Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa
File:                     AS62998.roa (raw, json)
Hash identifier:          k3cLi5QwZu3vo04eNxT9j23f6TSBsTOEL2arWYYCRp4=
Subject key identifier:   3C:FF:4E:B2:5B:9A:75:79:07:D3:3D:0C:ED:8E:F2:EA:09:2A:D8:2D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       547B59E00550BEE1072BF0DEAD5FA9E2EBEEC6F6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa
Signing time:             Mon 10 Aug 2026 14:51:13 +0000
ROA not before:           Mon 10 Aug 2026 14:46:13 +0000
ROA not after:            Mon 09 Aug 2027 14:51:13 +0000
asID:                     62998
IP address blocks:        107.174.106.0/24 maxlen: 24
                          155.94.130.0/24 maxlen: 24
                          155.94.138.0/24 maxlen: 24
                          155.94.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 15:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7b:59:e0:05:50:be:e1:07:2b:f0:de:ad:5f:a9:e2:eb:ee:c6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 10 14:46:13 2026 GMT
            Not After : Aug  9 14:51:13 2027 GMT
        Subject: CN=3CFF4EB25B9A757907D33D0CED8EF2EA092AD82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:08:bc:7c:40:0e:df:48:d6:15:bd:c1:d3:
                    ce:23:68:52:dd:8b:46:78:7f:09:98:3a:9c:c1:df:
                    b4:84:d0:8c:74:db:3e:7d:5f:f9:74:c3:83:f0:da:
                    da:4d:a4:65:c1:4a:75:37:6c:44:19:16:fd:72:36:
                    87:b3:da:27:17:4a:7c:ef:c1:de:a2:7f:4a:86:e9:
                    5c:81:28:1e:0e:fe:81:fe:e8:1d:23:06:0b:d0:33:
                    54:05:64:e3:dd:a9:a8:6c:22:98:36:ae:f7:fb:af:
                    5b:7d:e6:a9:5c:fc:da:30:70:ef:29:46:c8:fa:b9:
                    c6:c1:b2:3e:5b:b7:e7:81:3e:49:28:07:7f:61:ec:
                    bf:a3:78:1a:ce:d3:23:6a:6f:9c:9b:1e:64:d7:8d:
                    b2:1e:0a:13:db:f7:0d:63:8a:62:37:db:74:33:8c:
                    71:ed:14:4c:92:b8:35:ea:f5:9f:d3:75:76:f0:94:
                    fb:85:9e:f8:b0:30:79:39:2d:fa:3b:e8:18:e7:ee:
                    37:cb:0a:ae:99:6d:7e:c1:9c:64:51:31:d4:03:76:
                    0d:19:3d:53:cf:5a:d4:0b:6e:9d:f1:93:f3:e1:7a:
                    48:54:2b:d7:de:cb:70:9a:c1:49:18:03:7f:8d:7b:
                    be:8f:ab:aa:3c:79:f8:0a:43:2f:3d:a3:4f:3d:37:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:4E:B2:5B:9A:75:79:07:D3:3D:0C:ED:8E:F2:EA:09:2A:D8:2D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.174.106.0/24
                  155.94.130.0/24
                  155.94.138.0/24
                  155.94.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ec:bf:93:39:ea:01:b5:a3:bd:6e:1a:df:73:c2:19:6c:3b:
         e1:95:2d:df:a8:5b:1f:b9:10:44:be:58:64:db:2e:70:ba:a2:
         14:66:03:0a:8b:19:ed:04:98:ba:df:8d:eb:0d:6c:de:62:5d:
         f0:c9:34:e1:7c:5d:0d:91:1a:e8:6b:2d:b1:76:8b:84:9b:9b:
         5b:99:1b:2d:5d:ea:00:01:de:bd:1b:35:b7:6a:2d:3f:20:20:
         33:6a:bb:85:a2:ad:eb:39:24:09:22:25:8c:7e:d1:41:9b:79:
         46:fd:c0:2c:7d:a2:f5:89:4d:bc:9c:c8:27:9e:3f:a5:fe:d4:
         8a:a5:82:79:d6:64:8f:a0:73:ca:03:97:5f:be:6f:44:e8:34:
         92:41:f9:48:7f:c5:dc:41:0c:f3:93:a5:af:d2:d4:b3:23:35:
         70:36:d1:81:7e:fc:e7:29:b6:2f:66:26:9a:1a:c2:c1:13:ff:
         e4:4c:3c:9c:ce:9a:9f:b4:93:7e:49:3f:f5:60:77:57:be:48:
         d2:47:41:1d:70:d7:bb:7b:1b:0d:53:77:fa:fc:ed:79:f3:e5:
         13:d6:9a:60:8d:dc:70:d4:44:c2:02:48:4b:f2:d2:80:d4:ed:
         69:74:3d:89:8a:6a:58:0a:37:b3:fe:76:65:91:d1:ba:a2:1e:
         af:3d:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 20:18:56 2026 by rpki-client