Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS218965.roa
File:                     AS218965.roa (raw, json)
Hash identifier:          vmodidZRwwce1kpkaGg6cNdAQKsHrELEPDFQFPi6OR4=
Subject key identifier:   74:B5:52:7B:C2:E2:ED:C1:94:F3:7C:24:F2:F3:8B:CA:02:28:45:85
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4AE0FE4DC69E449DD68CCD7E02C8141301B1CF7F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS218965.roa
Signing time:             Thu 03 Sep 2026 12:11:51 +0000
ROA not before:           Thu 03 Sep 2026 12:06:51 +0000
ROA not after:            Thu 02 Sep 2027 12:11:51 +0000
asID:                     218965
IP address blocks:        192.228.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 17:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:fe:4d:c6:9e:44:9d:d6:8c:cd:7e:02:c8:14:13:01:b1:cf:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  3 12:06:51 2026 GMT
            Not After : Sep  2 12:11:51 2027 GMT
        Subject: CN=74B5527BC2E2EDC194F37C24F2F38BCA02284585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:e7:74:c7:47:f0:f6:ee:d6:56:74:4d:c9:
                    74:ec:90:b3:48:7e:d4:9a:96:a7:87:56:24:62:ac:
                    45:96:2e:6d:59:9c:85:09:e6:3c:dd:da:06:8e:1c:
                    eb:b2:54:44:3e:92:ec:86:e2:34:43:f4:b0:98:bf:
                    76:b5:5d:ba:cb:0f:24:7f:82:4b:b7:13:0c:4b:ea:
                    74:9e:21:c4:76:b1:85:e5:33:cc:33:65:76:9e:e2:
                    d8:24:cd:9b:60:f5:fb:5a:b1:bb:fb:58:46:4c:6b:
                    f0:d4:81:62:5b:02:4f:57:89:c1:81:a8:91:ab:12:
                    50:9c:8b:4a:40:75:4c:5f:57:2b:fd:ec:97:ca:2a:
                    48:2c:b3:03:e1:da:4b:e5:8f:7a:e1:16:02:0a:75:
                    e3:e7:ac:19:47:42:e6:58:62:2c:12:62:30:d6:14:
                    d2:e5:1c:37:bc:7c:c4:96:3d:cd:24:e0:96:fc:e8:
                    7d:d9:2e:e3:d0:6b:2c:7b:ea:7a:e0:73:86:e9:d9:
                    0d:a0:b5:6d:98:48:b8:72:b3:37:15:a9:77:94:01:
                    fc:1f:e7:f0:02:bb:12:df:eb:9e:2e:06:3d:ca:4c:
                    e3:0d:83:a5:99:ae:2b:27:4d:ed:49:43:4d:77:b7:
                    77:f2:f9:2d:31:d7:5b:e3:7a:35:fb:31:21:af:38:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:52:7B:C2:E2:ED:C1:94:F3:7C:24:F2:F3:8B:CA:02:28:45:85
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS218965.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c7:dd:a3:ed:0a:4c:22:30:5f:3e:8c:49:44:96:36:9f:31:
         5f:85:40:ae:ef:fd:c3:dc:a4:71:ac:39:05:c5:8a:37:b1:e9:
         ff:57:7f:25:a9:66:fc:d1:c5:0b:20:dc:69:83:d8:1e:7e:f9:
         0e:26:e9:16:cb:a7:bd:5e:85:f3:ce:4f:5b:31:7b:4a:1a:9e:
         a0:cf:59:bc:55:4c:69:f6:9a:30:2b:87:b2:55:07:23:48:7c:
         2c:ee:97:ad:37:a2:00:95:75:46:dd:6c:0b:1b:f8:1a:94:32:
         5a:38:bf:51:82:58:11:7b:9f:53:68:fe:ae:bf:39:25:4d:67:
         e1:7c:a3:85:96:94:60:40:2c:c2:6c:0e:d1:f1:21:ed:c9:2a:
         b4:c5:9b:1d:63:77:41:c4:75:06:71:51:f7:7d:e3:8e:6d:a6:
         a1:94:72:74:7d:05:c4:97:eb:70:78:91:3a:73:79:35:3e:f8:
         00:4f:1a:7e:b4:11:9d:65:5d:78:b6:95:37:ef:9d:76:41:48:
         66:f9:65:0a:88:39:eb:27:69:79:4b:7f:11:77:83:77:ad:52:
         c9:5f:62:19:5c:1e:52:20:0d:bf:04:9c:e9:8e:82:11:b3:19:
         e0:82:57:f3:2a:21:a3:34:22:73:67:2e:f7:09:62:cb:14:87:
         f8:46:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:16:54 2026 by rpki-client