Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa
File:                     AS137235.roa (raw, json)
Hash identifier:          BU6QFAQ9Pt0bRy5av2/7CIT2PjtOj0M35vmjuTHxIPg=
Subject key identifier:   1B:B3:57:A4:0F:F8:88:E3:C1:86:1D:85:AA:E6:1A:6B:31:3A:77:ED
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7A5B30CFA6F4033A9FF1A6FB5972C03F5C6B6000
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa
Signing time:             Wed 22 Apr 2026 00:00:11 +0000
ROA not before:           Tue 21 Apr 2026 23:55:11 +0000
ROA not after:            Wed 21 Apr 2027 00:00:11 +0000
asID:                     137235
IP address blocks:        192.228.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5b:30:cf:a6:f4:03:3a:9f:f1:a6:fb:59:72:c0:3f:5c:6b:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 21 23:55:11 2026 GMT
            Not After : Apr 21 00:00:11 2027 GMT
        Subject: CN=1BB357A40FF888E3C1861D85AAE61A6B313A77ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:60:cb:77:4c:bd:7a:b3:b8:9f:89:69:8c:
                    02:77:e2:28:b6:04:37:e5:4f:aa:94:81:57:c3:52:
                    af:5d:e7:78:23:6a:5b:20:e1:a2:8d:07:ad:09:cd:
                    94:e5:e7:29:b9:8e:72:0f:fa:b6:f0:04:26:e4:65:
                    21:39:a8:73:b5:80:f6:06:ef:51:90:e0:bf:9a:84:
                    63:e7:45:9b:7e:84:36:93:71:77:ff:18:7f:ea:11:
                    20:47:d1:bb:b9:a0:56:f7:26:ea:43:35:21:d9:5a:
                    36:5d:9c:25:b2:a2:a8:f5:bd:40:01:b5:81:f7:d7:
                    93:6a:98:f6:7e:ad:b9:4a:26:da:ed:ce:b3:e5:a9:
                    b7:98:b9:09:e1:c1:75:56:95:ac:c2:48:26:69:e3:
                    49:d7:24:c6:78:67:44:d4:c0:81:a2:21:71:d8:df:
                    48:00:3d:df:4f:1c:c9:aa:52:6d:1f:14:fc:6c:50:
                    ac:b5:d3:64:12:d7:38:e2:fd:20:13:16:ef:2e:40:
                    15:ef:ee:09:42:0b:38:4a:00:dc:3f:fa:d0:4f:5b:
                    db:d7:0b:68:5a:f1:5c:08:9d:9c:8a:9e:f2:4c:f7:
                    94:ba:48:4f:a1:90:d4:8a:e5:2f:8f:d4:5d:67:61:
                    be:4e:1b:98:e4:a8:ed:31:8b:a5:d1:75:73:76:01:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B3:57:A4:0F:F8:88:E3:C1:86:1D:85:AA:E6:1A:6B:31:3A:77:ED
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5d:ef:44:c9:38:37:ce:95:e2:8d:ca:ac:a5:30:62:29:6a:
         4e:de:d8:47:9e:0d:57:b4:e6:c4:7f:e4:67:e7:3b:9a:1d:df:
         d2:3c:a1:ff:5a:21:ff:7b:33:e5:e7:71:36:bf:71:35:5a:ba:
         8c:61:c5:ac:d9:09:f7:64:95:8a:e3:98:63:29:b7:02:cf:cd:
         fd:1f:e6:a6:bb:ad:57:e3:6f:ea:fc:52:5f:99:a2:75:f2:9a:
         c7:34:07:4f:1e:b9:85:2b:1a:51:ec:11:bf:25:e3:a1:ac:cf:
         f9:86:e4:8c:ef:3a:ce:14:cf:15:e7:be:9c:29:24:87:2e:52:
         33:ff:6c:dd:39:f5:2c:1c:8a:10:b3:d8:83:cc:2f:56:ab:a5:
         db:fa:91:c3:0d:bb:b0:54:98:95:fe:f9:1d:42:72:2c:2f:c7:
         2a:2c:de:00:59:1b:28:7b:d9:8d:11:95:20:89:18:e8:85:8c:
         e6:63:d0:60:fd:ea:b4:35:17:f4:08:7b:cf:0b:ba:e6:2f:49:
         cd:20:47:13:55:5d:97:d4:41:b2:38:85:06:64:4b:1c:40:d3:
         50:b3:30:ad:80:bc:64:97:71:cd:e8:0f:44:4d:bd:e8:3f:7a:
         58:26:6a:74:6d:99:8c:b2:d9:cd:de:0d:1f:54:0a:d5:df:f6:
         9e:1b:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:56 2026 by rpki-client