Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219427.roa
File:                     AS219427.roa (raw, json)
Hash identifier:          IPXnang2VDd1mWGwZzylMjCDx3uDWW9hguCxgLEQtS4=
Subject key identifier:   92:11:A7:70:3F:BF:4F:20:C3:9D:20:C7:14:0E:2A:9E:BD:AA:C5:45
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3B1BDB84BC99C7370986F7EDDE2A19D8362F584D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219427.roa
Signing time:             Tue 22 Sep 2026 08:42:28 +0000
ROA not before:           Tue 22 Sep 2026 08:37:28 +0000
ROA not after:            Tue 21 Sep 2027 08:42:28 +0000
asID:                     219427
IP address blocks:        40.223.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1b:db:84:bc:99:c7:37:09:86:f7:ed:de:2a:19:d8:36:2f:58:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 22 08:37:28 2026 GMT
            Not After : Sep 21 08:42:28 2027 GMT
        Subject: CN=9211A7703FBF4F20C39D20C7140E2A9EBDAAC545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:95:ef:83:0b:2a:4a:80:13:11:49:11:47:
                    91:7e:16:f4:3c:ef:50:e0:f8:fc:d6:69:42:0b:47:
                    7e:f1:34:ae:7b:a9:91:10:5c:bd:c1:00:23:f3:d6:
                    09:36:52:ca:9c:3d:6d:bd:78:8b:ee:5d:21:1a:f4:
                    1b:6c:4d:23:dd:f4:15:90:92:20:a5:56:08:d1:27:
                    91:d3:9f:df:05:c9:ca:7d:5f:49:af:5e:33:e6:55:
                    c6:fa:d3:d7:6b:db:15:3d:02:c9:d1:b5:f4:bd:49:
                    45:94:c2:54:99:a8:4f:ed:22:25:45:00:08:39:6c:
                    39:ed:5e:7d:c7:39:0c:6c:b9:22:d2:0f:6b:d8:d5:
                    e6:17:f1:10:12:33:96:fe:6b:cc:7b:87:3d:00:75:
                    ef:62:68:3b:9f:24:08:ff:6d:b7:8b:28:27:23:f2:
                    83:dc:ca:f0:6b:8c:b3:f8:b4:99:83:7e:2d:a2:97:
                    d9:2f:87:f9:71:53:d6:a0:4c:bd:88:76:8e:f2:bc:
                    98:4d:e5:6b:2f:3d:ae:aa:07:e0:3a:5b:ca:28:13:
                    a2:b7:ed:7f:be:f3:36:63:51:f2:d9:b2:5c:49:d0:
                    02:da:0c:17:32:1f:b4:fe:e4:64:93:55:da:1e:18:
                    d3:aa:c2:a6:bf:fc:f4:2d:9d:36:9b:c1:31:48:60:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:A7:70:3F:BF:4F:20:C3:9D:20:C7:14:0E:2A:9E:BD:AA:C5:45
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:0a:25:3a:1e:51:4a:4b:0d:f2:4c:ec:5c:59:b2:64:1b:
         70:94:4e:d5:42:fa:83:0e:7f:24:90:ae:1a:f9:23:63:84:31:
         a3:e9:c6:24:58:ca:4e:e2:3d:6f:a5:13:70:74:2b:b9:3b:b3:
         e6:40:70:72:cd:48:55:c4:b9:73:8e:b5:dd:99:31:07:f9:ea:
         7a:bc:6a:40:ec:a0:7a:5e:5d:62:db:5d:ce:1c:06:bd:da:71:
         c9:4c:36:c1:99:f2:52:e5:a2:e8:81:bb:9d:74:48:73:5e:b5:
         2d:19:46:ec:8b:67:75:f9:61:da:65:40:8e:02:17:3e:4d:8b:
         e8:18:29:ed:84:d3:ea:6f:d5:47:d3:56:d8:61:fc:47:d7:af:
         82:3d:78:5e:14:f9:2f:40:84:a2:5a:fc:72:97:9e:f0:e1:66:
         83:41:f3:df:70:03:d3:b4:79:69:15:c4:8d:29:cb:ec:dc:1c:
         dd:d3:8f:7c:ea:63:fc:98:1d:3e:92:49:3a:15:76:cc:9e:62:
         7e:30:e4:45:15:d7:bf:b4:db:ec:59:9e:a6:9b:87:6d:a0:ae:
         11:67:6b:3a:f0:8b:f5:aa:dc:a7:1f:51:20:19:97:63:b2:3f:
         d8:2c:78:b8:de:dd:b8:2e:f9:90:c7:94:0c:a0:c9:da:0b:ae:
         0f:8c:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:31:28 2026 by rpki-client