Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          n+wnf1A71HE/lYQ4dZYYu0QbbwydbGisDyzqM7oTJL8=
Subject key identifier:   6D:D1:B8:B2:CA:7F:2C:50:79:31:6A:96:2F:C1:5B:F1:CC:55:CA:13
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6F6F78CEE7CD9E008481B63F94B7A9C16B7816C3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa
Signing time:             Fri 27 Mar 2026 20:35:54 +0000
ROA not before:           Fri 27 Mar 2026 20:30:54 +0000
ROA not after:            Fri 26 Mar 2027 20:35:54 +0000
asID:                     211585
IP address blocks:        67.210.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6f:78:ce:e7:cd:9e:00:84:81:b6:3f:94:b7:a9:c1:6b:78:16:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 27 20:30:54 2026 GMT
            Not After : Mar 26 20:35:54 2027 GMT
        Subject: CN=6DD1B8B2CA7F2C5079316A962FC15BF1CC55CA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:bc:5d:c0:0e:f4:47:5e:14:f4:89:49:ff:
                    5b:48:cd:9b:67:58:e5:4b:56:4d:91:db:c5:1a:c2:
                    0b:2f:6c:f3:67:6c:10:8d:6d:c1:a7:84:a6:2f:86:
                    ca:b3:0b:c3:7d:6c:d3:e1:e5:63:c6:2f:57:9d:1c:
                    d8:f5:87:ff:bb:f7:d8:50:f6:3d:2c:5d:23:39:6e:
                    50:3c:2e:20:6b:63:53:24:09:cb:1f:33:3e:e8:c0:
                    43:9e:32:d1:fd:a3:31:86:3d:03:38:b3:ef:6b:4c:
                    e2:ea:14:e3:72:74:cd:4a:ce:c9:89:ce:9f:1a:c8:
                    6b:55:b2:4b:e0:0e:ed:12:9b:48:a3:6f:a0:2a:1f:
                    07:7a:a6:40:54:ce:8c:bb:c9:92:7c:93:2d:03:76:
                    91:c5:c0:2a:1b:e0:59:0d:ee:75:37:e0:a3:f3:2f:
                    2e:20:9e:76:5f:8f:f1:65:2a:43:42:c8:1d:66:8a:
                    be:3b:41:8b:93:63:3d:d1:c0:01:69:f9:ba:fe:98:
                    d0:cf:f7:16:23:c2:04:76:2a:57:0a:3b:40:b5:94:
                    15:94:30:05:65:36:03:56:51:2f:79:c6:e6:64:25:
                    1d:aa:5e:36:95:99:59:84:cf:36:de:8d:90:36:23:
                    a7:52:ca:20:42:d9:95:e6:1c:d4:20:b6:b5:2c:b3:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D1:B8:B2:CA:7F:2C:50:79:31:6A:96:2F:C1:5B:F1:CC:55:CA:13
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:75:91:44:15:e7:d1:44:e8:db:f4:eb:e0:dc:32:c6:2b:
         69:2b:0f:a8:f4:ba:ee:a0:a7:0f:11:7d:55:ea:a5:94:ff:7d:
         94:45:ba:7c:78:5e:b4:ab:12:4b:ac:d8:40:5b:85:9f:58:eb:
         c6:b2:68:8a:8e:73:91:b8:0d:6d:bc:1d:02:a5:ea:6b:7e:2a:
         eb:fd:19:a9:96:4f:32:5c:a1:13:3c:93:a1:4d:a6:a7:3b:14:
         31:e6:05:09:5e:2b:b4:a0:13:c0:b8:65:a4:2b:d6:78:42:40:
         4b:49:5c:4a:73:0f:e5:21:58:fa:41:65:81:d1:41:96:dd:f2:
         11:ae:bd:e3:d0:35:43:be:c5:41:4f:34:42:9d:36:27:a4:fe:
         c9:0b:17:e0:9d:8a:95:85:63:e0:21:85:ff:a7:87:ab:72:b2:
         8e:cd:25:22:5d:c7:a8:9c:22:a8:5e:da:a9:aa:46:72:8c:cc:
         6b:ce:d2:49:0d:00:6a:7a:da:50:42:16:38:17:7d:05:0d:47:
         b8:9c:06:7a:f0:1f:bf:cb:c1:09:e2:f1:97:8b:16:6d:c6:28:
         a8:03:3a:79:ec:fd:20:56:02:c7:69:78:36:f3:2c:6a:ce:2d:
         ab:40:7a:49:53:a9:61:60:bd:1a:c3:e3:eb:c2:cc:c5:e9:89:
         85:e3:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:11 2026 by rpki-client