Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS198186.roa
File:                     AS198186.roa (raw, json)
Hash identifier:          MsYlbJqgo+ksiIMaZrFk7DSaZxPxIq4Z9y9x4z9uN14=
Subject key identifier:   0D:CA:33:11:9A:AF:2E:79:95:49:CF:51:12:BB:A7:ED:69:19:45:99
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       4E64CD002230AA94B3CD7D17FE3D6D9C9CBF6E17
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS198186.roa
Signing time:             Thu 14 May 2026 13:15:22 +0000
ROA not before:           Thu 14 May 2026 13:10:22 +0000
ROA not after:            Thu 13 May 2027 13:15:22 +0000
asID:                     198186
IP address blocks:        2a0b:4e07:e4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:64:cd:00:22:30:aa:94:b3:cd:7d:17:fe:3d:6d:9c:9c:bf:6e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: May 14 13:10:22 2026 GMT
            Not After : May 13 13:15:22 2027 GMT
        Subject: CN=0DCA33119AAF2E799549CF5112BBA7ED69194599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:ab:21:62:18:06:64:22:75:fb:a4:68:a8:
                    ce:35:3f:19:f4:fb:7d:54:b1:e1:4a:ea:b4:8b:18:
                    95:ef:a1:42:0c:e9:29:95:8e:28:a7:92:72:1f:42:
                    d8:6e:c1:bf:cc:3d:fa:84:f2:3a:0e:58:5e:28:a2:
                    da:b5:5a:e0:cf:f0:f3:03:44:97:40:7b:0d:23:7b:
                    dc:b4:f9:b0:7f:22:9e:80:fa:d7:7a:18:33:18:ef:
                    41:bb:7f:ac:08:2e:c5:d6:6c:8a:24:b8:e5:9b:a9:
                    6e:72:03:e4:4e:8b:fc:8d:01:42:a5:f1:fb:d1:29:
                    d2:82:1f:c3:49:e8:2d:73:85:be:0f:9f:93:cb:96:
                    0e:ef:87:72:82:70:ef:26:50:e5:02:ad:be:25:d2:
                    85:fd:45:4c:58:64:55:da:3f:66:59:12:9a:49:bb:
                    fb:73:48:69:d6:44:ca:87:73:d1:ca:51:0c:04:0d:
                    3d:a7:e7:b9:6c:f6:2e:d0:47:f5:d5:ef:08:00:9d:
                    32:6c:9c:95:01:b8:e0:84:af:fc:ec:cd:0d:bd:da:
                    d2:9b:36:7d:5b:d5:78:00:7d:5e:8f:f6:77:8a:61:
                    9b:b5:a0:8f:29:4d:39:4f:f9:8f:7b:92:7c:01:7b:
                    73:ea:c7:a3:7d:74:58:0e:81:47:0e:27:29:fe:cf:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:33:11:9A:AF:2E:79:95:49:CF:51:12:BB:A7:ED:69:19:45:99
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS198186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:e4::/46

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:47:a4:0c:16:78:18:40:d3:be:7f:56:b2:69:1c:18:d1:
         5d:fc:d1:24:a9:e4:e1:e6:62:80:d5:61:e5:16:31:b5:93:40:
         4c:92:89:21:50:14:0e:c3:23:e0:7f:89:c8:e8:19:d3:11:30:
         89:11:f9:28:9e:b5:e0:21:7d:e8:36:6d:eb:44:64:14:8b:9e:
         d5:5c:7c:b0:af:66:e2:38:33:18:b8:bc:40:08:4d:cc:6c:04:
         65:3e:7e:e1:9d:f6:52:ef:3e:38:d2:4c:5b:99:5e:5c:cd:d3:
         ed:ba:56:b2:69:1c:5d:40:3f:65:2e:0a:af:e0:52:1b:31:24:
         da:78:21:de:da:be:56:f5:b1:1a:48:81:43:cd:7a:bd:52:c6:
         cc:82:20:44:9f:ce:9c:b2:6b:24:48:59:84:dc:3b:7c:45:f0:
         e9:7f:c1:b1:de:f5:bf:08:ae:dd:ce:b7:29:ce:13:d1:62:dd:
         70:74:c5:75:a1:ab:94:ee:6b:14:d8:13:f1:7d:47:7e:fd:6e:
         0f:88:18:cd:62:27:fc:e2:b9:66:4d:29:a4:ff:fa:1e:49:7d:
         11:fa:93:82:4a:44:b4:30:82:df:71:4d:f2:2f:04:ef:40:c7:
         7e:9d:3b:82:24:a1:c6:fa:d8:2c:28:bd:53:7d:9c:a2:2d:37:
         8f:1c:a0:76
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUTmTNACIwqpSzzX0X/j1tnJy/bhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjA1MTQxMzEwMjJaFw0yNzA1MTMxMzE1MjJaMDMxMTAvBgNV
BAMTKDBEQ0EzMzExOUFBRjJFNzk5NTQ5Q0Y1MTEyQkJBN0VENjkxOTQ1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvashYhgGZCJ1+6RoqM41Pxn0
+31UseFK6rSLGJXvoUIM6SmVjiinknIfQthuwb/MPfqE8joOWF4ootq1WuDP8PMD
RJdAew0je9y0+bB/Ip6A+td6GDMY70G7f6wILsXWbIokuOWbqW5yA+ROi/yNAUKl
8fvRKdKCH8NJ6C1zhb4Pn5PLlg7vh3KCcO8mUOUCrb4l0oX9RUxYZFXaP2ZZEppJ
u/tzSGnWRMqHc9HKUQwEDT2n57ls9i7QR/XV7wgAnTJsnJUBuOCEr/zszQ292tKb
Nn1b1XgAfV6P9neKYZu1oI8pTTlP+Y97knwBe3Pqx6N9dFgOgUcOJyn+z8ALAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUDcozEZqvLnmVSc9RErun7WkZRZkwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw
cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz
ZjgyMGY1LzEvQVMxOTgxODYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAOQwDQYJKoZIhvcNAQEL
BQADggEBAHuUR6QMFngYQNO+f1ayaRwY0V380SSp5OHmYoDVYeUWMbWTQEySiSFQ
FA7DI+B/icjoGdMRMIkR+SieteAhfeg2betEZBSLntVcfLCvZuI4Mxi4vEAITcxs
BGU+fuGd9lLvPjjSTFuZXlzN0+26VrJpHF1AP2UuCq/gUhsxJNp4Id7avlb1sRpI
gUPNer1SxsyCIESfzpyyayRIWYTcO3xF8Ol/wbHe9b8Irt3OtynOE9Fi3XB0xXWh
q5TuaxTYE/F9R379bg+IGM1iJ/ziuWZNKaT/+h5JfRH6k4JKRLQwgt9xTfIvBO9A
x36dO4Ikocb62CwovVN9nKItN48coHY=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:42 2026 by rpki-client