Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19257.roa
File:                     AS19257.roa (raw, json)
Hash identifier:          m8MnByjgfHWQzMjs1Er7NZK2nbAfFlsT74TsfRhmO10=
Subject key identifier:   FA:28:AB:EE:39:6C:BE:4C:8E:86:C8:69:91:48:37:ED:52:00:07:AE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       04540A3A6B35BBE8A26FA609C5B92A35D7A4E475
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19257.roa
Signing time:             Mon 06 Apr 2026 04:35:55 +0000
ROA not before:           Mon 06 Apr 2026 04:30:55 +0000
ROA not after:            Mon 05 Apr 2027 04:35:55 +0000
asID:                     19257
IP address blocks:        66.212.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:54:0a:3a:6b:35:bb:e8:a2:6f:a6:09:c5:b9:2a:35:d7:a4:e4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  6 04:30:55 2026 GMT
            Not After : Apr  5 04:35:55 2027 GMT
        Subject: CN=FA28ABEE396CBE4C8E86C869914837ED520007AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7c:e0:05:36:69:05:7c:78:1e:62:0b:61:0b:
                    21:df:c7:66:be:2f:c1:09:e7:ad:c7:37:7a:4e:ac:
                    85:71:4d:59:a6:af:ac:a4:c4:69:60:ef:74:31:54:
                    de:a5:e3:b9:46:10:43:df:65:a5:d0:4a:6e:d8:7e:
                    3b:f6:a8:55:dd:29:6a:53:68:19:ae:d3:45:f6:4c:
                    ed:60:db:82:b7:3a:d3:a0:0a:2d:a5:54:f7:e7:dc:
                    0f:db:79:d3:7e:49:6a:1e:f6:7d:c4:e7:c4:cf:e1:
                    56:81:8b:c4:9d:a9:f3:0f:bd:2e:b6:b7:f1:04:22:
                    a7:d2:29:c7:07:ae:da:bf:c9:37:6e:cf:b0:f7:43:
                    3b:e2:b5:f2:cd:e7:c5:45:94:0c:64:ca:a7:c0:4e:
                    e6:a5:0e:22:ed:8d:b9:d8:1e:f7:41:5c:ee:cb:99:
                    d7:f1:1a:bd:94:c0:66:75:42:d5:35:3a:47:88:fc:
                    ab:0d:1b:5e:51:96:01:b2:11:8c:ae:04:1b:e4:b4:
                    dc:7f:4b:92:4e:42:c0:e3:1b:b2:d7:4f:9f:72:d0:
                    7c:ad:c5:3f:e0:7b:c0:c7:2a:bc:40:f1:55:af:91:
                    aa:85:85:ae:e7:05:0a:67:ae:80:d2:ad:d0:c6:b0:
                    fd:8e:88:77:57:ad:cc:e1:71:32:29:7f:f2:76:a1:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:AB:EE:39:6C:BE:4C:8E:86:C8:69:91:48:37:ED:52:00:07:AE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:51:fa:4f:61:c4:79:50:e2:54:ab:75:20:24:fd:3b:c8:5c:
         b1:e3:cb:bb:2b:51:2d:36:c8:83:86:93:5f:0a:d7:84:83:7a:
         ba:3a:30:d9:3f:e3:0d:23:ec:04:cd:54:85:96:b4:15:a4:75:
         11:3d:f9:d3:ac:68:17:ec:9f:b8:1f:50:56:a3:d6:7a:30:a3:
         07:85:d0:a3:57:c7:e3:94:b2:5e:79:80:cb:7a:80:b6:3e:70:
         2c:9b:9f:b8:97:f5:bb:00:4d:6f:6a:bb:12:1e:1e:24:88:c6:
         55:fc:a6:2c:e3:58:c1:20:bc:10:24:ef:88:04:99:a1:f4:82:
         bd:ed:d7:35:75:9a:66:f8:e8:2c:45:c2:1c:9c:81:ad:46:44:
         33:55:ff:27:34:a1:dd:e0:e8:88:6d:d7:0b:34:95:b6:c2:b5:
         7f:8d:87:02:46:a1:e7:75:60:48:7e:c2:7c:44:8e:4d:c9:a2:
         93:87:71:5c:85:43:24:76:44:50:d8:3e:2a:ed:b4:25:3e:f4:
         a2:f1:d4:a3:14:48:65:bb:a2:fb:f8:a4:3c:1f:82:52:c4:ed:
         10:e0:36:c3:3e:3d:76:10:a3:b7:df:bc:8e:05:c7:4d:68:8c:
         9e:6a:fd:35:e6:39:db:35:51:35:be:4a:73:35:45:37:c9:22:
         3c:1c:4e:df
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUBFQKOms1u+iib6YJxbkqNdek5HUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDA2MDQzMDU1WhcNMjcwNDA1MDQzNTU1
WjAzMTEwLwYDVQQDEyhGQTI4QUJFRTM5NkNCRTRDOEU4NkM4Njk5MTQ4MzdFRDUy
MDAwN0FFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XzgBTZpBXx4
HmILYQsh38dmvi/BCeetxzd6TqyFcU1Zpq+spMRpYO90MVTepeO5RhBD32Wl0Epu
2H479qhV3SlqU2gZrtNF9kztYNuCtzrToAotpVT359wP23nTfklqHvZ9xOfEz+FW
gYvEnanzD70utrfxBCKn0inHB67av8k3bs+w90M74rXyzefFRZQMZMqnwE7mpQ4i
7Y252B73QVzuy5nX8Rq9lMBmdULVNTpHiPyrDRteUZYBshGMrgQb5LTcf0uSTkLA
4xuy10+fctB8rcU/4HvAxyq8QPFVr5GqhYWu5wUKZ66A0q3QxrD9joh3V63M4XEy
KX/ydqFG4QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPooq+45bL5MjobIaZFIN+1S
AAeuMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE5MjU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtQaMA0GCSqGSIb3DQEBCwUAA4IB
AQA2UfpPYcR5UOJUq3UgJP07yFyx48u7K1EtNsiDhpNfCteEg3q6OjDZP+MNI+wE
zVSFlrQVpHURPfnTrGgX7J+4H1BWo9Z6MKMHhdCjV8fjlLJeeYDLeoC2PnAsm5+4
l/W7AE1varsSHh4kiMZV/KYs41jBILwQJO+IBJmh9IK97dc1dZpm+OgsRcIcnIGt
RkQzVf8nNKHd4OiIbdcLNJW2wrV/jYcCRqHndWBIfsJ8RI5NyaKTh3FchUMkdkRQ
2D4q7bQlPvSi8dSjFEhlu6L7+KQ8H4JSxO0Q4DbDPj12EKO337yOBcdNaIyeav01
5jnbNVE1vkpzNUU3ySI8HE7f
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:09 2026 by rpki-client