Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205548.roa
File:                     AS205548.roa (raw, json)
Hash identifier:          wSBAMBz64TP2yEDuQmI4/rNvRZXlngsjs/B4NuO8egs=
Subject key identifier:   06:77:EB:A1:7F:7B:DA:54:8E:2B:35:AE:81:56:FD:C1:F3:8D:4A:41
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       49C5961E63D21A0F5039280E27B74C2C5DD85A0A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205548.roa
Signing time:             Thu 08 Oct 2026 18:19:40 +0000
ROA not before:           Thu 08 Oct 2026 18:14:40 +0000
ROA not after:            Thu 07 Oct 2027 18:19:40 +0000
asID:                     205548
IP address blocks:        2a0a:6042::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 22:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:96:1e:63:d2:1a:0f:50:39:28:0e:27:b7:4c:2c:5d:d8:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Oct  8 18:14:40 2026 GMT
            Not After : Oct  7 18:19:40 2027 GMT
        Subject: CN=0677EBA17F7BDA548E2B35AE8156FDC1F38D4A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:13:7b:c9:59:6d:00:9b:de:f7:cd:d3:1d:
                    62:5e:ad:4c:a8:e9:ab:2f:76:35:67:ca:ca:e9:45:
                    89:f4:f4:80:57:00:44:58:80:83:ce:0f:32:fa:7b:
                    c4:24:7f:38:4c:72:bf:d4:26:fc:89:6a:b4:01:8a:
                    1b:2c:1b:e0:06:b4:68:3c:5c:84:e2:f0:04:45:df:
                    8e:a5:61:d0:16:28:b8:5c:e5:ee:71:0f:00:df:ae:
                    b1:30:9d:e0:e1:bc:94:b3:ab:27:6b:6a:fe:0b:60:
                    42:91:a4:b2:40:e7:83:8b:e7:e0:30:8f:85:0b:4a:
                    5a:ad:f9:30:c1:3d:a6:f7:f5:47:87:d5:fc:d8:5a:
                    cb:90:7b:00:0c:56:6d:db:7e:1f:9f:82:0a:72:69:
                    80:df:6f:73:80:2a:08:34:d7:59:82:9f:31:2d:46:
                    e5:bf:78:c4:75:95:75:25:38:87:59:cf:28:d0:55:
                    0d:b7:ef:75:b1:a2:2e:e6:1a:d3:af:9f:1b:36:dc:
                    69:55:82:b5:c4:60:10:64:b6:12:dd:36:7b:52:5e:
                    a1:15:48:49:f6:32:ea:02:d3:f4:35:10:11:80:0f:
                    0d:29:6e:55:17:85:94:8b:0a:c3:ea:1f:fb:a9:44:
                    65:fa:de:63:a1:24:52:d3:dd:bf:48:e8:62:9b:17:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:EB:A1:7F:7B:DA:54:8E:2B:35:AE:81:56:FD:C1:F3:8D:4A:41
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6042::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:1d:4f:c6:bb:06:f5:e6:22:6e:53:b8:32:99:c8:a4:19:15:
         09:85:1f:84:e7:dc:06:6d:f4:e0:91:0f:0e:8b:57:f2:83:f5:
         e6:78:d1:4b:3c:10:fe:5f:35:0d:66:a7:27:4e:2a:ff:36:f6:
         1b:22:8f:12:f8:e8:c0:26:69:c5:db:cc:73:ba:b3:af:76:b5:
         88:c1:04:14:7e:34:a4:a8:9b:c0:3c:5f:dc:03:a9:82:06:96:
         5f:62:9f:5d:18:5e:d5:33:13:0f:cc:11:a0:fa:6f:2b:f0:0b:
         93:a2:fb:c9:37:78:53:b3:07:2d:2c:b8:7b:e9:f9:0a:e5:ef:
         a9:a1:73:06:b2:98:33:c5:cd:f5:be:32:ba:87:e3:aa:2a:e1:
         0b:70:27:e3:26:94:7b:01:1c:28:d4:69:08:4c:38:70:f1:68:
         fe:9d:82:0b:94:20:75:fe:cf:89:e8:ff:8e:1c:9c:11:11:e9:
         6d:e3:bd:46:aa:e5:dc:9e:89:c8:ad:9d:a9:11:65:e1:32:c9:
         bc:7f:47:f5:42:99:4e:78:a4:27:3e:52:0f:82:3c:bd:67:f4:
         ab:cc:97:29:a8:ac:59:6a:30:81:99:e9:49:1c:8b:30:9f:9b:
         ba:5e:a1:0c:66:3a:5e:3c:9f:8e:dd:78:91:d8:1d:64:d5:c0:
         61:cd:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:44:19 2026 by rpki-client