Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199186.roa
File:                     AS199186.roa (raw, json)
Hash identifier:          +nEBzLAKxvap31GBAjv5B3SHO8EgedsbISJ8EoZfITY=
Subject key identifier:   14:5D:8A:B7:54:0B:FD:16:38:B8:BE:86:EF:F7:64:2E:CD:15:EF:74
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       66F2B73F6A32315DD9E8033756361F611049CED7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199186.roa
Signing time:             Sat 09 May 2026 11:51:15 +0000
ROA not before:           Sat 09 May 2026 11:46:15 +0000
ROA not after:            Sat 08 May 2027 11:51:15 +0000
asID:                     199186
IP address blocks:        157.254.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 08:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f2:b7:3f:6a:32:31:5d:d9:e8:03:37:56:36:1f:61:10:49:ce:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  9 11:46:15 2026 GMT
            Not After : May  8 11:51:15 2027 GMT
        Subject: CN=145D8AB7540BFD1638B8BE86EFF7642ECD15EF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:c0:13:c1:8f:d3:e1:09:5d:b7:a6:15:41:
                    95:ae:32:af:ad:e8:40:88:13:37:e9:f7:df:4e:8a:
                    2b:35:1e:ed:10:d0:b0:f9:87:c2:de:70:5b:c9:4f:
                    f4:b8:9b:48:5c:ca:43:0e:40:b7:ce:ce:79:eb:ac:
                    cb:d0:3f:9c:2e:33:85:ef:91:a2:2b:33:ad:68:98:
                    95:4d:36:f8:7b:28:a9:c3:fc:a3:50:a5:08:0d:49:
                    78:ce:65:a6:40:5d:10:56:73:7e:e7:13:17:37:c7:
                    da:07:a4:52:bb:7b:07:d8:db:8f:33:6c:2f:73:18:
                    88:f9:f2:2d:23:c5:1e:60:f0:9e:af:44:db:46:a5:
                    68:c0:13:7b:ab:d1:06:bb:f1:6b:f9:53:49:11:45:
                    f9:a6:fc:84:43:cb:33:ec:d5:67:32:a5:3c:46:09:
                    ca:95:e3:69:fb:a9:a0:75:26:f6:7a:12:c1:fc:a7:
                    39:e5:f3:4d:a9:cc:87:f6:f6:2c:ee:21:19:06:b4:
                    4f:ef:cf:3c:79:57:0e:7e:af:2b:df:d0:f4:75:c1:
                    e3:0b:b3:e9:42:3f:ab:fe:8f:41:6d:54:7a:ba:8b:
                    78:82:c4:2d:16:1c:e6:06:e4:b4:a9:f9:f3:01:a5:
                    cb:37:42:5f:0a:5a:a5:bf:5a:eb:69:9a:3b:7d:65:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:8A:B7:54:0B:FD:16:38:B8:BE:86:EF:F7:64:2E:CD:15:EF:74
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS199186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:74:dc:ab:15:f9:a3:f7:03:74:b8:f6:44:00:6c:6e:6b:17:
         c6:08:8f:31:3b:5b:b8:0f:80:9a:6c:4c:24:3a:33:3d:b6:8a:
         ef:d2:03:da:8a:72:a8:b9:25:17:4c:2a:8c:18:e4:d6:92:46:
         33:7c:40:76:c2:6e:54:f0:2e:2a:bf:d8:77:51:82:74:c3:38:
         36:b5:4b:fa:b9:5b:51:6e:b8:72:30:ea:72:16:2f:c7:cc:92:
         9a:c7:91:c9:25:28:da:a1:94:86:0d:f7:8a:97:4e:cc:60:d8:
         d8:ec:46:59:0a:5e:38:21:72:96:5d:c0:af:89:6c:3a:f5:ea:
         e8:21:9a:0b:ae:de:dd:3d:be:bb:5e:fa:07:5d:cb:a6:14:f7:
         70:bc:2e:90:66:f9:56:81:dc:bf:79:ed:9e:38:9a:96:45:fa:
         e5:57:d6:ec:a1:54:6e:e8:2e:38:a3:f8:f2:94:ea:12:07:c5:
         de:af:ca:c0:2b:7f:4a:16:4b:50:c3:9b:51:80:ed:ba:52:ea:
         82:c3:ea:36:f1:e6:c6:97:ef:b7:73:0e:da:6f:97:19:5a:2c:
         30:e4:16:cb:00:52:1e:73:91:5b:9a:fc:8b:72:64:12:a3:69:
         ca:6b:7a:a9:7c:72:73:b2:eb:91:c2:f2:b9:19:d1:26:22:6f:
         58:cf:20:04
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUZvK3P2oyMV3Z6AM3VjYfYRBJztcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNTA5MTE0NjE1WhcNMjcwNTA4MTE1MTE1
WjAzMTEwLwYDVQQDEygxNDVEOEFCNzU0MEJGRDE2MzhCOEJFODZFRkY3NjQyRUNE
MTVFRjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwnAE8GP0+EJ
XbemFUGVrjKvrehAiBM36fffToorNR7tENCw+YfC3nBbyU/0uJtIXMpDDkC3zs55
66zL0D+cLjOF75GiKzOtaJiVTTb4eyipw/yjUKUIDUl4zmWmQF0QVnN+5xMXN8fa
B6RSu3sH2NuPM2wvcxiI+fItI8UeYPCer0TbRqVowBN7q9EGu/Fr+VNJEUX5pvyE
Q8sz7NVnMqU8RgnKleNp+6mgdSb2ehLB/Kc55fNNqcyH9vYs7iEZBrRP7888eVcO
fq8r39D0dcHjC7PpQj+r/o9BbVR6uot4gsQtFhzmBuS0qfnzAaXLN0JfClqlv1rr
aZo7fWVhWQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFBRdirdUC/0WOLi+hu/3ZC7N
Fe90MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE5OTE4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+DzANBgkqhkiG9w0BAQsFAAOC
AQEAYHTcqxX5o/cDdLj2RABsbmsXxgiPMTtbuA+AmmxMJDozPbaK79ID2opyqLkl
F0wqjBjk1pJGM3xAdsJuVPAuKr/Yd1GCdMM4NrVL+rlbUW64cjDqchYvx8ySmseR
ySUo2qGUhg33ipdOzGDY2OxGWQpeOCFyll3Ar4lsOvXq6CGaC67e3T2+u176B13L
phT3cLwukGb5VoHcv3ntnjialkX65VfW7KFUbuguOKP48pTqEgfF3q/KwCt/ShZL
UMObUYDtulLqgsPqNvHmxpfvt3MO2m+XGVosMOQWywBSHnORW5r8i3JkEqNpymt6
qXxyc7LrkcLyuRnRJiJvWM8gBA==
-----END CERTIFICATE-----
Generated at Sun May 10 14:01:47 2026 by rpki-client