Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138156.roa
File:                     AS138156.roa (raw, json)
Hash identifier:          d2f61Ecvo9oS9lZw5LS9a5+yEaE7ntdVvlw6LfiYf3s=
Subject key identifier:   87:17:FF:52:DD:FE:AC:F2:31:C3:48:AF:74:FF:9D:88:F5:BB:EB:1A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       371A2D134C4FF0ACDF236F3C6D168285927A883F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138156.roa
Signing time:             Wed 15 Jul 2026 17:36:09 +0000
ROA not before:           Wed 15 Jul 2026 17:31:09 +0000
ROA not after:            Wed 14 Jul 2027 17:36:09 +0000
asID:                     138156
IP address blocks:        66.212.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1a:2d:13:4c:4f:f0:ac:df:23:6f:3c:6d:16:82:85:92:7a:88:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 15 17:31:09 2026 GMT
            Not After : Jul 14 17:36:09 2027 GMT
        Subject: CN=8717FF52DDFEACF231C348AF74FF9D88F5BBEB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:b0:d7:1f:d1:17:16:62:77:fb:7b:09:17:
                    e6:6c:d8:ab:c5:0e:9e:3a:ae:eb:68:dc:f6:03:60:
                    ff:bc:84:da:53:17:cc:7c:dc:72:ef:12:70:a0:23:
                    d5:fb:d6:c5:15:b4:a5:58:54:1a:03:e9:69:08:7b:
                    1c:44:4c:b8:1f:57:0c:81:ef:94:9c:aa:7a:1c:e7:
                    aa:73:c8:89:a4:f8:e7:d5:fa:0c:a8:30:1f:30:3b:
                    4b:90:7d:0c:ae:1d:3d:21:3c:4f:e9:90:e4:2c:c7:
                    63:8e:33:fe:b4:a9:b1:0b:6a:50:a1:da:78:52:96:
                    49:32:01:38:3c:02:8f:00:7f:69:41:88:ff:c2:7c:
                    99:b2:02:96:55:47:ba:f5:db:bc:75:22:84:db:cf:
                    cb:77:85:e1:1b:5e:45:b0:03:21:48:1d:e5:b9:c9:
                    3d:e6:88:8a:33:f8:d5:87:f6:f1:22:9d:4b:28:25:
                    9e:a5:ef:f0:bb:8b:6d:ce:f2:53:5f:67:08:54:7d:
                    c2:72:27:1e:66:51:7f:d6:a1:18:b4:3b:14:3b:cf:
                    4f:c6:9b:81:f6:83:6b:74:3a:9d:31:bd:aa:eb:a2:
                    0b:82:89:7f:fc:fa:0c:c2:1c:6e:3f:74:7f:fd:db:
                    ab:9a:7d:a3:bb:82:59:6a:80:d3:33:b4:8c:96:20:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:FF:52:DD:FE:AC:F2:31:C3:48:AF:74:FF:9D:88:F5:BB:EB:1A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:6d:f1:0b:51:3e:d2:af:15:12:cb:c9:8d:58:fc:ea:9e:ae:
         8e:ce:ba:4a:ed:ff:cb:e0:4a:bc:7c:14:6e:66:a2:07:8c:8a:
         2e:9e:5b:71:ac:60:07:d7:c1:90:3f:2a:7a:c6:63:51:85:4a:
         a6:60:ab:bd:97:73:05:fd:57:06:09:d9:23:3e:24:80:2c:db:
         85:5f:96:03:85:82:3a:e1:92:17:6c:f6:94:63:d0:62:d9:b3:
         31:ba:f1:69:82:66:75:0d:cf:aa:46:26:0f:c9:96:e5:6b:d3:
         c3:fe:60:8f:8c:10:dd:b2:98:b6:cf:cf:a0:e1:30:39:1e:d3:
         c3:b7:ff:bb:c2:53:af:49:e9:82:3c:ce:b9:35:fa:64:81:07:
         63:a8:c4:e9:2e:6f:e4:01:70:97:96:39:a4:39:8d:e4:3c:e8:
         43:4c:d1:40:c4:c5:81:e8:18:01:26:a0:d1:37:a7:44:9d:0c:
         39:38:31:6a:42:3e:c3:09:1c:e9:5e:f3:36:eb:47:ed:74:0f:
         a2:8d:20:8f:ba:52:bd:24:a8:b5:ac:e2:9a:81:ce:f2:75:ec:
         8c:c8:c7:b8:91:2b:6b:1c:a1:5b:e0:f7:c6:0a:62:f8:9c:6a:
         33:d1:65:a5:f7:29:db:96:96:e9:f3:85:c9:b0:8b:f9:b9:83:
         7c:04:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 14:03:50 2026 by rpki-client