Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa
File:                     AS218955.roa (raw, json)
Hash identifier:          7XvKntgMImMaKtyChljIAgfsxbkyaETIVbpBniGtUpg=
Subject key identifier:   A5:FA:D7:0B:A8:8B:37:96:77:84:D8:F5:82:42:FB:AB:A4:68:20:D7
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2A55CE1841DC804010D9C0D85756A559CDA5C136
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa
Signing time:             Wed 02 Sep 2026 13:37:03 +0000
ROA not before:           Wed 02 Sep 2026 13:32:03 +0000
ROA not after:            Wed 01 Sep 2027 13:37:03 +0000
asID:                     218955
IP address blocks:        40.223.81.0/24 maxlen: 24
                          40.223.83.0/24 maxlen: 24
                          40.223.86.0/24 maxlen: 24
                          40.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 10:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:55:ce:18:41:dc:80:40:10:d9:c0:d8:57:56:a5:59:cd:a5:c1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep  2 13:32:03 2026 GMT
            Not After : Sep  1 13:37:03 2027 GMT
        Subject: CN=A5FAD70BA88B37967784D8F58242FBABA46820D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:df:da:b2:46:e3:1c:4f:a3:75:f4:69:cb:
                    d1:d5:b0:b6:66:71:88:2d:5c:b7:3d:a0:d8:e1:40:
                    2b:ca:55:24:db:9b:b1:9b:33:38:da:e8:9a:6d:8e:
                    2d:21:35:77:81:2a:75:ce:2b:51:32:fa:14:48:1c:
                    e8:ea:00:68:f9:a5:e0:f0:5e:e6:37:84:a1:90:00:
                    34:d6:ec:03:89:28:28:0c:cb:24:e9:92:fa:c4:c7:
                    ee:0f:6a:65:dc:42:fa:f5:f8:1e:5b:a5:57:96:a0:
                    09:25:92:8b:35:8c:27:51:69:5e:8a:33:17:f4:5d:
                    48:ee:ed:ac:f4:fa:e8:72:9c:76:34:37:a5:1c:76:
                    53:1d:de:01:c6:6a:f3:56:7a:1e:93:13:d0:e1:a7:
                    42:6f:1e:42:55:ef:de:d2:68:0e:38:bd:4c:25:c9:
                    e4:62:1a:58:84:6e:2e:30:7b:2e:3a:5a:f9:bd:d9:
                    81:e7:0f:c4:53:b7:7b:14:6d:7f:5d:ee:9f:51:48:
                    3b:f2:62:38:ee:72:1a:ca:4f:ea:8d:c9:d9:f8:9a:
                    53:9c:6e:ec:83:51:a9:04:cb:e1:5e:34:d8:95:b4:
                    fa:8d:dd:9f:09:b7:3c:6a:44:8d:7e:c0:02:1b:8b:
                    9c:88:97:86:e2:72:65:ea:e8:1e:67:16:91:90:f5:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FA:D7:0B:A8:8B:37:96:77:84:D8:F5:82:42:FB:AB:A4:68:20:D7
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.81.0/24
                  40.223.83.0/24
                  40.223.86.0/24
                  40.223.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:fb:3e:0c:a9:e7:d3:2e:df:8e:5f:c9:16:28:b9:d6:13:
         78:59:8f:38:6d:d5:df:b0:58:a0:f4:fe:e5:57:4c:ee:d5:4e:
         47:c0:9d:4f:06:30:55:49:d9:e4:98:69:7c:46:c7:46:4e:51:
         6b:9c:ef:bf:50:a8:74:2e:7b:7c:4a:13:15:9c:5f:09:4e:0c:
         6e:d1:aa:05:b1:de:39:e8:c7:3e:34:9d:2f:41:e4:d3:52:17:
         bf:38:e1:b8:cf:6e:92:af:dd:16:81:a2:08:60:ab:ac:2f:f5:
         b5:38:32:ca:e7:75:11:58:55:20:38:ec:ff:7e:a9:fd:f8:39:
         50:04:0f:57:5b:09:64:26:a6:88:a4:99:0a:58:89:bd:e8:27:
         c7:e4:b0:dc:98:b3:6d:fd:66:42:e3:82:31:f8:56:01:a9:e9:
         2d:65:49:8d:fb:ab:e3:10:7a:69:8d:53:f3:95:58:f0:bb:13:
         7c:c9:f0:a9:a4:3b:cd:c5:b8:1a:49:2d:14:c1:d5:f0:fe:dd:
         c9:2c:eb:ca:e9:d3:75:3f:46:82:6d:94:ef:8b:9c:cf:16:0c:
         5c:88:dc:ac:06:f7:be:36:28:ab:5d:bd:5f:2d:30:3d:07:a0:
         3d:ca:ad:bc:83:f6:bc:96:03:d3:01:73:f2:d7:0b:8b:93:51:
         87:b2:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:26 2026 by rpki-client