Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS19318.roa
File:                     AS19318.roa (raw, json)
Hash identifier:          CM1CkhjKylHByepqu0SaSkft3JY0oDSNozRuW7wpQHI=
Subject key identifier:   3E:ED:A3:2F:B8:D8:C5:3B:8C:AB:94:05:6B:07:C4:43:3E:A4:01:82
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       071F8DCFB4CE152BA6E4989D9214C5CA7C07494F
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS19318.roa
Signing time:             Fri 18 Sep 2026 19:36:20 +0000
ROA not before:           Fri 18 Sep 2026 19:31:20 +0000
ROA not after:            Fri 17 Sep 2027 19:36:20 +0000
asID:                     19318
IP address blocks:        66.225.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1f:8d:cf:b4:ce:15:2b:a6:e4:98:9d:92:14:c5:ca:7c:07:49:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 18 19:31:20 2026 GMT
            Not After : Sep 17 19:36:20 2027 GMT
        Subject: CN=3EEDA32FB8D8C53B8CAB94056B07C4433EA40182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:a8:1f:81:1d:8f:b9:ee:ad:ea:58:9d:51:
                    bb:6f:22:e8:bc:ab:a1:1f:ce:d8:3d:b5:a0:0f:87:
                    aa:4b:ec:82:98:f0:76:9f:8c:56:82:9c:77:6d:73:
                    ed:e4:4e:27:68:a1:1b:82:5e:46:0e:de:c5:65:cf:
                    db:0d:b7:c0:7f:78:34:0f:16:9f:0b:7a:65:2a:56:
                    64:89:4d:98:fe:14:c7:6c:44:34:0b:c1:f8:a6:f3:
                    f1:1f:45:f6:aa:f2:fd:2d:bb:89:d5:d2:dd:ea:c3:
                    8b:18:42:b3:7e:d3:ac:c9:8c:1d:da:9d:c4:46:b8:
                    e1:09:63:16:46:fc:4a:0d:97:d8:04:3e:20:8e:4a:
                    4b:8b:ea:d3:46:74:f3:fa:e8:7a:ad:b2:11:21:93:
                    d3:b9:bd:be:08:52:bd:2d:77:d4:a1:eb:4f:77:89:
                    27:df:5a:72:e5:27:dd:74:76:44:cc:90:7b:a1:d2:
                    94:7f:57:4c:be:7b:8d:ff:e4:07:40:82:da:58:0f:
                    b4:9f:58:6d:29:8d:df:70:9c:43:3b:15:96:3f:9b:
                    c2:98:78:7e:6c:d4:48:39:33:60:61:9e:b5:06:f9:
                    bb:2a:52:be:03:74:f5:ad:13:87:8a:69:81:9d:c7:
                    70:a5:d0:67:97:f3:df:21:aa:e8:83:fd:55:ff:43:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:ED:A3:2F:B8:D8:C5:3B:8C:AB:94:05:6B:07:C4:43:3E:A4:01:82
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS19318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:16:70:ff:a8:c6:40:b2:1f:c8:f1:43:04:ce:c7:ee:71:
         ba:96:8c:0f:00:22:e5:e6:99:b0:25:ad:e3:a7:6f:59:75:5d:
         25:70:e5:4a:7b:be:75:01:4c:e1:4c:f7:96:4c:4e:6b:e4:3a:
         cd:2c:26:7a:68:96:88:1f:4f:de:36:ea:b9:8c:d0:0b:78:3b:
         ba:3e:25:76:01:53:77:b0:ed:7d:8a:84:9d:a9:80:7b:8b:b7:
         41:b3:3d:77:1c:42:31:55:01:68:3e:94:e4:cc:6b:de:d5:8b:
         8b:c3:8e:87:b1:9f:46:95:97:e8:3b:74:cd:68:78:27:8c:cf:
         6f:6a:49:6d:63:c7:1b:ab:fb:70:37:72:98:34:55:e0:fe:78:
         62:48:ef:92:2c:af:ba:4e:c0:50:cb:a1:76:24:f1:63:6f:43:
         39:e3:59:ba:07:9e:a0:7b:29:7e:5c:73:52:db:ae:bb:26:f9:
         b2:5b:85:b1:a9:1f:55:46:c4:25:35:94:40:de:08:3a:92:ce:
         09:5c:39:a7:fc:2a:95:a3:2a:b7:5f:06:69:5e:c4:ea:bb:ce:
         c1:8c:55:f8:da:43:5c:5e:ae:0b:3b:ce:86:f2:c5:d2:3b:0f:
         9f:e1:d9:95:33:40:8a:44:46:cf:ae:e6:7d:81:73:67:a6:1b:
         a6:cd:9f:16
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUBx+Nz7TOFSum5JidkhTFynwHSU8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjYwOTE4MTkzMTIwWhcNMjcwOTE3MTkzNjIw
WjAzMTEwLwYDVQQDEygzRUVEQTMyRkI4RDhDNTNCOENBQjk0MDU2QjA3QzQ0MzNF
QTQwMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0GoH4Edj7nu
repYnVG7byLovKuhH87YPbWgD4eqS+yCmPB2n4xWgpx3bXPt5E4naKEbgl5GDt7F
Zc/bDbfAf3g0DxafC3plKlZkiU2Y/hTHbEQ0C8H4pvPxH0X2qvL9LbuJ1dLd6sOL
GEKzftOsyYwd2p3ERrjhCWMWRvxKDZfYBD4gjkpLi+rTRnTz+uh6rbIRIZPTub2+
CFK9LXfUoetPd4kn31py5SfddHZEzJB7odKUf1dMvnuN/+QHQILaWA+0n1htKY3f
cJxDOxWWP5vCmHh+bNRIOTNgYZ61Bvm7KlK+A3T1rROHimmBncdwpdBnl/PfIaro
g/1V/0PZSwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFD7toy+42MU7jKuUBWsHxEM+
pAGCMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzE5MzE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQuHlMA0GCSqGSIb3DQEBCwUAA4IB
AQCaPxZw/6jGQLIfyPFDBM7H7nG6lowPACLl5pmwJa3jp29ZdV0lcOVKe751AUzh
TPeWTE5r5DrNLCZ6aJaIH0/eNuq5jNALeDu6PiV2AVN3sO19ioSdqYB7i7dBsz13
HEIxVQFoPpTkzGve1YuLw46HsZ9GlZfoO3TNaHgnjM9vakltY8cbq/twN3KYNFXg
/nhiSO+SLK+6TsBQy6F2JPFjb0M541m6B56geyl+XHNS2667JvmyW4WxqR9VRsQl
NZRA3gg6ks4JXDmn/CqVoyq3XwZpXsTqu87BjFX42kNcXq4LO86G8sXSOw+f4dmV
M0CKREbPruZ9gXNnphumzZ8W
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:13:22 2026 by rpki-client