:a9:cf:f3:
         8f:59:35:05:eb:eb:ff:5d:5f:7b:d0:c7:e7:a0:79:0c:61:5b:
         1a:5a:bb:90:d0:13:08:72:04:47:55:80:f2:67:46:cc:7d:72:
         4b:e7:b8:80:c8:24:fe:75:69:22:fd:7e:ae:86:5a:a2:3d:08:
         c6:59:91:c0:66:30:9d:14:85:00:39:d2:9b:f1:b6:e8:4c:38:
         c3:d0:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:15 2026 by rpki-client