Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198810.roa
File:                     AS198810.roa (raw, json)
Hash identifier:          0ZZ6uguZp4y72BwARbmpCrJTaT6nSz6HdoWjChNkwEc=
Subject key identifier:   BB:0D:A2:D5:79:3B:01:90:2A:57:3F:A5:88:AC:21:FD:BA:DA:EC:A4
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       29D2D8CA0C692FB87213063DF47C1E64DA8F4157
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198810.roa
Signing time:             Tue 15 Sep 2026 03:21:14 +0000
ROA not before:           Tue 15 Sep 2026 03:16:14 +0000
ROA not after:            Tue 14 Sep 2027 03:21:14 +0000
asID:                     198810
IP address blocks:        207.180.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 01:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d2:d8:ca:0c:69:2f:b8:72:13:06:3d:f4:7c:1e:64:da:8f:41:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Sep 15 03:16:14 2026 GMT
            Not After : Sep 14 03:21:14 2027 GMT
        Subject: CN=BB0DA2D5793B01902A573FA588AC21FDBADAECA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:c6:3e:97:8b:3e:a6:cf:25:9a:7b:09:20:
                    9e:b8:70:26:44:94:2d:82:04:da:f8:41:73:99:a0:
                    52:d3:93:e5:4f:cf:93:dc:76:2c:48:4d:5e:22:83:
                    ef:f8:bf:3b:24:44:13:13:1e:b8:8f:dc:44:d9:8a:
                    e7:62:d7:c2:ff:f8:93:c9:b6:6f:5f:78:f0:b8:85:
                    a6:12:ae:56:7b:db:50:65:e6:5e:d4:02:14:89:eb:
                    c2:d8:00:3c:2c:45:88:51:6a:e6:36:95:7a:96:c6:
                    b7:9a:be:05:7a:94:d0:d1:92:4a:00:f3:9e:cd:47:
                    cf:1f:f1:8a:91:74:37:a3:a3:ba:6e:7c:5c:5a:25:
                    0f:e0:77:74:24:13:2a:b4:9a:27:e5:6c:cc:9e:4c:
                    d6:07:be:c0:19:4c:de:18:ec:b4:95:8d:17:66:87:
                    38:7c:d6:19:52:7c:c1:1c:a9:1a:f0:7c:44:33:69:
                    78:81:a1:75:06:b0:b9:bf:d9:d0:38:a1:60:7f:f3:
                    cf:39:a7:eb:0f:ee:51:d3:8b:7b:6c:2d:91:14:38:
                    42:1a:f3:8a:dd:c4:11:27:23:25:c7:50:9d:4e:58:
                    2c:43:9a:0d:1e:d9:de:12:22:07:d0:5e:87:6a:44:
                    3b:1d:2c:56:89:90:05:c8:a9:de:38:ee:e0:fa:a4:
                    54:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0D:A2:D5:79:3B:01:90:2A:57:3F:A5:88:AC:21:FD:BA:DA:EC:A4
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS198810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:44:02:6e:94:be:92:78:46:0c:b8:f3:a5:43:2b:b9:22:26:
         3d:b4:76:d9:ac:e0:93:d0:b3:90:be:25:d6:21:5f:b4:9f:f8:
         b1:53:38:dd:c4:73:72:5a:d1:22:c0:e2:d9:c6:48:a3:09:03:
         99:aa:74:39:0e:91:ea:e9:5f:7f:5c:54:59:01:07:52:47:5f:
         bd:e9:94:fe:f7:54:d6:79:95:67:f9:f5:03:63:05:89:66:60:
         39:e7:3d:c2:32:ac:9a:0d:af:7b:fe:30:f2:ee:b0:3d:51:a1:
         c1:ee:54:be:35:a1:3d:4b:63:e0:07:e6:b9:ce:e6:87:1f:e2:
         f7:fc:89:ea:c0:37:c0:cd:c1:ed:78:a7:b8:56:d5:b1:94:cd:
         78:c3:32:00:08:71:76:74:7c:c6:f0:4b:a9:4a:03:a2:e9:ac:
         c5:e5:55:71:f3:cd:40:cc:40:82:71:c2:1f:e1:22:b1:87:17:
         6a:de:f7:67:16:a1:46:80:6a:b8:d7:a9:31:e1:71:98:2c:e6:
         70:bb:a5:29:f9:f3:e9:30:c8:68:6b:33:63:a9:4e:71:de:bf:
         22:9e:03:69:3f:ee:70:21:1b:52:fc:22:c0:08:e2:c2:aa:88:
         82:da:28:47:d2:bc:58:f2:c9:4a:93:81:9d:16:7f:06:7f:41:
         ed:88:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:51:55 2026 by rpki-client