Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218911.roa
File:                     AS218911.roa (raw, json)
Hash identifier:          RcuR47K0LLbIL0AWAJN5MuXyRFv/Bo+x5BBelF9pAf0=
Subject key identifier:   AC:6A:01:65:03:0C:22:88:6E:3C:EE:61:7F:28:9E:EF:4E:1C:2E:38
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       26171ACA1B04BC498BEA6F90E5E8698EE3A1D891
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218911.roa
Signing time:             Mon 07 Sep 2026 09:47:44 +0000
ROA not before:           Mon 07 Sep 2026 09:42:44 +0000
ROA not after:            Mon 06 Sep 2027 09:47:44 +0000
asID:                     218911
IP address blocks:        40.223.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 15:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:17:1a:ca:1b:04:bc:49:8b:ea:6f:90:e5:e8:69:8e:e3:a1:d8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep  7 09:42:44 2026 GMT
            Not After : Sep  6 09:47:44 2027 GMT
        Subject: CN=AC6A0165030C22886E3CEE617F289EEF4E1C2E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:55:2a:d3:9f:cd:89:12:2c:85:b4:1c:c0:
                    e7:7d:a6:2b:68:4e:ad:fd:c7:fe:8a:e6:6e:b8:08:
                    a1:32:8f:c8:7f:ca:40:51:be:9a:c3:7a:61:e5:6f:
                    94:d3:27:e7:7c:d2:d4:cb:86:6b:43:9c:ac:60:27:
                    c6:5d:0b:3b:26:3d:ff:b5:f7:a5:2c:27:a1:16:5b:
                    37:41:42:2c:c6:67:eb:f8:36:47:8e:0f:28:2b:d7:
                    7c:c3:2b:5a:69:9b:70:c0:76:ac:b2:94:ab:01:a0:
                    67:89:63:49:ea:33:31:ac:d3:a3:24:e7:59:10:20:
                    5e:3a:33:a2:8c:7f:36:e4:5e:2f:9b:91:5f:63:55:
                    93:3c:1d:58:c9:54:d7:3b:17:e0:33:c8:26:af:d6:
                    eb:88:92:de:18:89:24:96:b7:a1:c1:fd:58:80:42:
                    c8:69:aa:b9:46:57:66:ff:77:08:87:09:1d:22:42:
                    38:83:d9:59:a9:cc:aa:28:b1:54:dc:57:25:5a:6a:
                    27:83:e5:af:a7:7e:8b:50:16:84:d0:76:66:e2:9a:
                    2d:8b:c5:4f:d4:17:ac:e7:f5:1f:6b:e5:67:6c:71:
                    76:f5:71:0a:d3:82:b9:78:73:ff:09:e3:4b:e6:92:
                    3c:5d:4f:ba:c7:0b:70:44:2c:d0:e8:34:9c:28:c4:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:01:65:03:0C:22:88:6E:3C:EE:61:7F:28:9E:EF:4E:1C:2E:38
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218911.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:26:0f:b6:ef:c9:49:66:f0:56:5c:ec:fa:97:94:c8:e8:71:
         8c:c0:b3:4d:00:e4:c7:ff:48:05:4d:b4:25:20:3f:64:52:04:
         e3:e4:f4:8c:39:97:8b:4d:6c:77:0a:7d:ae:87:2f:75:45:fe:
         d8:3a:ce:cb:9d:cf:1f:0d:cf:09:e0:60:39:0f:80:4f:9c:a8:
         8a:07:83:1e:32:ec:3e:71:f6:4d:ac:6a:7c:7b:ab:be:c8:3c:
         45:a9:0d:85:36:5a:78:62:14:40:0a:59:f6:ac:f9:97:f8:49:
         99:01:10:0b:f0:0d:f4:2b:f7:46:a5:28:fd:92:b2:ba:84:5f:
         64:04:58:34:23:76:f4:1c:a0:c2:68:8a:ae:19:ff:81:52:b5:
         73:81:56:30:ec:e1:9d:b7:25:ca:e4:de:a0:0d:f4:3e:d2:d9:
         23:2a:28:aa:2f:44:cf:cd:58:6b:ab:eb:89:b1:e5:38:b3:3c:
         7d:06:a7:e6:bc:c4:8e:94:52:5f:af:03:f3:d9:9a:26:51:ea:
         a3:71:c5:82:e5:59:0d:7b:f0:a6:39:d8:ec:4b:5b:60:77:4c:
         f2:19:df:1a:35:c3:cd:26:46:a0:1a:60:81:e3:80:5b:0f:3b:
         ca:40:c1:ab:e1:c0:e8:82:04:3c:22:77:bf:56:1f:6a:74:8d:
         9e:ab:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 19:46:48 2026 by rpki-client