Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198250.roa
File:                     AS198250.roa (raw, json)
Hash identifier:          /Dfph9QaHq9pTG0qyZ4bGszENZ3DFxQ2f9S4ec7xgD4=
Subject key identifier:   D4:6E:30:AB:57:9B:66:D0:F8:CA:58:FC:9C:D7:91:87:51:41:38:31
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       703A3468EC747ECAAD2E061863F2813ECC642BE3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198250.roa
Signing time:             Fri 10 Apr 2026 09:43:04 +0000
ROA not before:           Fri 10 Apr 2026 09:38:04 +0000
ROA not after:            Fri 09 Apr 2027 09:43:04 +0000
asID:                     198250
IP address blocks:        64.188.7.0/24 maxlen: 24
                          72.11.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 17:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3a:34:68:ec:74:7e:ca:ad:2e:06:18:63:f2:81:3e:cc:64:2b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 10 09:38:04 2026 GMT
            Not After : Apr  9 09:43:04 2027 GMT
        Subject: CN=D46E30AB579B66D0F8CA58FC9CD7918751413831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:ff:42:ec:5b:58:b0:5b:f1:67:af:a5:70:
                    2a:56:2d:44:70:98:a9:b2:c6:cb:a8:04:43:93:3b:
                    1b:e1:17:e8:56:2d:8d:59:96:20:cc:43:40:fe:8b:
                    e6:32:17:18:68:e0:a6:22:f7:65:36:e9:a8:15:b5:
                    0d:80:4d:cd:3c:94:d6:91:b3:b4:c1:15:29:2b:28:
                    0e:9f:0f:68:51:1b:2a:9f:1c:e9:41:f3:86:c7:e7:
                    bf:90:9d:3c:21:43:40:f9:4b:b7:ec:e8:9a:99:58:
                    02:6e:92:ec:97:68:ae:59:2b:c8:68:29:5c:a9:90:
                    4a:e9:0c:c7:9e:95:c9:31:28:07:91:d9:3f:bd:b3:
                    78:a9:ed:ab:ab:56:08:95:ce:57:97:d3:0c:cd:a2:
                    4b:24:d4:fb:15:d8:b7:c8:85:1b:b0:08:00:e9:20:
                    92:64:74:28:f5:51:c6:7b:68:75:79:71:8b:6d:6e:
                    ee:aa:ee:5a:bb:16:b6:4d:db:ac:56:4d:84:3c:70:
                    f5:45:74:16:b3:f0:9f:02:71:f7:37:2b:ff:60:d2:
                    39:34:89:b2:8a:3b:76:97:c1:fc:58:7c:3d:7f:44:
                    b9:eb:bf:cf:ad:a1:71:b7:c5:95:e1:2f:18:d4:ad:
                    28:34:4c:5e:65:1d:8c:6a:f5:19:2e:55:a8:57:1f:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6E:30:AB:57:9B:66:D0:F8:CA:58:FC:9C:D7:91:87:51:41:38:31
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198250.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.188.7.0/24
                  72.11.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:58:1d:db:10:7d:d0:57:00:69:d2:fe:f1:35:a1:e6:e9:
         55:8b:a7:5e:90:4d:e1:d2:53:7d:c0:f0:4a:c0:b3:63:93:ed:
         ab:de:28:36:22:eb:82:a0:94:3a:63:81:d7:8b:aa:c1:25:f1:
         eb:44:2c:6d:28:0f:1f:8a:6a:7a:10:c2:5c:65:64:5a:92:9e:
         d5:77:0c:a4:91:06:17:2f:f8:18:d9:36:b2:30:f9:ef:f6:54:
         a5:6a:44:82:aa:4a:83:75:62:54:ec:df:70:cf:94:3f:19:ea:
         6a:f7:9a:f4:bb:7e:22:b1:cc:49:a2:0a:c2:34:f4:b9:c3:14:
         7f:81:69:65:9d:b5:01:e1:f6:e4:66:bf:82:ef:14:86:b2:71:
         45:b5:61:91:ab:18:00:45:44:55:03:93:51:10:a6:e8:c1:65:
         c5:24:2e:c0:3b:07:b9:ce:e3:60:01:27:05:6a:56:32:a2:df:
         a9:3f:80:9e:9d:29:a2:eb:46:92:6c:7d:43:8e:0e:a1:cf:a9:
         18:05:37:eb:22:ac:6c:d1:78:14:22:a7:42:09:30:a4:fe:a2:
         f2:64:e1:6f:33:ba:c6:1f:da:f7:a4:d2:7f:f9:b4:1d:8b:92:
         4d:5c:4a:80:14:c1:0f:25:5e:0b:29:88:0c:d7:4e:6b:7c:55:
         9d:a6:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 00:34:43 2026 by rpki-client