Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206533.roa
File:                     AS206533.roa (raw, json)
Hash identifier:          AbWoaHZjfYgeW+Rk281dmgeeDkLUomaskAdFbnRaPLw=
Subject key identifier:   F2:21:A2:C4:C6:23:7B:02:A9:6A:2D:7D:F8:FF:81:34:A6:49:6F:33
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       656301463530C40C50269CD1CF78391610EFA794
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206533.roa
Signing time:             Fri 11 Sep 2026 19:17:10 +0000
ROA not before:           Fri 11 Sep 2026 19:12:10 +0000
ROA not after:            Fri 10 Sep 2027 19:17:10 +0000
asID:                     206533
IP address blocks:        104.223.81.0/24 maxlen: 24
                          107.172.136.0/24 maxlen: 24
                          198.84.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:63:01:46:35:30:c4:0c:50:26:9c:d1:cf:78:39:16:10:ef:a7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 11 19:12:10 2026 GMT
            Not After : Sep 10 19:17:10 2027 GMT
        Subject: CN=F221A2C4C6237B02A96A2D7DF8FF8134A6496F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:32:16:cb:3e:d3:43:45:d9:36:cf:fc:de:
                    5e:0d:d7:65:3e:3d:bd:0b:30:55:4a:f3:bf:b9:c8:
                    40:94:b8:88:fb:1e:49:4a:8d:a6:f7:07:bf:16:38:
                    ba:1f:da:90:e7:ee:57:8c:07:f3:eb:54:b1:81:0e:
                    11:30:c0:ea:1a:74:26:b6:89:c9:9d:c1:6a:9a:3d:
                    b1:3b:1e:e2:f6:91:55:90:fe:e1:c1:41:a6:b1:4b:
                    1d:24:86:5d:54:15:15:b3:e4:1e:10:b9:28:77:ad:
                    c3:7d:5e:c8:49:1c:98:74:d5:ca:52:2c:56:bf:48:
                    d2:33:25:25:11:53:c5:fe:53:6b:4b:e2:55:03:73:
                    13:25:a6:47:98:e8:4a:84:d1:d5:e9:70:1b:27:4c:
                    87:7e:90:3f:e9:90:dc:02:49:8c:ec:7f:ff:05:b6:
                    90:85:92:d6:b2:73:9e:6c:6f:20:b8:03:ae:8c:76:
                    5d:57:e3:f8:f2:1a:ac:4a:bd:89:7f:6b:99:c9:4d:
                    56:92:a6:d5:8f:d0:af:8e:14:97:2c:4e:22:b7:b8:
                    b8:26:05:1f:d1:3d:7c:54:1c:32:08:27:a1:79:6f:
                    5b:97:8c:9c:5a:eb:b2:58:32:d3:88:65:15:02:1f:
                    f4:60:2f:76:3d:2b:5a:74:b7:a6:b4:89:00:46:4c:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:A2:C4:C6:23:7B:02:A9:6A:2D:7D:F8:FF:81:34:A6:49:6F:33
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.223.81.0/24
                  107.172.136.0/24
                  198.84.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:23:2e:26:9a:b0:32:bc:1c:e1:f4:1e:37:07:f4:40:9c:
         24:e6:cf:d0:dc:a7:bd:9e:2f:c5:95:69:92:2d:53:3a:c0:f5:
         b2:51:ad:e1:ec:cb:2d:7a:c5:41:e8:0e:1f:52:36:be:b4:34:
         a9:fe:84:eb:0f:cb:ad:6c:ef:e2:96:39:7f:d5:5d:f9:98:19:
         34:21:20:d1:86:57:95:95:81:26:c6:dc:25:b8:11:0a:f1:2a:
         4a:9d:de:13:76:27:4b:2d:4d:dc:b2:b0:44:5b:9f:2b:e7:ab:
         22:c0:b7:e6:3c:22:ec:27:df:aa:28:8e:d5:7c:c3:d0:43:5a:
         60:16:cf:da:a4:35:1e:ac:54:28:35:7e:76:a3:a5:e5:d1:96:
         0f:e7:17:e6:62:8f:3a:e4:16:23:37:0a:a8:89:23:35:cb:ce:
         89:ea:86:1c:44:6e:d7:cd:ef:a6:95:b1:71:58:f6:52:6b:26:
         2e:90:05:d7:f2:3a:f2:79:cf:29:ae:c1:a9:58:cf:55:41:c3:
         43:e6:5b:08:4f:de:80:35:dd:61:6c:59:fb:91:5c:84:23:8a:
         32:50:81:38:e1:56:c9:3b:42:45:2c:63:ad:63:b5:5c:ea:0b:
         9b:77:ae:50:4e:23:c9:d1:1e:5d:cd:47:af:6c:9a:ec:14:67:
         b5:74:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:04 2026 by rpki-client