Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS203156.roa
File:                     AS203156.roa (raw, json)
Hash identifier:          wo3jtDNsgWA49WAnF1bHxiWX97SW7f4w8BfAMyMRhz8=
Subject key identifier:   BA:2B:2D:16:CD:EC:6E:E7:75:02:9D:73:D9:13:20:F5:F3:95:50:42
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       1C356E798020BCC606197267DE320810FEBF86F1
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS203156.roa
Signing time:             Mon 19 Oct 2026 19:41:13 +0000
ROA not before:           Mon 19 Oct 2026 19:36:13 +0000
ROA not after:            Mon 18 Oct 2027 19:41:13 +0000
asID:                     203156
IP address blocks:        216.75.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 14:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:6e:79:80:20:bc:c6:06:19:72:67:de:32:08:10:fe:bf:86:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Oct 19 19:36:13 2026 GMT
            Not After : Oct 18 19:41:13 2027 GMT
        Subject: CN=BA2B2D16CDEC6EE775029D73D91320F5F3955042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:3c:83:b6:ed:f9:82:93:6e:a9:d7:0d:75:
                    30:94:0b:c1:0d:24:3b:cc:76:93:a4:a1:ea:75:a7:
                    e4:c9:01:15:26:03:02:47:e1:aa:0b:d4:b8:c4:6d:
                    7a:f0:57:1a:64:e5:0e:d9:c0:dd:bb:cb:2e:0f:42:
                    87:98:fd:9f:3b:fc:89:1b:2f:c0:9f:45:6a:d1:aa:
                    79:6b:43:66:5e:f7:ee:d9:86:ba:fa:8b:f3:61:85:
                    66:72:8d:c4:16:59:be:8e:e0:8c:8e:45:ee:f9:8d:
                    e9:d3:de:67:1e:9e:2f:0b:f7:e1:9a:3e:82:80:b7:
                    52:23:41:1e:a6:42:f3:50:64:38:d8:59:8c:22:41:
                    b7:f0:01:32:a3:48:f2:f2:c4:d9:16:8d:fa:ce:9a:
                    f8:30:f9:71:87:bf:76:92:a0:59:54:33:ee:d2:9c:
                    0e:2b:da:05:69:e6:12:ff:53:7b:07:8f:80:40:00:
                    55:b0:48:86:8a:0e:85:91:0c:73:79:b4:4b:6a:a7:
                    83:5e:7b:73:d2:e4:d5:5c:93:2e:cb:ad:ba:37:de:
                    fb:1a:bb:3e:84:5e:9b:b4:ba:e0:e6:7a:9d:15:ec:
                    54:a2:9e:7d:aa:b2:43:e3:b7:28:20:b0:89:0f:33:
                    7e:94:7a:04:13:c5:c8:16:d4:0f:b8:e3:61:21:9c:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2B:2D:16:CD:EC:6E:E7:75:02:9D:73:D9:13:20:F5:F3:95:50:42
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS203156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:10:5f:d1:31:92:fd:21:63:bb:3f:29:e2:21:2d:d3:55:
         79:9a:20:59:2c:f5:d9:16:ca:60:fe:66:e7:a6:79:6b:11:c1:
         d1:9b:74:61:05:55:2a:9e:3b:d9:4e:68:98:c9:c9:40:be:63:
         06:33:14:3a:00:45:8f:94:e8:4c:bd:61:0c:7d:34:fd:37:80:
         76:0e:f9:5a:c7:09:91:3a:55:0d:ca:ff:32:00:ef:46:ec:d3:
         fe:68:ba:64:54:bd:dd:90:f9:2c:da:bb:c3:5c:d3:c0:65:45:
         b5:e0:24:32:c8:73:d5:e0:93:58:57:ed:4a:39:f1:91:f5:51:
         27:87:c0:c3:4c:b4:d2:98:41:1a:cf:10:4a:c1:7d:e5:ae:3f:
         2e:c7:0b:a2:3b:f1:95:da:ba:cf:b3:3a:3d:cc:96:f1:87:c0:
         79:c5:ec:c4:e3:1d:df:01:00:0a:a8:fd:18:62:3f:02:00:ad:
         f4:d2:af:db:6d:95:1e:18:fa:0d:ac:74:bf:0b:49:a4:12:88:
         f4:3a:bf:f1:6b:dc:f8:b7:54:82:73:9b:4c:53:dd:c3:f2:87:
         e5:08:bd:68:39:46:62:97:cc:8b:7f:8f:42:a2:10:65:a5:2b:
         f4:69:6c:61:61:39:2b:4e:07:cf:39:9e:d1:33:8a:95:07:47:
         b0:82:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:30:07 2026 by rpki-client