Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198100.roa
File:                     AS198100.roa (raw, json)
Hash identifier:          HvuLiPf45PJC/3h+m0L1hEHCCkuSn53ChZ3sbUCVcCY=
Subject key identifier:   D5:CC:E1:6E:3E:02:1F:06:48:E2:A8:E3:AD:16:8F:94:8D:B0:6C:D7
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6CAFB09C1E5BE3020D942DA5A75218E97FA26494
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198100.roa
Signing time:             Sat 25 Jul 2026 03:36:09 +0000
ROA not before:           Sat 25 Jul 2026 03:31:09 +0000
ROA not after:            Sat 24 Jul 2027 03:36:09 +0000
asID:                     198100
IP address blocks:        23.94.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:af:b0:9c:1e:5b:e3:02:0d:94:2d:a5:a7:52:18:e9:7f:a2:64:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 25 03:31:09 2026 GMT
            Not After : Jul 24 03:36:09 2027 GMT
        Subject: CN=D5CCE16E3E021F0648E2A8E3AD168F948DB06CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:d9:5c:ab:2a:89:b4:6a:70:e3:c1:bd:c6:
                    d4:43:bf:74:34:33:89:c8:c6:f6:74:b8:b9:21:89:
                    4a:cd:98:7e:df:6f:a6:1f:ea:27:fb:94:4a:f0:32:
                    24:95:01:f2:8f:ef:8e:b0:0b:45:a3:96:b4:68:cc:
                    cf:1d:70:20:83:fc:93:95:97:a6:08:1e:c6:ba:2c:
                    e7:f8:76:0f:52:28:ce:50:3f:86:6d:d0:d3:a5:5f:
                    42:0c:d5:a9:64:19:4d:8f:b3:e5:7a:f7:39:18:6f:
                    59:de:3b:e5:26:58:56:78:91:d3:b2:98:7e:40:6d:
                    36:08:eb:f2:cb:6e:7b:ed:5b:e1:45:65:9e:72:32:
                    01:47:44:26:2e:ff:49:2a:2c:ee:44:ae:e0:3f:49:
                    60:a9:64:80:5f:b3:3b:77:bc:79:bc:ef:42:0f:56:
                    29:4c:f9:32:7f:39:2b:a1:57:18:2b:1e:78:0c:74:
                    39:3c:e6:05:91:86:fa:1c:96:7c:9e:d4:21:6c:3e:
                    60:46:a1:d0:be:17:8a:ef:30:c3:13:97:66:ba:57:
                    58:ee:3d:70:39:24:fa:71:1c:81:ee:c5:29:eb:21:
                    35:7d:52:1e:56:4b:fb:51:5b:2f:74:d9:b7:b7:bc:
                    6a:49:c1:01:0a:58:91:06:f0:86:4b:68:1a:79:d1:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CC:E1:6E:3E:02:1F:06:48:E2:A8:E3:AD:16:8F:94:8D:B0:6C:D7
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:0e:e5:e4:f7:f0:a1:3d:7b:21:53:d6:d9:45:e3:29:90:
         41:90:02:02:54:e3:5a:01:4e:4c:b8:d5:37:43:ea:a8:5f:7f:
         75:2b:96:fa:b1:7d:25:87:41:86:72:2f:83:8d:4b:81:b8:6e:
         6a:8e:51:d6:3d:26:d1:8d:41:4c:7d:d5:1e:2d:bd:3f:c5:47:
         c4:1e:80:8a:56:5f:81:ed:d6:96:32:67:a2:74:c9:1e:42:f5:
         d4:ce:9a:a6:1e:22:94:2a:83:de:d3:fb:3d:af:73:1a:b2:38:
         31:2f:88:e2:10:a3:56:c7:0f:0d:14:6e:f0:7e:09:dc:2a:5a:
         67:25:28:e4:bf:4b:88:44:ee:5a:24:d6:09:4c:40:d9:2d:5e:
         40:09:a2:c6:ab:33:4f:2f:f3:bf:06:bc:62:83:bf:9c:da:e1:
         1c:c2:17:cf:8f:f3:ce:1a:1b:29:30:64:97:56:ee:62:d1:96:
         65:00:82:0e:22:c9:a8:35:06:1f:ca:70:db:3b:33:ff:c2:5e:
         67:8b:13:38:b8:9f:f3:5c:37:ad:9b:de:f5:05:03:2b:84:a3:
         b1:03:df:23:67:a9:cf:f6:e7:5f:f6:1a:5a:ba:93:cc:31:d6:
         3f:ff:f1:7a:f9:6f:84:3b:ca:ef:25:1e:79:f5:33:d0:f2:05:
         ea:d2:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:19:55 2026 by rpki-client