Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206533.roa
File:                     AS206533.roa (raw, json)
Hash identifier:          Z+dvNy20kmoYLFY+Tqtbc6/lKsN192yM50hC2352Ty8=
Subject key identifier:   90:66:4B:3D:33:8F:F2:CB:B3:DB:6F:69:1D:0C:0E:D2:52:07:4D:35
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       46C9BB50F7C7C2AFD938EAED3C6CDE4A1EF3FBA1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206533.roa
Signing time:             Tue 10 Mar 2026 12:42:48 +0000
ROA not before:           Tue 10 Mar 2026 12:37:48 +0000
ROA not after:            Tue 09 Mar 2027 12:42:48 +0000
asID:                     206533
IP address blocks:        104.223.81.0/24 maxlen: 24
                          107.172.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:bb:50:f7:c7:c2:af:d9:38:ea:ed:3c:6c:de:4a:1e:f3:fb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 10 12:37:48 2026 GMT
            Not After : Mar  9 12:42:48 2027 GMT
        Subject: CN=90664B3D338FF2CBB3DB6F691D0C0ED252074D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:16:e4:3d:40:3f:fe:9f:b4:b2:b8:46:06:
                    c4:cc:54:11:7e:fd:e2:b6:cc:92:ef:fd:12:f1:51:
                    ae:98:2e:3d:ce:26:51:92:42:dd:8b:14:1b:12:a3:
                    e3:82:85:65:3f:e4:5f:2e:6b:54:c0:a2:41:71:35:
                    a2:7f:a9:2f:fe:49:78:f7:f3:2d:74:12:5d:4b:bc:
                    85:a0:3e:98:58:73:71:bf:80:0a:8a:01:90:e0:ec:
                    88:15:2f:b9:de:b5:cb:b0:f3:c4:5a:05:37:58:21:
                    0f:98:88:a5:2c:20:1e:2b:89:fb:25:52:94:e8:7c:
                    d0:78:20:54:26:a1:ac:39:e8:88:2d:62:5b:22:f9:
                    54:bd:a0:7c:59:61:33:c6:df:9d:2d:3b:54:56:69:
                    59:63:3d:47:ee:3e:e8:ca:7f:3d:ff:7e:7a:1d:0c:
                    5b:46:22:f9:45:78:02:b8:d4:06:c3:e4:6d:07:95:
                    8f:2c:fc:11:f6:6a:46:67:3b:87:7e:37:d1:f6:59:
                    a3:82:05:a3:ae:71:77:58:7c:0a:ba:40:06:ae:d8:
                    03:58:ab:e1:55:cf:43:39:6b:11:1e:1c:30:b4:ef:
                    27:85:28:95:d0:7b:c8:b2:31:05:30:27:41:6d:55:
                    93:dc:66:b5:fb:37:05:4b:f3:36:fe:f0:39:21:bf:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:66:4B:3D:33:8F:F2:CB:B3:DB:6F:69:1D:0C:0E:D2:52:07:4D:35
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.223.81.0/24
                  107.172.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:61:2c:3a:b7:90:4e:3a:1a:32:94:20:53:da:c9:d7:d0:f0:
         5e:f8:41:34:1b:c8:8e:ad:8c:83:11:b5:25:2e:15:0f:0a:15:
         ab:54:91:ea:19:8d:2a:49:dd:33:40:3a:91:81:2f:e9:cc:bb:
         ab:02:d9:13:b1:38:7f:dc:aa:55:5a:7d:66:9a:08:2c:69:6a:
         ea:aa:50:62:9d:46:1c:fc:4f:84:f3:3b:d1:c2:12:58:ec:d1:
         e2:f0:12:33:5a:eb:88:d9:63:d6:29:42:83:74:61:76:5c:c5:
         2e:65:6b:ed:45:36:f0:13:94:5e:24:77:cd:c9:22:de:27:c2:
         11:7a:7f:e1:c5:5e:f5:0a:03:79:af:31:00:2e:ff:7d:85:e8:
         e1:86:00:ef:35:90:74:ff:b9:28:2c:46:b3:7f:58:21:28:c6:
         cf:21:74:63:7b:55:82:4b:01:bb:8a:c9:be:ac:fc:ed:f8:5c:
         a6:52:62:dd:5d:59:3f:00:0f:7f:0a:f4:ba:44:94:9d:6b:c6:
         6a:3a:66:2c:74:90:f1:47:23:6f:a6:eb:cc:0d:16:7e:d8:07:
         0a:d9:6d:54:44:8e:66:22:dc:ee:27:94:24:47:a5:0d:ab:1f:
         0f:10:94:f3:ff:c7:e1:80:ce:b8:57:44:e3:96:fe:7e:6e:8e:
         64:c7:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:50 2026 by rpki-client