Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS198566.roa
File:                     AS198566.roa (raw, json)
Hash identifier:          YdU+vok/qYoiRcn3GSWmuX1coQB+RbkG14hZ9sGT0fM=
Subject key identifier:   BF:60:0A:91:D9:BE:B5:0E:B5:D2:BA:D4:70:7B:51:9C:74:EA:02:C8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       74D25C1F63564BE29D3D3E47B51D89F49D03AAF1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS198566.roa
Signing time:             Mon 17 Aug 2026 21:12:48 +0000
ROA not before:           Mon 17 Aug 2026 21:07:48 +0000
ROA not after:            Mon 16 Aug 2027 21:12:48 +0000
asID:                     198566
IP address blocks:        157.254.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d2:5c:1f:63:56:4b:e2:9d:3d:3e:47:b5:1d:89:f4:9d:03:aa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 17 21:07:48 2026 GMT
            Not After : Aug 16 21:12:48 2027 GMT
        Subject: CN=BF600A91D9BEB50EB5D2BAD4707B519C74EA02C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:a7:81:65:49:a1:88:9b:6e:0a:3e:58:7e:
                    18:d8:50:22:95:f5:06:89:f4:f1:6d:37:35:ad:37:
                    63:db:c6:08:77:e5:1e:e1:9e:16:c6:61:d4:8d:95:
                    2a:76:fd:0f:f3:1c:2d:88:bd:57:d7:5b:5f:87:8e:
                    58:14:36:73:27:5e:0f:50:56:69:05:6c:81:be:56:
                    77:44:31:e5:86:6a:f4:9a:a9:b7:c9:26:46:25:ee:
                    7a:ee:d5:4b:eb:41:bb:cf:42:8f:8c:3e:66:2d:06:
                    10:02:18:d3:e7:a3:57:5e:ee:7e:33:b9:d4:3f:d2:
                    1a:67:45:2b:d7:f7:b5:41:89:9f:e5:f1:d9:36:1a:
                    84:02:76:f7:12:8e:95:95:a0:be:fb:8e:da:c9:10:
                    1c:b4:c7:1b:ea:1e:56:50:85:df:c2:92:ca:4f:98:
                    c8:7f:52:32:6e:44:b7:13:97:1e:99:3a:41:be:23:
                    64:51:e4:27:9b:33:01:3b:95:f3:ab:88:54:51:ac:
                    1b:9e:eb:3f:98:5a:1d:4f:f3:13:01:b4:21:ed:66:
                    13:af:f9:de:70:b4:9d:3e:98:0c:c7:25:f2:e8:40:
                    ce:a7:10:01:fb:44:34:dc:c5:28:d9:36:d3:1b:15:
                    4f:9c:eb:01:9f:f2:d5:bc:8a:36:c8:68:84:39:00:
                    e4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:60:0A:91:D9:BE:B5:0E:B5:D2:BA:D4:70:7B:51:9C:74:EA:02:C8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS198566.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:0f:f4:f1:98:22:e4:a4:7d:f7:b7:db:54:31:e8:2e:27:
         20:31:d8:6e:f3:63:47:2d:a4:06:51:59:c0:d6:7c:f4:c4:74:
         23:25:d5:2f:ec:30:4b:46:5c:d9:8f:d1:d5:cf:e0:ee:69:6e:
         9c:19:c3:c1:6f:02:2e:67:41:80:1c:66:eb:ff:63:9b:6c:dd:
         65:59:14:3f:5d:c4:5b:b5:bf:b2:07:5c:8f:e7:3f:1f:02:76:
         1a:22:ac:f3:a6:fb:db:53:a3:1f:58:0e:fd:cc:18:d4:86:a7:
         05:ad:c8:c1:a3:32:51:40:37:37:56:12:5f:65:c7:cc:0a:55:
         e2:75:26:d8:fc:4e:af:e9:3c:9a:06:35:7a:c5:b2:46:b7:50:
         68:80:d5:80:19:3d:9d:e1:94:ac:3b:8a:42:78:d2:f5:a4:18:
         e0:f1:64:fc:bb:90:1a:1e:3a:be:db:68:1d:10:d7:6e:d1:04:
         96:54:8e:71:a0:5e:4d:93:d4:71:75:9b:38:80:db:26:49:32:
         9d:2d:08:ee:6f:ac:aa:9c:6c:b4:4f:cb:8e:00:db:b1:e6:7d:
         c6:58:b1:74:cd:e2:ae:d5:b6:8a:a0:09:4a:75:9d:be:52:8c:
         e2:68:c6:f8:59:1d:fb:09:fa:7e:a2:3d:d7:68:c5:e2:7c:d4:
         e7:bd:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 13:19:56 2026 by rpki-client