Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa
File:                     AS25198.roa (raw, json)
Hash identifier:          2EaZs5a5n3Gppwm4Lf5/HlP3eX7UkG1DxBcHMreSY7c=
Subject key identifier:   CB:47:7D:67:00:47:D7:CF:18:E8:D2:34:73:E6:90:E6:D2:44:5E:C7
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       321AEAC7F2F83A9176F02C1E734DFBCC94DB3339
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa
Signing time:             Sun 24 May 2026 04:57:52 +0000
ROA not before:           Sun 24 May 2026 04:52:52 +0000
ROA not after:            Sun 23 May 2027 04:57:52 +0000
asID:                     25198
IP address blocks:        64.50.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1a:ea:c7:f2:f8:3a:91:76:f0:2c:1e:73:4d:fb:cc:94:db:33:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 24 04:52:52 2026 GMT
            Not After : May 23 04:57:52 2027 GMT
        Subject: CN=CB477D670047D7CF18E8D23473E690E6D2445EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:53:bf:3c:dd:f0:60:ad:4c:ef:71:55:c5:
                    c5:4d:be:25:60:d2:10:a2:5a:3c:59:9d:e5:5e:6a:
                    81:99:af:4e:d6:1b:4a:8b:b8:5e:e2:61:07:46:4d:
                    e2:6b:7b:e8:7d:00:71:f3:7c:30:96:1f:6d:6c:37:
                    26:70:44:a3:6f:5b:7f:85:5c:4b:c1:a2:73:8b:8e:
                    cc:da:d8:64:ab:7b:18:60:9a:5f:c9:3d:f6:47:a7:
                    ab:34:8a:34:f6:74:aa:83:48:10:b4:d9:4a:a1:87:
                    fc:e6:73:c2:e2:ef:75:de:6a:c7:2b:7b:95:3d:0a:
                    74:7a:2a:e5:44:77:6b:3d:63:e4:e5:44:f7:d5:a7:
                    ad:1c:f3:ba:c5:bb:60:7b:d3:d9:c2:8a:d4:87:ec:
                    63:fe:5f:23:f2:ca:c0:53:0b:a7:0f:19:71:c5:18:
                    11:fc:05:71:0e:94:1f:58:94:26:cd:bc:26:60:9d:
                    d7:92:62:72:d1:7b:cc:96:d0:25:6d:58:dc:b7:8b:
                    30:23:96:36:fc:38:5f:7e:8a:4d:56:c0:52:01:a2:
                    63:74:56:e0:0d:5a:81:1b:ba:79:4a:e7:b1:31:d3:
                    a1:b7:e5:cc:b3:f2:3b:50:6b:fc:5d:f9:57:2e:1b:
                    d4:18:6a:e6:23:66:11:bb:b0:35:f9:98:eb:7c:db:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:47:7D:67:00:47:D7:CF:18:E8:D2:34:73:E6:90:E6:D2:44:5E:C7
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:42:c1:c7:0b:72:6a:06:d6:1d:90:64:ff:ff:a7:a6:63:95:
         f2:87:51:d8:73:8e:3b:59:88:19:d7:eb:23:95:23:91:05:99:
         e2:72:7c:0f:af:f6:17:6d:bf:54:7c:4d:14:cb:92:c8:b6:69:
         fb:4e:a8:66:f6:20:6f:8d:09:84:07:fa:29:5d:58:fe:56:25:
         94:c3:5d:a9:ac:7e:9f:5c:a1:4c:05:91:a3:ec:b9:ad:41:ad:
         dc:81:f4:6b:98:20:4d:2c:eb:72:be:7c:2b:92:75:fb:2f:e8:
         aa:e0:af:ca:f8:27:17:67:71:36:ae:c6:0d:98:4d:a4:64:46:
         17:38:67:a4:75:10:f3:5f:ab:2a:96:1e:ba:bf:c9:35:13:0a:
         fa:b9:5a:5a:96:f3:8e:2b:3e:6f:12:4b:05:d7:fc:06:66:26:
         a2:d3:79:02:f3:cb:65:9f:db:c8:8c:32:9c:6e:c0:a9:83:cc:
         9c:24:e0:5d:cf:8c:bc:b4:e9:43:71:52:11:29:de:7a:30:fb:
         7f:b4:d7:13:50:1c:f3:e1:86:aa:ad:8f:a7:9f:62:5e:3f:6b:
         38:ea:c7:36:27:a8:5d:dd:5f:a5:7b:80:ac:0b:06:5b:21:08:
         64:fc:b4:14:42:7f:00:3b:6e:7b:ea:a1:a6:18:e4:e1:3f:a0:
         55:55:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:11 2026 by rpki-client