Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS197359.roa
File:                     AS197359.roa (raw, json)
Hash identifier:          O6bEJjXRFfUZefejaf3cmhW4dIjnOzeg5VHL0wVkAvo=
Subject key identifier:   F6:8D:39:96:BD:EA:F1:58:B0:F5:4C:38:F5:7E:6D:B1:75:04:62:48
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5D90ECA8A2EFA9D5445A647D1E1C1475168A6BBE
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS197359.roa
Signing time:             Tue 26 May 2026 15:50:15 +0000
ROA not before:           Tue 26 May 2026 15:45:15 +0000
ROA not after:            Tue 25 May 2027 15:50:15 +0000
asID:                     197359
IP address blocks:        23.94.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 13:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:90:ec:a8:a2:ef:a9:d5:44:5a:64:7d:1e:1c:14:75:16:8a:6b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 26 15:45:15 2026 GMT
            Not After : May 25 15:50:15 2027 GMT
        Subject: CN=F68D3996BDEAF158B0F54C38F57E6DB175046248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cc:31:b9:d2:56:79:6a:9a:b4:d0:f5:ec:31:
                    38:79:e1:3f:65:70:fa:3a:f7:d8:37:a3:13:9a:1f:
                    5a:6f:a5:ac:a8:a9:f6:bd:c8:f1:b5:8e:7b:5c:ac:
                    be:df:9b:49:be:ed:3d:eb:d1:70:83:a4:ae:44:1e:
                    5f:9f:5e:6b:95:c6:db:fe:cf:aa:d6:72:5d:ba:5a:
                    e8:35:04:a4:09:b5:e5:67:c4:df:68:9d:aa:80:da:
                    b5:ad:3f:6f:86:29:19:5e:2e:cd:52:a4:59:fa:36:
                    f2:b6:86:61:f5:59:98:58:89:65:6e:e5:b5:22:45:
                    92:5e:79:ab:a1:ce:17:96:7b:6f:fe:5a:f1:0b:1b:
                    c2:da:b6:3e:99:46:5e:88:19:44:7d:5b:ba:6f:0a:
                    47:94:b3:28:46:77:d4:97:d8:b1:4c:30:54:60:a9:
                    94:cf:94:08:df:5f:1a:de:1d:6b:20:8b:18:68:b5:
                    4f:ed:11:4e:fa:28:aa:1e:c0:35:ae:d9:8e:f8:20:
                    63:95:e3:ab:f1:b2:9a:3d:ae:15:40:ad:77:b9:43:
                    a5:55:a1:9b:1a:72:4e:68:16:57:a8:5c:05:3e:65:
                    59:4d:2b:6e:74:93:97:7a:92:be:3d:db:a3:3c:70:
                    55:f0:0e:0e:bc:90:c9:d1:d5:f1:c2:38:9d:2d:95:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8D:39:96:BD:EA:F1:58:B0:F5:4C:38:F5:7E:6D:B1:75:04:62:48
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS197359.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:13:02:87:bd:50:78:0f:13:66:86:b4:af:ef:70:c6:ac:cf:
         f9:23:ff:28:ea:ec:74:5e:26:a8:5e:cd:44:02:b9:7e:91:4c:
         3b:27:45:99:a1:ab:93:f2:44:7b:42:07:b2:84:e2:1f:c6:db:
         ea:74:a7:86:95:38:7c:02:9a:f9:db:d9:2d:10:aa:ee:e0:2e:
         40:57:1a:bf:87:5e:7d:49:ee:16:10:bd:a6:aa:ce:b3:31:08:
         9a:29:66:7c:24:db:da:7b:5b:9f:30:44:41:c7:d3:40:5a:43:
         84:dd:38:ce:7d:6a:4d:6d:39:1a:3b:c0:b0:b4:f1:d1:3f:27:
         85:bc:1d:4b:25:85:a2:53:a2:90:be:7f:5a:43:6a:7e:1f:27:
         80:86:dc:04:a9:c5:3b:1a:8b:a8:c2:15:04:56:55:2f:e6:82:
         54:37:bc:15:7f:6a:b5:55:2e:5a:58:4a:7a:52:41:c5:2b:c4:
         2c:e6:2b:4c:15:11:ff:86:0d:9b:f8:ea:a2:bc:c8:52:a2:dd:
         db:ef:d4:e1:9c:0b:13:c5:3a:a5:18:fd:98:7a:fd:ec:f4:70:
         ce:4e:77:14:2e:55:9d:c2:fd:47:b6:9f:5d:d0:c7:30:56:9e:
         a2:7f:ca:ec:79:08:b4:03:d8:ca:70:c7:04:01:77:c3:0a:6c:
         35:6d:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 15:29:37 2026 by rpki-client