Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS219309.roa
File:                     AS219309.roa (raw, json)
Hash identifier:          fkDVlsz2KSq1/5XZYwkElRh3jY+A5A4r+O5hJcIWhQ0=
Subject key identifier:   A8:9A:F6:F0:46:DF:CC:0F:8B:1A:87:D3:67:E1:AD:DE:6C:E9:A7:12
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7619C1AE6ED693F6EC56F5EB999B71E69D71534E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS219309.roa
Signing time:             Thu 09 Jul 2026 08:36:26 +0000
ROA not before:           Thu 09 Jul 2026 08:31:26 +0000
ROA not after:            Thu 08 Jul 2027 08:36:26 +0000
asID:                     219309
IP address blocks:        64.188.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 10:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:19:c1:ae:6e:d6:93:f6:ec:56:f5:eb:99:9b:71:e6:9d:71:53:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  9 08:31:26 2026 GMT
            Not After : Jul  8 08:36:26 2027 GMT
        Subject: CN=A89AF6F046DFCC0F8B1A87D367E1ADDE6CE9A712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:85:31:6e:63:9c:c1:ad:95:f4:12:7f:54:
                    fe:f5:cf:8c:02:e0:7a:19:09:3c:9b:1a:80:b9:25:
                    45:05:6b:23:1d:0f:a9:4d:d4:ce:c0:d5:d8:d1:ec:
                    c5:27:35:9e:54:58:04:7b:e6:17:53:c2:7f:4f:52:
                    68:93:52:38:73:89:d8:60:44:d5:1d:f8:eb:99:49:
                    b5:e9:d4:71:e1:c9:bb:b3:d9:0d:de:13:82:03:1d:
                    30:c7:7e:c7:c2:31:f1:8b:a2:18:32:a8:f9:99:75:
                    5f:84:3f:13:d1:16:00:90:32:60:84:aa:51:67:6d:
                    12:5a:1b:c9:3a:0d:17:a9:37:8d:6b:1d:7a:4c:f0:
                    d6:83:0e:8a:2c:6a:9a:32:a1:dc:c0:68:b1:2c:9f:
                    c9:00:9d:3b:c5:ba:e5:e7:53:93:13:e0:75:c1:41:
                    31:08:25:19:90:78:2a:6d:7b:38:b2:2d:7a:2a:a5:
                    6c:48:d9:29:3d:09:8d:d1:27:05:61:ad:19:ee:9b:
                    7e:7b:3c:f4:c8:91:ec:27:7f:38:26:80:00:62:10:
                    44:dc:31:2a:e2:e2:25:aa:9d:c4:16:e1:16:00:f6:
                    1f:bc:79:c9:6e:be:78:d9:29:ac:bf:5a:f6:e2:db:
                    1a:e4:2d:95:12:78:a0:d4:87:d8:f8:00:28:da:da:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9A:F6:F0:46:DF:CC:0F:8B:1A:87:D3:67:E1:AD:DE:6C:E9:A7:12
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS219309.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.188.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:88:06:31:a3:5e:d4:b4:5c:27:59:82:4d:3b:94:a5:93:
         1b:35:cc:b8:db:fe:44:95:6a:f5:9a:22:f8:64:96:5e:95:d5:
         17:4c:08:a2:ec:eb:2f:2b:a8:9e:ef:ca:4b:da:0a:0e:63:be:
         f8:bf:d6:59:f4:a2:ab:a7:d6:2b:11:f0:a2:b6:c1:cb:47:c0:
         c7:d7:8a:4e:c0:6f:8a:51:15:30:73:3a:07:78:bc:8f:9b:76:
         39:56:87:38:24:9f:60:7e:d5:12:b5:ef:58:cc:72:73:95:11:
         80:8f:58:c6:14:26:c3:68:4f:33:8d:56:7d:3d:44:c2:0c:38:
         c3:88:9d:b1:a4:fc:5f:0c:10:42:a0:be:1e:a6:79:78:9b:6c:
         41:0f:7c:17:62:f0:78:db:da:20:a9:cf:9c:04:60:66:9d:6a:
         0f:6e:0d:63:0e:f0:72:49:9f:73:4e:a7:e9:82:21:f9:df:5b:
         5d:d0:fc:69:06:26:98:56:91:51:81:cf:65:e7:f9:32:51:09:
         f4:17:c8:70:64:e1:94:b0:43:ca:30:42:0b:f4:56:94:a7:42:
         d1:c3:a9:86:11:0c:d8:6c:f6:6d:e8:80:9a:e3:56:2e:f9:ac:
         74:3a:58:42:76:0a:30:9a:c4:5d:60:61:00:9d:06:a9:fa:17:
         a1:fd:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 12:24:51 2026 by rpki-client