Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS6698.roa
File:                     AS6698.roa (raw, json)
Hash identifier:          95+g8S0qNqixza5G6be+7hBP8VLU1OX4JTkjBk/OR5Q=
Subject key identifier:   7E:03:28:82:AC:05:66:B0:57:BE:A2:C1:BD:A9:D2:25:8A:DE:97:83
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3A32F8BD9517291969921711158615E4547EC8D8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS6698.roa
Signing time:             Thu 23 Apr 2026 15:38:28 +0000
ROA not before:           Thu 23 Apr 2026 15:33:28 +0000
ROA not after:            Thu 22 Apr 2027 15:38:28 +0000
asID:                     6698
IP address blocks:        40.223.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 04:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:32:f8:bd:95:17:29:19:69:92:17:11:15:86:15:e4:54:7e:c8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 23 15:33:28 2026 GMT
            Not After : Apr 22 15:38:28 2027 GMT
        Subject: CN=7E032882AC0566B057BEA2C1BDA9D2258ADE9783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:93:2e:e6:36:99:df:47:6c:dc:38:be:b4:
                    fa:88:4a:c6:16:3a:84:2a:0e:9b:4d:ce:15:20:76:
                    ad:1c:63:9e:f1:fb:87:62:c0:d9:a7:86:6d:6c:0d:
                    ac:f0:6b:00:a1:0a:bc:cb:e5:e0:9d:78:ac:93:1e:
                    06:83:b4:f5:6b:95:1b:b3:e9:71:1d:9e:66:1d:95:
                    ac:1d:af:0c:fc:16:37:72:9b:49:1c:cb:8a:7d:b4:
                    ab:a5:76:12:54:49:dd:f3:4f:ad:c8:02:95:86:5b:
                    3f:0c:66:fc:5c:36:41:50:b3:a3:a3:dd:86:a8:fa:
                    e9:b0:bb:d4:87:75:b7:0d:43:de:8d:ac:e1:77:d5:
                    a7:fc:c9:b9:65:64:e4:d9:33:df:e9:42:8b:dd:50:
                    5f:a8:29:03:fa:e0:f2:c3:ba:b3:eb:02:8e:c6:4c:
                    89:13:32:39:9a:9e:da:a9:c9:31:5b:03:a4:2c:27:
                    f9:79:f5:23:50:00:bf:68:f3:f9:5a:cc:52:d5:79:
                    a4:0d:b6:fe:42:e4:8d:38:44:4f:3f:cf:0e:7b:23:
                    47:a2:cb:d7:52:00:3f:49:70:0b:1b:0a:34:96:85:
                    31:c8:ee:4b:54:98:d8:b3:df:c2:8f:94:e7:ab:ed:
                    7a:1d:b0:51:db:a7:38:80:00:37:c0:3f:45:d8:d3:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:28:82:AC:05:66:B0:57:BE:A2:C1:BD:A9:D2:25:8A:DE:97:83
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS6698.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:91:8d:e9:12:42:63:e7:45:84:50:9e:75:e4:55:89:fa:
         25:ec:70:f7:8d:b0:ef:b9:72:ae:f6:b1:66:75:71:3c:e4:79:
         96:7c:c6:65:3c:5f:82:c3:ea:4d:2f:0d:44:47:a0:ca:d4:f7:
         9f:2b:31:24:92:fe:f5:fc:ea:29:e8:6e:bf:3c:bb:8f:b7:3c:
         4a:d4:3d:de:f8:e0:e5:db:d8:aa:db:16:83:b5:41:d5:62:b8:
         10:0b:b9:b1:9f:c7:4b:cf:f5:88:91:10:dc:87:f7:0f:8a:9d:
         7b:c0:d2:6d:23:96:22:72:b6:99:7e:e3:0d:90:a7:d0:87:28:
         61:e3:f1:f9:d9:b3:27:bf:7e:af:1b:ef:0f:ed:33:b1:47:7d:
         c2:6f:0b:65:99:91:2d:b9:fd:eb:e6:64:0d:e3:b3:ec:69:54:
         3f:de:ce:89:4d:73:c9:31:da:08:be:02:76:36:ab:e5:0c:19:
         b2:2a:a5:2d:81:5c:33:e0:18:6c:d6:d4:a6:eb:a2:21:62:46:
         8f:46:f3:1d:a7:e6:0d:b0:b5:ca:a4:77:1a:b2:f6:a7:bb:1e:
         77:5e:ec:1b:0a:9a:ca:fc:9c:c1:8e:3c:ae:af:75:65:c1:48:
         43:35:a0:c8:9d:ba:a6:6f:ef:33:5d:d6:2a:9b:a7:16:0d:49:
         26:fa:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:38:57 2026 by rpki-client