Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          PBQidqRlkdJcYcod+61dktHWrDGmX7TCsKwcdZuKBog=
Subject key identifier:   88:16:16:37:07:C3:7E:D4:53:CD:D5:7D:72:6A:2C:4E:BA:8A:68:B5
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2706F692FCC6074F4467315624F2ABFD09DFE956
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
Signing time:             Mon 27 Jul 2026 14:33:41 +0000
ROA not before:           Mon 27 Jul 2026 14:28:41 +0000
ROA not after:            Mon 26 Jul 2027 14:33:41 +0000
asID:                     212238
IP address blocks:        64.50.179.0/24 maxlen: 24
                          64.50.189.0/24 maxlen: 24
                          172.245.102.0/24 maxlen: 24
                          192.228.124.0/23 maxlen: 23
                          209.200.228.0/24 maxlen: 24
                          209.200.239.0/24 maxlen: 24
                          209.200.252.0/24 maxlen: 24
                          216.97.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:06:f6:92:fc:c6:07:4f:44:67:31:56:24:f2:ab:fd:09:df:e9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 27 14:28:41 2026 GMT
            Not After : Jul 26 14:33:41 2027 GMT
        Subject: CN=8816163707C37ED453CDD57D726A2C4EBA8A68B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:19:88:d9:f7:94:09:a9:d6:b7:1c:5c:57:f2:
                    e5:d6:bd:93:35:7e:cf:45:82:18:2a:4b:4e:bb:98:
                    15:e1:b0:6a:e7:0f:67:9f:e4:f9:2f:3d:d6:7e:83:
                    74:db:c4:91:5d:a0:a9:34:48:4b:c9:5e:91:bd:5f:
                    fe:33:8d:16:c2:40:53:f0:70:ab:4b:bb:01:d6:03:
                    ce:c6:86:bf:5f:f8:5c:1a:d7:f5:84:8e:0f:9f:c2:
                    92:12:44:9c:0e:8b:16:38:fe:b7:5d:b6:ca:f7:ca:
                    0e:33:ac:ee:06:d6:52:7e:8c:64:52:01:57:05:fc:
                    d7:25:44:88:9b:8c:ca:a9:ad:75:38:7f:2a:57:0a:
                    3f:4c:67:55:8e:95:0d:d3:7f:80:3e:6a:2c:83:2e:
                    dc:de:42:33:ef:43:7c:9b:85:de:17:d6:f9:a8:c2:
                    24:53:cb:fc:83:b9:5c:46:0d:7b:62:6e:1b:55:e3:
                    61:d8:ad:c5:e1:eb:79:8e:f0:94:04:47:0d:a5:90:
                    2f:86:c3:c6:fd:7c:8a:68:dc:c8:0e:e2:50:c2:76:
                    0d:4c:c7:27:66:aa:41:e5:40:0b:8a:3e:af:3d:ec:
                    27:66:96:ff:da:d0:06:73:a9:8c:52:a4:a9:7a:aa:
                    45:b4:5e:98:60:39:9f:a4:57:d8:80:b2:dd:26:1d:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:16:16:37:07:C3:7E:D4:53:CD:D5:7D:72:6A:2C:4E:BA:8A:68:B5
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.179.0/24
                  64.50.189.0/24
                  172.245.102.0/24
                  192.228.124.0/23
                  209.200.228.0/24
                  209.200.239.0/24
                  209.200.252.0/24
                  216.97.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:ad:c4:2d:45:00:62:77:82:62:5e:3a:05:51:7a:2c:92:
         39:e1:4e:26:77:7f:fb:56:c7:af:a6:a3:50:21:f1:fc:a9:d4:
         b8:4b:f6:69:43:29:4a:4c:f2:47:60:a8:8f:14:50:a3:33:82:
         0a:4b:43:60:0e:e1:0a:19:bc:ad:f8:af:0f:2d:ee:c5:e9:60:
         f7:68:f9:fc:c3:c0:72:20:ab:e5:b5:2b:f2:07:d7:38:e7:de:
         f4:6e:49:d6:ab:53:29:6a:0b:bc:82:41:0b:79:e4:dc:8a:16:
         7a:93:75:24:ce:53:ea:8b:d9:7a:d6:24:ca:12:17:b9:5e:c4:
         dd:fa:2e:24:8b:f8:98:89:af:7c:53:cb:f5:d5:69:a5:08:4a:
         7f:d1:ba:54:a6:a5:01:3c:e2:bb:b6:2b:d1:5c:7f:d8:5d:b6:
         82:a3:cf:d2:b8:6b:ac:ae:f8:eb:48:1e:e9:a6:19:78:77:f2:
         22:45:fa:54:0b:bd:fc:7d:9b:2b:44:3e:c7:6a:e8:9c:fa:2d:
         12:fa:02:f6:d1:55:64:1c:dc:98:45:8b:9e:d2:e3:39:35:54:
         28:46:31:cd:6a:96:5a:90:b8:5f:ef:0e:57:8a:0e:ff:df:25:
         ab:15:e2:8d:eb:4e:d9:b7:6b:b9:b6:8b:f4:4a:64:75:5f:94:
         8d:66:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:15:01 2026 by rpki-client