Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199218.roa
File:                     AS199218.roa (raw, json)
Hash identifier:          u6PQYFSmj6215A3SIPma1NZc6KWy0OutKfqCfKZOlNg=
Subject key identifier:   C9:58:3A:BD:8A:CC:0B:27:DB:E4:B3:59:86:92:BB:3B:7C:ED:C6:B0
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       451C3D0E0E9041DD33F97DEB5C91C6C4FB927808
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199218.roa
Signing time:             Wed 13 May 2026 13:05:00 +0000
ROA not before:           Wed 13 May 2026 13:00:00 +0000
ROA not after:            Wed 12 May 2027 13:05:00 +0000
asID:                     199218
IP address blocks:        104.234.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 05:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1c:3d:0e:0e:90:41:dd:33:f9:7d:eb:5c:91:c6:c4:fb:92:78:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 13 13:00:00 2026 GMT
            Not After : May 12 13:05:00 2027 GMT
        Subject: CN=C9583ABD8ACC0B27DBE4B3598692BB3B7CEDC6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:a9:1b:64:aa:2b:fb:0a:2e:f6:5a:db:8d:
                    b0:12:e0:ef:f7:9d:50:5a:ee:c3:e8:98:9a:3c:1c:
                    f1:90:6d:b0:a0:00:9a:25:51:21:31:e6:07:bb:da:
                    b6:9f:cb:cb:13:49:06:25:3a:12:c9:4b:fb:99:c4:
                    e4:28:f2:74:30:f8:7c:a7:26:19:e7:1b:d8:0b:c0:
                    95:5e:79:b4:1e:e2:c7:0f:4e:31:2d:4f:fb:4f:59:
                    8b:6f:06:34:1c:ff:d2:8e:c9:63:01:8d:62:2b:dc:
                    3b:f3:f8:61:33:eb:71:9c:5c:5b:aa:48:d7:98:cb:
                    24:34:e3:ce:02:44:56:a5:1b:e5:35:46:ff:48:ea:
                    53:37:e7:fb:4d:39:4d:c5:ab:35:72:5e:b4:58:0e:
                    9a:98:49:d7:2e:7a:9c:b7:5e:95:80:94:9e:d4:26:
                    5e:3f:5a:25:37:f2:6c:3f:8f:ba:3b:69:55:2b:e5:
                    b8:2b:32:da:06:37:99:4a:d7:50:cf:d0:fb:7b:9c:
                    8d:0a:98:f2:d8:6c:de:49:1f:3a:56:63:ea:e0:41:
                    c5:3b:c1:dc:13:ff:62:f3:91:d5:92:05:5f:d6:cf:
                    24:78:d4:fd:2f:34:d4:f9:e0:72:86:2f:6d:80:c1:
                    df:73:08:60:95:11:78:07:a2:e0:c8:e0:28:6e:68:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:58:3A:BD:8A:CC:0B:27:DB:E4:B3:59:86:92:BB:3B:7C:ED:C6:B0
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:67:0f:a8:d7:fc:49:19:d0:0e:f3:c1:1d:13:37:74:f5:51:
         5f:86:40:67:6a:46:2f:a2:f4:72:d9:b3:73:4f:5d:a1:a1:e1:
         fc:05:39:ef:1a:29:c3:91:d9:30:c0:52:42:92:a7:bd:5b:83:
         59:1a:e8:15:72:e5:7e:97:de:2a:37:6e:f2:ee:13:8f:41:66:
         f3:7e:1c:1a:61:62:9f:fa:18:f3:62:6d:9e:87:7c:9f:dd:c7:
         0f:d6:d8:c8:f3:d3:ef:3b:d4:da:57:5a:f5:c9:9a:59:99:0d:
         fb:73:2d:bd:a1:91:63:77:60:6b:b6:8d:af:6d:57:ab:ef:d7:
         52:fc:4d:f2:1d:e1:86:28:d3:7c:7d:67:51:cb:1d:5b:ab:51:
         71:fb:0f:30:4b:e8:68:93:d8:2d:9f:07:f1:01:8d:a6:bc:3b:
         4e:70:c9:e4:d5:cf:07:ce:9e:f4:99:83:d9:59:8a:bd:1d:1b:
         d2:76:3f:7e:24:04:05:c5:bd:1c:c7:12:a8:85:eb:85:d6:6d:
         99:40:1e:5b:15:9c:60:55:e3:6f:6c:ab:3a:51:33:91:f9:d3:
         8e:94:28:45:91:89:80:93:7f:70:67:f1:c3:90:ad:f3:f6:5b:
         8c:a3:b2:b5:53:ec:83:4a:3b:43:a3:e2:e7:fd:d8:2a:06:d0:
         0f:29:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:21:43 2026 by rpki-client