Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219160.roa
File:                     AS219160.roa (raw, json)
Hash identifier:          gKzihZTr9eY+G6QJITI31rUoSfb/am3qnkQot/M2aPA=
Subject key identifier:   57:AF:8D:F5:F5:5E:13:39:ED:C5:F5:E2:91:25:A0:63:AE:BE:EF:2F
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       6C841E390CF8242B95C9E17221FC17DDC1A52495
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219160.roa
Signing time:             Sun 23 Aug 2026 11:56:53 +0000
ROA not before:           Sun 23 Aug 2026 11:51:53 +0000
ROA not after:            Sun 22 Aug 2027 11:56:53 +0000
asID:                     219160
IP address blocks:        207.180.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 08:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:84:1e:39:0c:f8:24:2b:95:c9:e1:72:21:fc:17:dd:c1:a5:24:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Aug 23 11:51:53 2026 GMT
            Not After : Aug 22 11:56:53 2027 GMT
        Subject: CN=57AF8DF5F55E1339EDC5F5E29125A063AEBEEF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:eb:33:a4:0e:18:2e:ad:1c:ba:48:c9:82:
                    f4:28:cc:1c:3b:fe:e2:aa:b6:9d:56:97:ef:0a:9f:
                    28:6f:d6:bc:ad:49:42:e8:02:47:62:6d:18:f1:85:
                    27:bd:47:be:50:2a:92:c6:8b:7c:2f:99:a5:62:8c:
                    78:d9:75:12:c0:0a:ec:24:9c:67:fa:a6:c1:79:ed:
                    e3:70:5a:8b:e2:81:61:88:44:fc:c4:0e:20:b0:7d:
                    dc:b6:7c:5a:97:7f:47:f4:37:92:b0:71:80:c5:f9:
                    10:65:2a:d0:be:d4:bf:95:1f:63:5c:c3:f7:b7:c1:
                    9e:e5:96:b3:11:9f:f4:ec:94:fa:85:55:84:f2:b1:
                    6f:06:bf:e4:c0:50:7b:73:b4:6b:e6:b5:13:5d:7e:
                    97:39:27:3f:95:76:f2:e2:8a:a7:4b:5e:8e:a5:82:
                    28:20:2a:46:28:84:f5:5c:c5:c7:ac:e1:b9:f9:77:
                    df:bd:25:48:81:4e:90:4b:96:d6:65:bd:fb:21:a0:
                    bd:85:bb:4c:be:83:76:e3:9a:2a:bb:91:af:50:c3:
                    c6:3d:e5:9c:9d:e1:df:c5:80:27:96:3a:1a:4a:79:
                    36:47:9d:19:d5:da:a2:6d:7c:78:90:25:c7:b1:79:
                    92:03:48:ba:77:dc:a6:74:eb:88:3c:6d:af:b0:43:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AF:8D:F5:F5:5E:13:39:ED:C5:F5:E2:91:25:A0:63:AE:BE:EF:2F
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:67:f2:44:36:7b:7f:54:6e:04:31:c4:ef:8f:68:4c:fa:af:
         97:ac:1b:04:7c:ee:3b:c2:c0:f9:29:6c:51:5e:9a:cb:33:c7:
         c0:59:3b:93:b4:21:b6:81:f0:31:d4:7a:70:bb:cc:bd:84:37:
         14:e2:88:73:13:3c:84:c5:dd:50:1d:66:5e:59:2c:f5:0a:c3:
         38:ca:2e:2a:cb:42:41:25:68:9b:04:6c:41:09:5e:a4:5c:d8:
         90:25:74:95:b5:b2:71:f5:59:94:cf:aa:40:3c:39:c4:0f:c2:
         af:8f:4a:2b:91:65:dc:d0:0d:bb:f1:4a:47:7a:48:68:14:5a:
         04:e9:c4:7a:be:53:f1:d5:26:99:53:d6:8a:5d:c6:95:bb:39:
         d9:06:fe:3c:7d:3d:45:e2:2a:23:47:23:6b:46:51:f8:57:35:
         f1:ff:97:85:20:b3:3a:55:55:5b:d9:8d:5b:c0:39:ac:56:9a:
         1e:6b:f4:a0:05:7c:c1:00:c1:72:43:c5:4d:1f:e8:1b:6f:72:
         b4:42:f2:ee:25:c0:4a:69:6e:e4:78:82:79:ae:2e:3e:6b:91:
         67:d0:56:52:31:c7:b2:ca:46:2e:a9:87:05:7c:cd:a6:58:fe:
         ba:e4:b4:7a:c3:d7:e8:b5:7f:36:e3:44:0c:c3:5f:6d:2e:ee:
         1d:43:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:03:41 2026 by rpki-client