Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218943.roa
File:                     AS218943.roa (raw, json)
Hash identifier:          96s04ozLiVyBLuhJ8AsmLNonyWA3yW3c/uSTM3DcXso=
Subject key identifier:   53:AB:36:A7:D3:14:D4:26:B0:CF:89:D0:04:7C:73:DC:24:FD:50:45
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       48229519F85F9516D995E67BD3A0499A2A8F09B5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218943.roa
Signing time:             Wed 19 Aug 2026 16:48:35 +0000
ROA not before:           Wed 19 Aug 2026 16:43:35 +0000
ROA not after:            Wed 18 Aug 2027 16:48:35 +0000
asID:                     218943
IP address blocks:        104.234.202.0/24 maxlen: 24
                          104.234.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 04:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:22:95:19:f8:5f:95:16:d9:95:e6:7b:d3:a0:49:9a:2a:8f:09:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 19 16:43:35 2026 GMT
            Not After : Aug 18 16:48:35 2027 GMT
        Subject: CN=53AB36A7D314D426B0CF89D0047C73DC24FD5045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:41:38:d2:ce:7f:5e:22:1d:80:02:26:3c:
                    93:4c:eb:98:bd:c3:ad:f2:30:ae:c1:53:d5:83:67:
                    91:38:04:e6:13:87:62:84:24:64:4d:26:10:02:6a:
                    e3:e4:aa:d6:97:58:1f:26:a8:13:e2:13:25:0c:8f:
                    7f:57:9f:97:96:36:b4:b3:d4:27:f4:72:3e:ce:02:
                    55:95:a8:11:00:cc:bf:4e:0d:52:2e:9b:58:5b:cc:
                    05:99:b8:9e:5c:42:44:03:e8:95:e7:30:9a:ef:71:
                    81:4c:57:6e:40:01:65:92:01:1f:41:f8:1f:d7:da:
                    e1:22:32:d7:34:16:50:08:ce:cd:47:4e:60:61:f7:
                    f5:93:8d:7d:04:df:e8:20:80:c6:a7:bd:5c:bc:42:
                    03:9f:66:08:fa:70:ac:73:7c:e0:f1:bd:5a:6c:70:
                    b5:e7:21:49:3d:12:a7:a7:e6:a9:66:77:da:06:29:
                    60:c7:01:1a:83:5e:0d:4f:cf:d0:5d:94:88:64:40:
                    e0:b0:82:d6:48:0b:d5:b7:4f:5d:63:65:df:62:27:
                    3a:49:4a:fd:72:fb:bc:15:29:01:d3:87:d4:85:89:
                    87:b6:8b:5e:1f:e3:48:ce:7f:8b:72:5f:49:e4:b8:
                    09:57:7f:90:1c:ec:5b:54:6a:2b:93:ae:d3:0b:28:
                    19:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AB:36:A7:D3:14:D4:26:B0:CF:89:D0:04:7C:73:DC:24:FD:50:45
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218943.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.202.0/24
                  104.234.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:78:8d:66:00:c9:16:b0:c6:82:87:f1:6f:7b:b8:da:dc:1f:
         86:55:2a:5d:dc:2b:20:86:73:2a:30:1a:e4:eb:7b:d5:5b:f4:
         a7:c3:60:dd:cf:ae:ac:9a:db:62:12:8b:41:f6:7e:54:ec:bf:
         d9:7b:01:92:16:84:3d:fe:52:ee:d4:f5:30:7f:c3:cc:e0:82:
         d4:4b:7b:71:80:15:0e:3c:2c:e7:a5:c0:68:13:83:8c:cb:16:
         83:bf:91:c0:94:75:34:c9:22:42:83:db:ab:b1:6c:62:9e:61:
         a8:82:a5:ab:a2:af:b0:b8:91:c7:d3:ca:46:41:13:f0:a9:88:
         aa:a4:57:3d:68:d8:c4:ba:96:d3:e9:f5:ce:95:73:b1:67:f1:
         54:29:66:3f:a4:6a:6e:18:ad:7c:ef:4a:fb:d9:98:0c:69:de:
         28:f0:ab:c8:48:6c:ec:2d:05:92:10:a3:8c:46:7c:67:fa:75:
         46:c7:70:26:2d:ea:f9:6b:91:f9:d9:bc:d7:f1:cb:fc:ab:f7:
         5c:eb:ea:c7:5d:f0:00:20:00:1f:ea:08:b8:2e:09:43:aa:11:
         a7:aa:75:bb:fa:63:09:b2:73:bd:fb:16:cb:da:46:cb:7b:af:
         55:2b:dd:d6:f9:28:4e:b2:2a:83:4d:28:43:0a:f8:04:47:13:
         63:6e:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:50 2026 by rpki-client