Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218346.roa
File:                     AS218346.roa (raw, json)
Hash identifier:          ehi5Ek3MUmC/J2GtiPl4AbvbeuuxcJCSa78YEZef5lE=
Subject key identifier:   F4:22:3E:94:F3:74:25:AE:34:48:7F:D6:93:88:0A:5B:09:09:6B:C8
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       04D0EC33952CFAC35D85314245D245F24017A2B5
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218346.roa
Signing time:             Tue 20 Oct 2026 20:15:55 +0000
ROA not before:           Tue 20 Oct 2026 20:10:55 +0000
ROA not after:            Tue 19 Oct 2027 20:15:55 +0000
asID:                     218346
IP address blocks:        2a0b:4e07:2e0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 22:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d0:ec:33:95:2c:fa:c3:5d:85:31:42:45:d2:45:f2:40:17:a2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Oct 20 20:10:55 2026 GMT
            Not After : Oct 19 20:15:55 2027 GMT
        Subject: CN=F4223E94F37425AE34487FD693880A5B09096BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:7c:1a:4e:56:e5:8a:20:f2:53:61:d5:fb:
                    23:6a:8c:49:79:e9:b1:a8:88:2b:52:6b:98:0e:ac:
                    93:81:e8:5b:e2:38:4e:ec:5b:4a:82:51:f8:72:36:
                    a2:64:0d:4b:57:75:58:0f:16:b3:96:35:10:c5:a5:
                    37:75:40:53:4b:8a:3f:7a:9c:d3:33:9d:dc:66:4f:
                    7a:84:4f:30:35:89:b5:42:b9:6e:85:14:79:10:24:
                    85:cc:a5:66:18:3b:0f:69:b7:23:14:25:8d:e2:6a:
                    2f:dc:fe:7c:49:c2:e5:2e:ff:96:bb:eb:e5:b5:af:
                    ea:b5:7d:3f:52:24:50:17:ca:77:78:9d:d8:00:31:
                    f0:f6:e9:b0:fd:fb:fe:a6:ed:69:5c:f2:0a:85:28:
                    5a:02:9d:13:c1:2d:61:ad:36:39:79:5a:eb:02:a5:
                    2c:88:33:77:20:0f:07:b9:d1:56:aa:b4:29:2d:b3:
                    eb:ef:78:10:d4:e0:5f:ad:8d:a1:38:f6:c0:3f:62:
                    d7:fb:ac:59:69:81:76:b4:fa:ad:88:46:ac:1c:78:
                    33:72:b1:6e:c4:1f:28:b7:ed:97:46:5a:5a:15:1b:
                    67:de:05:b2:aa:d6:2d:56:d3:27:e3:24:23:3a:1a:
                    9a:17:0e:2e:fb:97:e6:1c:77:a8:62:e0:37:d8:90:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:22:3E:94:F3:74:25:AE:34:48:7F:D6:93:88:0A:5B:09:09:6B:C8
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS218346.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:6d:54:87:02:c6:6e:d5:22:2d:b0:8f:a7:a5:c5:c7:31:
         cb:f6:32:4d:39:b9:b4:23:86:46:db:85:b4:06:68:ab:bf:a2:
         a2:72:13:42:1a:39:53:e2:2d:74:a6:8f:fe:c6:63:dc:70:cc:
         f9:82:96:e9:00:75:4d:97:c2:de:f2:4f:aa:17:d9:47:2b:8f:
         4c:66:0a:1a:43:20:0b:0c:73:57:74:a9:4a:02:a2:03:ce:9c:
         0e:cd:ad:d5:0e:24:e4:0f:ac:31:20:bb:79:91:5a:be:0e:38:
         0d:6d:95:26:1c:31:50:5b:53:d6:06:19:8e:b7:29:57:1d:d9:
         08:f3:63:26:f3:31:b2:d1:8b:71:c6:cd:4d:f3:35:30:aa:ab:
         34:61:d8:e6:1f:66:1b:d4:2d:b9:c1:19:64:79:bb:fb:22:7d:
         ed:48:f8:4e:0c:72:c7:0b:7d:7e:dd:83:4b:7d:ca:8f:b4:87:
         9b:20:8e:2f:0b:23:01:ac:ee:80:4f:65:f5:f3:fc:23:9c:40:
         31:a5:79:9d:15:c1:aa:44:82:f2:55:c6:2f:1e:fe:ef:ef:90:
         4c:0e:45:4e:9f:3c:19:f6:83:bf:3c:1d:dd:c8:40:95:61:a2:
         ad:f5:20:2d:dd:2b:d2:55:79:20:3d:3d:2e:d2:5f:67:92:57:
         87:ea:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:32:18 2026 by rpki-client