Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS219412.roa
File:                     AS219412.roa (raw, json)
Hash identifier:          ND2vXquF2ujml2uMuXA4uNWOpNImaj9Sa+0Yca8E0K0=
Subject key identifier:   33:2D:BB:27:D4:D3:66:E7:0C:5C:C6:B9:7E:49:33:11:FB:54:30:15
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       1A0752A802A20D6EAC176B31E4FAEEC629085322
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS219412.roa
Signing time:             Thu 27 Aug 2026 19:49:25 +0000
ROA not before:           Thu 27 Aug 2026 19:44:25 +0000
ROA not after:            Thu 26 Aug 2027 19:49:25 +0000
asID:                     219412
IP address blocks:        185.121.178.0/24 maxlen: 24
                          2a0d:d904::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:07:52:a8:02:a2:0d:6e:ac:17:6b:31:e4:fa:ee:c6:29:08:53:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Aug 27 19:44:25 2026 GMT
            Not After : Aug 26 19:49:25 2027 GMT
        Subject: CN=332DBB27D4D366E70C5CC6B97E493311FB543015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:7d:a3:58:44:df:4e:d6:a6:30:7a:70:ac:
                    e3:99:83:0c:26:be:89:8e:8b:25:c4:c1:33:8c:d8:
                    a8:0e:5a:73:e6:e9:1c:ca:e2:aa:b9:17:be:61:c3:
                    06:65:30:ee:7e:b2:58:4a:f6:bd:b7:3e:42:fe:2c:
                    01:a5:41:61:85:cb:52:bf:b6:86:70:8c:6a:df:a5:
                    10:b2:c4:b4:16:5b:20:a4:df:9b:67:a6:4b:23:85:
                    ba:00:6c:c9:9f:74:cf:62:77:84:09:81:54:7d:4b:
                    b9:88:a1:3e:55:74:24:ef:23:de:41:14:dc:5e:6b:
                    0e:6b:c7:1b:2f:69:36:77:ee:4a:97:9b:c6:67:97:
                    3a:3c:c3:97:67:89:21:c6:60:72:fb:e6:5f:77:4f:
                    e9:34:d4:6c:bd:eb:4b:c3:73:3a:a7:6a:d7:dc:5a:
                    1f:77:20:6d:ca:4c:51:04:59:41:c6:78:f3:bd:b5:
                    9e:dd:9e:31:b0:84:a7:2d:ef:91:02:28:67:1b:a3:
                    f2:1f:b3:a4:e1:8f:b7:b0:3f:ee:05:90:70:dd:82:
                    8b:76:96:68:e7:20:ef:0f:9a:8e:41:83:80:61:75:
                    99:16:f5:a0:09:d5:17:54:86:70:93:1a:de:a8:f0:
                    97:25:bd:96:48:98:eb:77:59:7d:d6:0f:cb:9b:d1:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2D:BB:27:D4:D3:66:E7:0C:5C:C6:B9:7E:49:33:11:FB:54:30:15
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS219412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.178.0/24
                IPv6:
                  2a0d:d904::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:3d:6c:59:9d:3c:12:19:d4:8c:a6:2e:5e:65:8d:3f:06:
         32:99:0c:52:c3:2b:2b:c2:44:0f:c4:c3:1d:ce:d1:57:11:f3:
         97:2f:e6:62:80:91:45:8a:14:ff:24:77:6b:fa:ab:dc:db:ad:
         82:a7:8f:4a:f1:f2:b7:17:c9:d4:ff:a1:80:84:14:87:3a:b4:
         e4:7f:09:4e:8c:ae:7f:fa:ae:e9:e1:c6:0d:7c:a8:56:cd:15:
         ac:f7:31:b1:e9:06:bf:f2:9f:72:c4:39:53:17:41:cc:ac:41:
         90:ae:66:b8:12:90:ac:45:58:c8:1c:19:21:91:96:40:87:39:
         ce:c2:30:d7:c3:f6:f0:36:b0:47:96:b8:ba:1c:f6:26:b1:2c:
         e4:24:11:b8:97:1b:33:91:88:39:a1:e8:c3:bb:43:31:e4:75:
         b1:99:d7:5d:ff:51:92:ba:5e:b2:70:51:36:7a:cd:e4:1a:ad:
         c3:de:d3:71:97:a8:ac:ee:4a:25:ca:e4:93:e1:80:20:31:83:
         31:ee:a7:50:ee:05:f3:7d:e4:2a:9c:ad:da:d2:53:fd:a9:31:
         68:41:59:59:14:6b:af:97:b0:b8:56:2d:18:bc:0c:d5:77:f3:
         b1:ab:46:cb:71:5f:6c:34:ff:7a:7e:8c:02:2e:82:41:2c:75:
         0e:e5:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----