Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS198383.roa
File:                     AS198383.roa (raw, json)
Hash identifier:          4sH1zk2J/jiZZ5xNngNPE4Vkce0KR6A1SIOuRXi2vNA=
Subject key identifier:   2D:0C:19:6C:32:6F:9B:E8:BB:FB:7C:CA:2C:8A:EC:F9:40:75:9B:D4
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2C4384FCD1DCBEFD5691C56CA577C0BE845FCD9D
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS198383.roa
Signing time:             Mon 04 May 2026 12:41:11 +0000
ROA not before:           Mon 04 May 2026 12:36:11 +0000
ROA not after:            Mon 03 May 2027 12:41:11 +0000
asID:                     198383
IP address blocks:        140.99.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 22:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:43:84:fc:d1:dc:be:fd:56:91:c5:6c:a5:77:c0:be:84:5f:cd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May  4 12:36:11 2026 GMT
            Not After : May  3 12:41:11 2027 GMT
        Subject: CN=2D0C196C326F9BE8BBFB7CCA2C8AECF940759BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:f3:31:aa:ea:8e:b0:e5:5c:5b:68:d2:17:
                    18:4c:95:3f:8a:f6:35:2c:54:97:e2:33:fd:8f:91:
                    6b:8d:8b:18:41:ab:14:ab:2b:dc:93:b2:14:ec:19:
                    81:94:51:d2:06:c2:57:7f:6a:d4:c2:be:63:ae:4f:
                    7b:76:a9:ae:8f:87:bc:2b:4b:0d:55:18:2a:9b:a1:
                    4f:02:7e:7b:89:22:b8:5c:98:06:05:e7:5c:86:d4:
                    83:e9:b4:bf:57:fb:48:70:48:3d:15:79:eb:f5:4b:
                    4a:78:31:b0:26:e1:e6:ee:be:e0:a9:41:39:e0:91:
                    81:1c:fd:38:4b:c9:94:71:7b:fa:8b:5b:c4:8d:03:
                    5a:c4:68:5c:36:04:61:62:aa:9e:28:32:0c:cc:4b:
                    ea:4c:37:bd:c4:ab:50:93:51:69:dc:e6:32:fb:2c:
                    f6:12:74:e8:ee:70:c8:c6:f4:28:cf:17:60:ec:3c:
                    45:a6:c8:c5:44:09:57:48:05:2a:3d:75:8f:d2:e3:
                    0d:87:c1:23:9b:64:ab:b2:b4:9e:b8:69:d3:2e:6a:
                    0c:21:8d:f9:84:d0:05:a2:7f:55:d4:82:0f:5e:ba:
                    e5:05:b3:8c:b1:03:5d:09:0c:dc:05:da:22:f9:d8:
                    91:88:7f:76:37:e2:b4:43:3f:6b:96:dd:e2:4a:6a:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0C:19:6C:32:6F:9B:E8:BB:FB:7C:CA:2C:8A:EC:F9:40:75:9B:D4
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS198383.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:e3:78:e2:ea:2e:b4:d2:1a:f0:49:a3:74:d4:f8:2a:5e:16:
         34:cb:64:46:7f:78:bd:23:d5:37:76:79:31:e3:0b:45:87:d9:
         91:59:4e:b4:51:85:5d:ab:6c:4a:50:7c:f4:3f:70:6d:5d:f4:
         60:56:ad:ce:18:a0:a6:23:d1:f1:fa:f1:66:c4:f0:9c:3a:a3:
         58:6e:db:8f:7f:8c:1a:da:79:80:5b:3b:65:f0:1e:53:93:64:
         0f:35:2e:89:02:ea:ad:d7:24:41:8f:74:e4:32:2c:a9:db:37:
         fa:9a:64:49:ad:25:ea:d8:11:57:d1:28:72:4b:51:bf:00:1b:
         8f:32:af:f4:ec:f5:54:5f:5b:d3:84:2a:a5:86:82:3f:ec:de:
         14:73:ee:a9:6e:e8:af:c9:5a:43:59:49:64:a3:02:41:3d:6c:
         9c:b5:2b:0b:1b:5f:4d:b3:b4:b5:f3:52:f3:8c:7a:7c:15:e2:
         26:db:79:9e:d5:8a:63:ca:69:b1:65:d1:27:da:5b:7a:7d:e8:
         45:4f:07:2f:f1:b7:bc:6f:e4:4c:66:c5:08:2d:39:66:17:00:
         b8:32:d9:99:e4:29:da:c0:42:2f:df:f1:81:bb:4d:4b:61:59:
         70:d6:8e:6a:13:21:80:40:6a:5d:b8:05:b3:b4:ff:d8:b4:2e:
         22:09:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:03:29 2026 by rpki-client