Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219105.roa
File:                     AS219105.roa (raw, json)
Hash identifier:          7/A/pEvv3yw9hPMC51GnliZl9cX7H2xCo6nmlhuXagw=
Subject key identifier:   D2:3E:03:EC:71:1C:4C:6B:7F:A1:1C:24:A2:E9:2E:2C:4F:C9:6D:D3
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       66CA548FF04498A2EBE68F3AADDC5C349262C25D
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219105.roa
Signing time:             Sun 11 Oct 2026 19:35:27 +0000
ROA not before:           Sun 11 Oct 2026 19:30:27 +0000
ROA not after:            Sun 10 Oct 2027 19:35:27 +0000
asID:                     219105
IP address blocks:        216.75.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 06:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ca:54:8f:f0:44:98:a2:eb:e6:8f:3a:ad:dc:5c:34:92:62:c2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Oct 11 19:30:27 2026 GMT
            Not After : Oct 10 19:35:27 2027 GMT
        Subject: CN=D23E03EC711C4C6B7FA11C24A2E92E2C4FC96DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:b6:fa:2a:90:9e:bb:c0:54:d0:d8:3c:66:
                    0f:7a:38:21:50:a8:83:90:64:3d:a3:8f:02:c3:a1:
                    92:0e:8d:39:d4:24:26:9d:74:07:27:e0:e2:2b:89:
                    e8:3b:b8:68:92:0e:2a:fb:d6:95:f0:6c:67:fa:8c:
                    f7:a7:e8:36:f5:58:33:68:02:1f:89:77:6b:5f:ce:
                    03:32:65:2e:8c:f2:2a:23:47:50:c6:c4:86:b0:30:
                    b4:85:fb:57:c7:18:04:bc:36:1c:29:98:04:c9:7e:
                    68:db:bd:49:89:4b:21:31:6c:15:70:2b:50:64:53:
                    c0:cb:62:da:61:30:83:a7:e3:6d:d1:05:ed:37:e9:
                    eb:d5:44:14:e4:c7:23:96:bc:d2:4c:2e:e1:fd:fe:
                    1d:bc:8f:9b:80:e5:1f:6f:7f:3d:40:2d:e9:ba:34:
                    a2:a1:58:69:0b:e1:61:11:a4:92:b2:b2:7f:ab:2e:
                    6a:74:9d:2e:d5:e3:fe:35:4c:43:c0:60:bb:d4:fc:
                    1b:33:e0:42:40:33:88:e4:19:ad:7b:2a:08:46:22:
                    cd:8e:73:a5:69:af:d0:2d:80:fb:cf:2e:0d:8c:76:
                    08:57:4e:0f:a2:84:41:11:0c:43:4f:00:4c:29:a1:
                    b3:ed:24:3c:32:a6:d0:54:09:69:46:66:3e:14:2f:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3E:03:EC:71:1C:4C:6B:7F:A1:1C:24:A2:E9:2E:2C:4F:C9:6D:D3
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e5:d5:f1:b3:c0:96:a6:20:14:fa:4b:5d:7b:b3:bd:dd:cc:
         bd:7d:33:ea:1e:9b:65:b4:3f:54:5e:d6:99:e1:b9:01:b1:46:
         9f:22:76:42:b3:a9:7f:ec:51:eb:2b:ea:6f:63:c8:4a:66:90:
         cf:6b:fc:32:ba:93:65:c4:01:ac:48:37:5e:13:32:aa:2a:bc:
         66:c5:2a:7b:72:47:b5:74:e8:c5:58:fb:48:44:6b:68:f0:5d:
         46:95:93:d1:47:11:4d:e3:02:a1:db:2c:08:c6:78:78:89:7c:
         2e:37:35:b1:3b:57:c1:67:60:c8:c2:76:40:41:13:bc:bf:47:
         2f:f0:09:10:15:b5:f8:04:bf:8f:23:25:28:f2:81:9d:75:6b:
         e0:ed:f5:c7:c9:cf:1e:f3:24:a4:7f:9f:b4:27:ba:a1:e8:61:
         20:0b:7f:f1:0e:90:58:a6:d7:ac:7f:93:09:b4:1e:c1:45:2e:
         ea:57:54:72:97:e0:6f:4d:43:c3:e0:81:f4:90:ca:f2:5d:97:
         29:67:d7:28:a1:e4:ce:8e:f3:78:b9:d0:42:d4:12:6c:3c:3f:
         9b:53:3f:6b:1e:7b:49:b7:61:89:b3:62:57:5b:28:b7:ce:f8:
         c3:b1:43:f1:22:f8:eb:4d:b4:9e:83:04:14:2d:33:49:2c:83:
         4f:7d:bf:59
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUZspUj/BEmKLr5o86rdxcNJJiwl0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYxMDExMTkzMDI3WhcNMjcxMDEwMTkzNTI3
WjAzMTEwLwYDVQQDEyhEMjNFMDNFQzcxMUM0QzZCN0ZBMTFDMjRBMkU5MkUyQzRG
Qzk2REQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAG2+iqQnrvA
VNDYPGYPejghUKiDkGQ9o48Cw6GSDo051CQmnXQHJ+DiK4noO7hokg4q+9aV8Gxn
+oz3p+g29VgzaAIfiXdrX84DMmUujPIqI0dQxsSGsDC0hftXxxgEvDYcKZgEyX5o
271JiUshMWwVcCtQZFPAy2LaYTCDp+Nt0QXtN+nr1UQU5McjlrzSTC7h/f4dvI+b
gOUfb389QC3pujSioVhpC+FhEaSSsrJ/qy5qdJ0u1eP+NUxDwGC71PwbM+BCQDOI
5BmteyoIRiLNjnOlaa/QLYD7zy4NjHYIV04PooRBEQxDTwBMKaGz7SQ8MqbQVAlp
RmY+FC8nbQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNI+A+xxHExrf6EcJKLpLixP
yW3TMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIxOTEwNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhLkzANBgkqhkiG9w0BAQsFAAOC
AQEALOXV8bPAlqYgFPpLXXuzvd3MvX0z6h6bZbQ/VF7WmeG5AbFGnyJ2QrOpf+xR
6yvqb2PISmaQz2v8MrqTZcQBrEg3XhMyqiq8ZsUqe3JHtXToxVj7SERraPBdRpWT
0UcRTeMCodssCMZ4eIl8Ljc1sTtXwWdgyMJ2QEETvL9HL/AJEBW1+AS/jyMlKPKB
nXVr4O31x8nPHvMkpH+ftCe6oehhIAt/8Q6QWKbXrH+TCbQewUUu6ldUcpfgb01D
w+CB9JDK8l2XKWfXKKHkzo7zeLnQQtQSbDw/m1M/ax57SbdhibNiV1sot874w7FD
8SL46020noMEFC0zSSyDT32/WQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 17:12:05 2026 by rpki-client