Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS218829.roa
File:                     AS218829.roa (raw, json)
Hash identifier:          z/tUEtbeZBYOcL4NyO1dmcD6gFDudIzYILD/6i9VSOY=
Subject key identifier:   6A:81:6A:45:E9:10:74:06:51:1C:71:B2:39:63:35:F3:69:3A:89:CE
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       3429A176C819EB0ACE8B188CD3E689E1921E46C2
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS218829.roa
Signing time:             Sat 05 Sep 2026 06:59:10 +0000
ROA not before:           Sat 05 Sep 2026 06:54:10 +0000
ROA not after:            Sat 04 Sep 2027 06:59:10 +0000
asID:                     218829
IP address blocks:        216.75.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:29:a1:76:c8:19:eb:0a:ce:8b:18:8c:d3:e6:89:e1:92:1e:46:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Sep  5 06:54:10 2026 GMT
            Not After : Sep  4 06:59:10 2027 GMT
        Subject: CN=6A816A45E9107406511C71B2396335F3693A89CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:ff:6b:e8:96:f0:8f:5c:42:fc:23:2d:30:
                    e6:40:21:e5:21:87:fa:f3:34:15:eb:cf:7e:60:6a:
                    2a:e3:43:5b:71:ba:5a:1f:c1:81:ac:b3:7d:c1:a0:
                    40:39:eb:7c:10:89:eb:ad:d1:d9:be:9d:a2:ba:72:
                    4d:f2:75:26:56:f9:d1:21:65:b1:ed:ca:26:c2:8b:
                    95:8a:25:83:fe:63:87:19:cd:da:30:eb:c1:63:43:
                    3c:54:1c:38:83:7c:31:e2:09:db:73:12:d2:d2:48:
                    42:e3:c2:04:8f:fe:24:cb:b4:b8:a9:7b:68:28:02:
                    b0:35:2b:51:ab:e3:f6:6d:80:38:28:84:ce:e2:ae:
                    d0:e1:b2:3e:21:5f:d4:62:23:08:a8:79:88:d2:b5:
                    07:47:9b:21:0f:5c:86:03:19:b8:d6:25:ba:a1:00:
                    e5:2c:d8:4e:17:f4:9b:77:e5:6a:c7:e1:15:cb:1d:
                    bb:e1:c5:4c:4e:88:d4:c5:3e:9e:da:8f:ab:be:ec:
                    60:c5:a0:14:db:9c:3f:e5:a6:3d:7b:63:fe:7e:b1:
                    ec:3c:3a:27:3e:b9:54:11:2d:3a:5c:d2:88:3a:0c:
                    df:4f:b7:b9:17:96:92:6e:b6:9c:97:15:bf:24:c7:
                    8e:0f:3a:af:4a:8a:50:45:3f:e4:59:d3:c2:04:b0:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:81:6A:45:E9:10:74:06:51:1C:71:B2:39:63:35:F3:69:3A:89:CE
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS218829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:56:4b:49:7c:46:75:67:ce:bc:d2:e3:7b:eb:65:07:68:81:
         49:50:50:e0:9e:6e:1a:b4:6f:c5:30:15:c2:83:74:89:ce:fa:
         9e:24:55:52:3d:fd:66:d4:86:47:52:98:2e:c2:e2:46:7e:59:
         e9:1b:91:c4:13:06:11:2b:5c:a6:28:2e:6a:b3:14:4f:a1:80:
         2a:f7:48:4a:a9:7b:24:33:8c:9c:9a:61:6d:67:6f:b5:1f:ff:
         b1:7e:2b:69:ce:5c:c2:8a:64:5b:8d:a0:07:8b:25:63:a5:6a:
         0a:ad:f2:e8:25:79:48:8c:cd:c4:42:1f:1e:a4:c2:67:8c:7e:
         f6:2b:b9:9f:19:f6:c9:2e:21:14:73:1b:06:8b:62:f0:24:2f:
         02:8c:99:2f:4c:16:bc:62:c8:70:ae:e2:87:9c:13:d4:f5:df:
         b4:d8:b8:08:5f:2e:8c:43:61:e7:84:27:c2:bd:1b:6c:f7:f6:
         8f:ae:38:10:a7:a7:e6:93:fd:3c:7a:6a:e3:30:58:93:44:20:
         f9:45:1d:bb:65:b7:07:14:e9:1b:0c:ab:52:3a:22:13:fa:fd:
         1e:eb:e1:3e:8a:01:8b:e2:da:f7:2f:5a:c3:16:95:31:0f:b1:
         49:48:87:7b:6a:23:c3:ce:65:74:a3:8d:2f:e1:d5:26:05:e2:
         9c:86:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:26:42 2026 by rpki-client