Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218904.roa
File:                     AS218904.roa (raw, json)
Hash identifier:          380UOQHlDeofVRzn298OFATA/CDJXA/3gubaTB8o7zA=
Subject key identifier:   DE:6E:1A:6B:A2:39:90:50:2E:7F:B4:BC:5B:1D:DC:EF:73:2B:C8:F6
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       5A609F498418E8E2E5E6E8F036994C0DDEC1FA49
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218904.roa
Signing time:             Thu 10 Sep 2026 22:49:48 +0000
ROA not before:           Thu 10 Sep 2026 22:44:48 +0000
ROA not after:            Thu 09 Sep 2027 22:49:48 +0000
asID:                     218904
IP address blocks:        85.155.227.0/24 maxlen: 24
                          2a05:dfc6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:60:9f:49:84:18:e8:e2:e5:e6:e8:f0:36:99:4c:0d:de:c1:fa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Sep 10 22:44:48 2026 GMT
            Not After : Sep  9 22:49:48 2027 GMT
        Subject: CN=DE6E1A6BA23990502E7FB4BC5B1DDCEF732BC8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:9b:f2:b2:ab:93:ef:7d:36:84:fe:46:a8:
                    53:8b:6b:73:ec:ae:26:60:fc:d0:4a:da:4f:51:d7:
                    1d:f0:d1:60:10:14:b7:98:3c:19:7e:33:95:77:04:
                    d9:93:66:15:3d:ab:74:a7:c1:ef:03:21:f3:af:c2:
                    ad:8d:73:fa:fb:44:a2:64:77:57:d9:0e:a3:de:14:
                    fd:86:6f:d5:af:59:57:e9:ee:93:35:cf:44:96:f3:
                    07:ce:67:1c:26:67:4c:64:77:a1:58:6b:0b:c5:f4:
                    a0:4f:8d:20:6c:c6:46:42:b9:01:e1:ef:34:2b:d9:
                    ef:04:bc:d5:82:b0:9d:95:c7:35:98:89:a5:06:e3:
                    78:a9:06:ae:1b:57:f9:c9:05:ca:61:64:d9:05:25:
                    1d:44:b0:68:24:3a:ad:4a:33:4d:ba:1f:88:aa:af:
                    a2:bb:8e:32:b9:bd:e3:02:7c:f6:f3:95:32:b4:b9:
                    e9:3d:e4:01:7b:68:b3:06:91:ce:d3:8c:0f:3d:27:
                    fb:df:5a:44:d7:65:bb:0d:d3:5f:5f:79:4a:a5:f2:
                    25:8e:45:a6:b1:b9:6c:57:d7:1d:ad:b4:2c:19:6c:
                    28:9c:21:da:df:22:a7:48:73:13:ef:31:f3:45:a3:
                    9c:88:bc:fc:8a:46:63:0d:bf:f1:d7:c9:8e:a1:ac:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:1A:6B:A2:39:90:50:2E:7F:B4:BC:5B:1D:DC:EF:73:2B:C8:F6
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218904.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.227.0/24
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:43:96:3a:7b:28:c7:5f:d5:c1:71:80:34:36:9f:d2:d5:ff:
         b2:07:ae:3f:5c:b5:d5:a2:f4:b2:10:68:98:66:17:87:d6:e2:
         49:5c:76:e9:53:b7:c1:6c:d7:77:d3:ff:00:e8:a4:2e:c8:e1:
         39:66:fe:c1:a7:c5:1e:79:4d:73:63:52:52:50:d8:20:62:e3:
         16:3a:a0:66:cb:50:ac:2a:ce:0e:55:90:da:5f:f2:d9:1b:8d:
         bf:8e:c6:4b:cb:8c:8a:a3:b7:78:3e:34:58:34:42:f9:fa:b0:
         ba:cd:9d:c6:19:b0:3c:db:9b:e3:ef:57:d5:a4:30:d5:b2:b5:
         de:8e:8b:c2:7e:14:11:bd:7c:02:b9:ce:bb:d9:3d:ee:6d:f1:
         2c:4b:6f:b1:be:d0:54:73:33:09:dd:b6:95:a2:ce:19:6f:ad:
         21:e7:9f:eb:4c:5f:06:66:e2:ba:59:3b:2d:22:30:06:c5:8c:
         ba:44:a8:99:95:6a:4e:7c:7c:64:7f:e0:2e:0a:70:65:84:ff:
         ed:5d:f8:de:68:ca:78:07:0c:09:35:93:8e:53:8a:2e:bd:22:
         ae:92:d3:0e:d3:87:b3:59:89:75:66:2d:cd:d6:44:71:0c:b4:
         fb:38:21:96:a1:0a:cc:d6:27:90:ef:c5:c4:43:4d:ce:9b:67:
         b8:62:67:c3
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUWmCfSYQY6OLl5ujwNplMDd7B+kkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA5MTAyMjQ0NDhaFw0yNzA5MDkyMjQ5NDhaMDMxMTAvBgNV
BAMTKERFNkUxQTZCQTIzOTkwNTAyRTdGQjRCQzVCMUREQ0VGNzMyQkM4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreJvysquT7302hP5GqFOLa3Ps
riZg/NBK2k9R1x3w0WAQFLeYPBl+M5V3BNmTZhU9q3Snwe8DIfOvwq2Nc/r7RKJk
d1fZDqPeFP2Gb9WvWVfp7pM1z0SW8wfOZxwmZ0xkd6FYawvF9KBPjSBsxkZCuQHh
7zQr2e8EvNWCsJ2VxzWYiaUG43ipBq4bV/nJBcphZNkFJR1EsGgkOq1KM026H4iq
r6K7jjK5veMCfPbzlTK0uek95AF7aLMGkc7TjA89J/vfWkTXZbsN019feUql8iWO
RaaxuWxX1x2ttCwZbCicIdrfIqdIcxPvMfNFo5yIvPyKRmMNv/HXyY6hrDdJAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQU3m4aa6I5kFAuf7S8Wx3c73MryPYwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjE4OTA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQAVZvjMA0EAgACMAcDBQAqBd/GMA0GCSqGSIb3DQEB
CwUAA4IBAQA2Q5Y6eyjHX9XBcYA0Np/S1f+yB64/XLXVovSyEGiYZheH1uJJXHbp
U7fBbNd30/8A6KQuyOE5Zv7Bp8UeeU1zY1JSUNggYuMWOqBmy1CsKs4OVZDaX/LZ
G42/jsZLy4yKo7d4PjRYNEL5+rC6zZ3GGbA825vj71fVpDDVsrXejovCfhQRvXwC
uc672T3ubfEsS2+xvtBUczMJ3baVos4Zb60h55/rTF8GZuK6WTstIjAGxYy6RKiZ
lWpOfHxkf+AuCnBlhP/tXfjeaMp4BwwJNZOOU4ouvSKuktMO04ezWYl1Zi3N1kRx
DLT7OCGWoQrM1ieQ78XEQ03Om2e4YmfD
-----END CERTIFICATE-----