Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS199186.roa
File:                     AS199186.roa (raw, json)
Hash identifier:          Hc1sZyZeO6AhKt5OZkKUjwPI0+KBAP/1qjCt3cvjxGI=
Subject key identifier:   67:E3:04:53:30:AD:81:9E:46:8C:60:C5:D2:8E:E5:FC:1B:4D:C8:A2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4068FF9BA43B73316931F56573642051B440535E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS199186.roa
Signing time:             Thu 23 Apr 2026 08:39:18 +0000
ROA not before:           Thu 23 Apr 2026 08:34:18 +0000
ROA not after:            Thu 22 Apr 2027 08:39:18 +0000
asID:                     199186
IP address blocks:        64.50.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Apr 2026 10:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:68:ff:9b:a4:3b:73:31:69:31:f5:65:73:64:20:51:b4:40:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 23 08:34:18 2026 GMT
            Not After : Apr 22 08:39:18 2027 GMT
        Subject: CN=67E3045330AD819E468C60C5D28EE5FC1B4DC8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:96:7d:24:40:0f:c9:c3:ec:5c:a1:0f:30:
                    18:5a:fe:f4:99:cd:ef:b7:37:b6:ff:34:ac:14:8f:
                    bb:43:4c:59:55:8b:28:0f:b6:b9:60:48:2d:de:55:
                    11:e0:3b:a0:1c:87:86:95:c8:7a:a1:6b:41:89:65:
                    8d:84:8f:d4:35:78:71:a3:f4:8b:1e:00:6b:35:ed:
                    5e:f2:44:89:a1:24:7c:e7:81:64:f1:de:d1:9b:07:
                    4b:0e:82:7e:c5:03:3a:73:87:e3:bf:28:0c:03:76:
                    60:3b:4d:11:5f:22:fc:31:7b:ac:94:c5:a4:44:0c:
                    f1:ae:e5:dc:87:fb:95:f7:cb:50:c8:10:06:45:b5:
                    b9:6d:55:26:6d:bb:e2:65:42:1e:28:73:4b:3e:c2:
                    66:c9:b7:85:cc:fd:5e:a3:75:d8:a9:0f:f3:82:59:
                    3b:97:c5:c8:76:cc:9f:fc:da:95:c3:21:64:dc:72:
                    fe:cb:33:10:66:59:3a:a9:80:eb:c7:0b:e1:51:48:
                    ab:a7:7f:20:06:ca:8d:33:78:94:89:b0:e1:5d:56:
                    3b:c3:d6:3e:de:e0:05:28:ac:fa:45:0a:63:d4:31:
                    b5:11:03:44:35:94:3e:c3:2f:5b:ad:3d:9d:b4:3d:
                    fc:e4:18:89:35:3b:c9:6a:73:c5:67:5e:2b:17:44:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:04:53:30:AD:81:9E:46:8C:60:C5:D2:8E:E5:FC:1B:4D:C8:A2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS199186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:44:97:74:8c:6b:1e:12:2e:19:52:b5:0a:ff:ef:6a:45:
         65:a9:58:5c:fd:e3:b8:da:bd:51:d7:28:5b:e8:a2:24:0f:c3:
         8b:ec:db:0d:be:aa:c5:2b:66:4f:59:32:2a:9e:50:22:50:cc:
         29:39:33:3e:c2:71:90:80:e7:54:13:57:9d:da:56:f8:72:d5:
         6e:6c:98:10:ae:cb:6d:3b:03:27:6c:18:b1:3c:dd:53:fd:13:
         c9:33:2f:f2:6f:a9:d8:77:c3:03:f8:2b:ab:01:c7:79:94:a2:
         68:ed:53:76:f4:34:2a:6b:e6:da:3c:fa:3b:35:29:00:ba:db:
         11:1f:91:33:19:f0:75:66:89:a0:c1:39:0c:00:47:1f:7d:15:
         5e:96:a3:33:bb:c5:61:1d:10:d9:13:f7:09:9f:ca:b6:07:18:
         bb:96:14:28:24:67:44:56:33:75:05:78:4a:02:91:68:13:82:
         59:a7:a9:5f:db:00:be:0b:56:d9:8e:75:46:e3:ab:3b:db:7c:
         31:33:8d:90:23:4c:df:b7:74:83:da:cb:b4:fd:8d:d4:7a:9c:
         c4:70:e6:58:fe:33:16:a8:c8:8e:a7:6a:22:a6:a1:3f:0c:4f:
         60:07:00:4a:01:bb:45:39:7a:3b:d8:76:c0:e2:bd:e3:8d:21:
         7b:3c:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 14:39:11 2026 by rpki-client