Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS218965.roa
File:                     AS218965.roa (raw, json)
Hash identifier:          wZWUIf1dbpSLpdXnysls8SGv+JzuulITCOU+aspqkeA=
Subject key identifier:   2C:27:88:0B:DE:2F:72:39:FD:4A:78:1C:42:E8:F5:75:DC:DD:12:20
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       10CF2F3AEE9958AEED7F9C80B82AE2F177F0B319
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS218965.roa
Signing time:             Mon 24 Aug 2026 07:54:48 +0000
ROA not before:           Mon 24 Aug 2026 07:49:48 +0000
ROA not after:            Mon 23 Aug 2027 07:54:48 +0000
asID:                     218965
IP address blocks:        207.180.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cf:2f:3a:ee:99:58:ae:ed:7f:9c:80:b8:2a:e2:f1:77:f0:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Aug 24 07:49:48 2026 GMT
            Not After : Aug 23 07:54:48 2027 GMT
        Subject: CN=2C27880BDE2F7239FD4A781C42E8F575DCDD1220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:18:53:34:61:66:51:9a:b5:7b:48:22:b5:
                    15:94:d0:47:c9:74:6c:b8:16:7d:80:0a:8b:48:e5:
                    c2:9d:c9:cf:9b:a2:1a:68:15:6e:69:99:55:d0:7b:
                    79:52:3c:88:07:c0:f6:b1:d0:d5:4a:46:d5:d8:b9:
                    11:ef:a8:a2:59:d5:41:90:53:b5:37:d4:69:4d:1c:
                    71:a5:4f:fe:97:93:f9:8f:86:48:19:ca:0a:6d:65:
                    e1:63:3d:e7:58:5a:e6:ec:0f:d2:20:12:4b:07:76:
                    6e:35:cd:d8:87:9b:cd:b6:77:b2:c4:2e:00:2a:21:
                    72:11:65:c8:54:dd:15:d2:47:a9:4a:87:49:a7:ad:
                    38:01:af:61:ec:c3:74:45:60:85:ec:6a:2b:55:3b:
                    84:b4:4d:33:18:ca:b6:85:0f:e3:85:44:55:af:81:
                    28:57:4f:90:ea:7f:a1:2f:74:73:6f:f7:00:c3:88:
                    d9:70:95:15:50:2b:8e:06:8a:48:fe:15:3c:b1:d6:
                    4f:11:a9:15:8e:ae:b3:74:1c:f5:bd:5b:d1:c4:15:
                    ae:78:f5:b5:6e:d5:e2:86:d8:d6:93:2f:3b:ba:0c:
                    0a:1d:74:05:00:93:54:30:c5:24:c5:7b:20:c9:ad:
                    a3:5a:38:5b:6d:34:7c:b1:f2:c6:66:f5:ae:d9:00:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:88:0B:DE:2F:72:39:FD:4A:78:1C:42:E8:F5:75:DC:DD:12:20
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS218965.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:8a:11:08:27:49:2f:b4:4b:43:94:62:bc:90:67:a1:d2:
         7f:48:37:0e:36:21:87:96:28:65:9b:5c:6d:c5:2d:39:dc:bd:
         63:79:ea:75:a3:df:36:b4:77:8a:cd:da:60:87:ce:91:5b:6a:
         1f:ee:2c:14:15:14:1e:7b:77:5c:46:ea:2e:bd:ed:75:d7:55:
         6c:94:34:62:db:8d:0f:a2:8c:f1:2a:9d:44:6c:fa:58:ce:24:
         2f:58:7d:f3:98:e3:59:02:78:2e:22:4e:5a:58:3e:1d:0b:32:
         9a:7c:b3:10:4b:d5:5d:11:0c:33:42:7b:ca:50:98:f4:37:f3:
         c2:f9:b2:e1:5c:fe:e9:06:39:57:97:d6:0d:67:24:57:54:7c:
         25:26:12:2d:98:f8:ff:10:02:c9:fd:34:7c:c1:55:5b:27:b3:
         4b:1d:10:76:d8:a1:f7:66:bd:6a:84:f6:8b:8f:78:69:b3:47:
         57:54:c3:c6:67:1f:7e:8a:44:81:41:c5:a1:d9:74:a2:14:f4:
         8c:ef:ef:0d:ad:d9:76:0b:2c:78:1f:ac:b5:74:c3:ef:25:6b:
         24:74:70:62:87:4d:7e:e2:ab:5a:36:59:43:b5:58:0e:f8:db:
         a1:56:b1:71:54:8f:fc:5b:b6:ce:5f:03:2a:49:bb:4e:eb:35:
         3c:33:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:50 2026 by rpki-client