Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS197173.roa
File:                     AS197173.roa (raw, json)
Hash identifier:          qE7WmHLhtxVuKQ45cQg4AjSbdMbpghPSBdjv7El+mtY=
Subject key identifier:   F5:22:02:7A:9E:91:38:5D:D7:E9:F9:D3:D6:F6:39:A3:C2:47:30:7D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       55157AC9F9F9A05471D88A0881A929659AF32256
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS197173.roa
Signing time:             Fri 24 Jul 2026 10:54:28 +0000
ROA not before:           Fri 24 Jul 2026 10:49:28 +0000
ROA not after:            Fri 23 Jul 2027 10:54:28 +0000
asID:                     197173
IP address blocks:        23.226.142.0/24 maxlen: 24
                          64.188.19.0/24 maxlen: 24
                          209.200.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:15:7a:c9:f9:f9:a0:54:71:d8:8a:08:81:a9:29:65:9a:f3:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 24 10:49:28 2026 GMT
            Not After : Jul 23 10:54:28 2027 GMT
        Subject: CN=F522027A9E91385DD7E9F9D3D6F639A3C247307D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:d1:e5:38:7b:0b:13:cc:ec:60:27:e4:78:
                    ef:ef:dd:9b:eb:87:6f:48:90:ba:42:f5:c4:ef:f2:
                    f6:f1:87:7e:9a:30:aa:2a:e1:28:e9:ca:df:bc:b7:
                    0a:c3:87:00:2d:1c:74:7b:31:68:3a:1a:4e:e9:29:
                    47:b1:1a:78:49:c5:26:ed:5b:0f:f5:f4:c7:fa:be:
                    a1:0f:6b:cc:0b:38:ec:89:b6:e4:f5:fb:23:78:f1:
                    9a:17:f4:81:a2:a2:e0:13:88:24:56:35:21:c7:38:
                    e7:40:28:84:1b:44:a7:63:de:f1:61:21:b0:f5:9b:
                    53:50:fe:88:61:03:4b:da:fa:31:a5:9d:15:26:5b:
                    d2:09:4a:59:3b:41:21:d9:1b:e6:ac:44:cb:6c:80:
                    de:21:f9:12:7b:ea:b1:a7:5a:cc:c4:dd:e9:bc:b3:
                    c6:fd:eb:a8:fc:8f:8f:6d:7d:7d:1b:ae:e1:4d:d1:
                    f4:94:c5:55:56:4e:49:97:a2:46:d4:3a:b3:6c:5d:
                    0b:9a:e8:98:03:94:13:98:af:c8:7f:7c:eb:44:4c:
                    16:87:6d:22:95:b6:95:42:09:b5:fd:12:b7:18:cf:
                    eb:5d:a5:17:df:bb:24:fd:bb:89:83:80:ef:17:f7:
                    e9:9f:01:91:81:b6:f9:d4:59:e1:38:d2:47:2e:63:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:02:7A:9E:91:38:5D:D7:E9:F9:D3:D6:F6:39:A3:C2:47:30:7D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS197173.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.142.0/24
                  64.188.19.0/24
                  209.200.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:de:a0:1c:44:4b:ef:40:83:87:44:26:56:a4:8e:38:97:fd:
         cc:07:19:42:80:c6:b6:b7:79:ef:de:50:83:74:88:6f:b5:fb:
         84:29:7c:c0:d7:6b:c9:f0:d1:16:d8:fc:c3:89:47:7f:3d:b1:
         a4:02:d0:ec:33:d4:a6:96:0f:66:1c:e9:05:a7:6a:6f:1f:d0:
         3f:45:8b:0d:8a:55:57:91:ee:9c:f5:03:43:fa:55:a8:21:9d:
         39:fe:d2:54:0c:6c:4f:52:cc:ec:da:68:2e:e5:28:ce:4b:13:
         47:9e:0e:6e:6e:66:e7:1b:b5:15:70:e2:e1:12:f1:5b:15:46:
         7c:bc:5a:b3:de:65:ef:3c:87:f7:86:2d:78:a4:7c:37:52:68:
         8d:2b:4f:b7:76:86:e9:83:cf:ca:d8:f8:96:27:30:62:50:e4:
         f9:1b:58:17:87:7d:7f:16:ee:e9:44:c5:df:52:a0:9b:2a:da:
         ff:d9:e5:84:da:d5:00:65:ac:d0:8b:74:92:33:f7:df:0c:20:
         41:b9:be:73:51:81:d1:d0:68:37:d9:46:e8:a7:99:61:42:b4:
         d3:2e:63:0b:25:c9:d3:aa:29:3f:86:df:59:e0:7a:f1:bd:66:
         0c:4b:ad:09:81:05:5b:d0:27:cf:12:4c:a9:99:7a:26:58:fc:
         2f:cb:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:16:38 2026 by rpki-client