Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS212477.roa
File:                     AS212477.roa (raw, json)
Hash identifier:          dW+bP/YKgZv0XWXz3IOQcdkGkUReg9B3TOApKf3G2hg=
Subject key identifier:   87:15:FE:3C:8D:44:47:74:EB:2F:01:ED:8F:C1:67:08:51:F0:C8:17
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1A7379F063FFD36FB31A46CE0CCB417E6B9001EB
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS212477.roa
Signing time:             Thu 15 Oct 2026 06:45:09 +0000
ROA not before:           Thu 15 Oct 2026 06:40:09 +0000
ROA not after:            Thu 14 Oct 2027 06:45:09 +0000
asID:                     212477
IP address blocks:        40.223.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:73:79:f0:63:ff:d3:6f:b3:1a:46:ce:0c:cb:41:7e:6b:90:01:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 15 06:40:09 2026 GMT
            Not After : Oct 14 06:45:09 2027 GMT
        Subject: CN=8715FE3C8D444774EB2F01ED8FC1670851F0C817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:cb:fb:0e:e3:74:1b:4c:b6:8d:9a:8a:2c:
                    a7:c7:c0:ae:7d:a9:39:0e:d6:f0:21:83:ed:04:a6:
                    fe:ca:32:d6:51:14:d4:d2:30:41:a3:68:fb:ec:41:
                    2f:b8:10:b4:2d:99:81:67:d6:72:77:23:4e:04:39:
                    34:ab:e7:54:50:de:c7:ce:26:99:89:c0:a6:17:84:
                    62:9b:03:6f:0d:29:09:a3:92:c2:6e:25:27:d9:24:
                    be:26:e6:d5:82:b9:81:ba:07:b8:48:40:f1:a3:bc:
                    34:2b:8b:7f:c9:22:2d:87:46:c4:b9:93:95:99:1d:
                    7a:11:33:01:b3:40:59:89:95:c9:af:a1:e8:42:56:
                    ad:01:91:62:b5:27:bd:e0:7e:9a:48:fe:00:15:ea:
                    64:96:89:5b:50:da:c1:50:cc:dc:49:10:78:43:32:
                    7f:7e:28:b2:8a:2c:67:9b:91:9c:47:9e:45:55:ba:
                    c8:ce:01:a4:47:e0:33:ff:ad:bb:bf:fc:04:71:ff:
                    e4:0d:9f:0a:0f:06:8f:46:0e:6b:1b:5d:85:53:21:
                    1a:49:88:97:83:bb:5d:01:b0:f1:e9:1a:e2:1f:aa:
                    60:bf:3f:37:3c:1a:4b:12:6a:e1:bf:c6:ab:54:61:
                    c0:d6:24:54:9f:35:4e:38:a7:d3:02:21:e1:10:d2:
                    af:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:15:FE:3C:8D:44:47:74:EB:2F:01:ED:8F:C1:67:08:51:F0:C8:17
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS212477.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:19:bf:39:b5:e2:a6:0c:a0:5f:3a:41:c1:47:36:61:56:a8:
         fd:75:96:57:dd:8e:14:8f:e2:e8:90:ba:2f:a7:a3:53:a1:2c:
         24:86:04:d9:df:68:16:3b:59:70:0d:a3:73:1f:b8:56:fd:98:
         a1:b5:7c:3c:e1:46:e9:2e:b4:53:d2:6c:ec:ef:ea:93:d9:85:
         da:32:69:8c:06:5f:a1:97:2e:9d:fe:de:d4:fe:3b:4d:31:72:
         2b:b2:ac:1b:83:79:c9:15:50:46:00:5b:fe:ad:96:18:26:4f:
         b0:d4:52:ee:6e:8f:c3:2f:ee:95:32:bc:bb:79:3a:4c:cc:cb:
         cc:b6:67:4d:4f:6a:ad:88:42:17:0b:9d:35:0e:af:3e:ea:86:
         a3:dc:09:6e:6e:fd:0b:3d:4b:b9:ca:6f:80:ce:5f:16:bc:24:
         d6:be:f8:c8:45:f9:28:fd:83:d7:2b:30:3f:cf:27:0d:da:d8:
         c8:06:b4:30:1a:07:5b:49:02:ce:3d:cc:7b:c5:cb:de:15:31:
         94:ef:12:13:79:b4:16:0d:fe:b5:a8:85:ed:91:e9:c4:8f:19:
         a0:63:81:a4:7e:ba:24:71:96:ca:93:d1:d1:8b:d2:0c:1e:0f:
         20:06:51:3c:e6:31:78:6f:31:e4:d1:b1:f9:87:e8:f5:36:ff:
         be:67:08:d2
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUGnN58GP/02+zGkbODMtBfmuQAeswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMDE1MDY0MDA5WhcNMjcxMDE0MDY0NTA5
WjAzMTEwLwYDVQQDEyg4NzE1RkUzQzhENDQ0Nzc0RUIyRjAxRUQ4RkMxNjcwODUx
RjBDODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTTL+w7jdBtM
to2aiiynx8Cufak5DtbwIYPtBKb+yjLWURTU0jBBo2j77EEvuBC0LZmBZ9ZydyNO
BDk0q+dUUN7HziaZicCmF4RimwNvDSkJo5LCbiUn2SS+JubVgrmBuge4SEDxo7w0
K4t/ySIth0bEuZOVmR16ETMBs0BZiZXJr6HoQlatAZFitSe94H6aSP4AFepklolb
UNrBUMzcSRB4QzJ/fiiyiixnm5GcR55FVbrIzgGkR+Az/627v/wEcf/kDZ8KDwaP
Rg5rG12FUyEaSYiXg7tdAbDx6RriH6pgvz83PBpLEmrhv8arVGHA1iRUnzVOOKfT
AiHhENKv3wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIcV/jyNREd06y8B7Y/BZwhR
8MgXMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzIxMjQ3Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASjf+DANBgkqhkiG9w0BAQsFAAOC
AQEAMRm/ObXipgygXzpBwUc2YVao/XWWV92OFI/i6JC6L6ejU6EsJIYE2d9oFjtZ
cA2jcx+4Vv2YobV8POFG6S60U9Js7O/qk9mF2jJpjAZfoZcunf7e1P47TTFyK7Ks
G4N5yRVQRgBb/q2WGCZPsNRS7m6Pwy/ulTK8u3k6TMzLzLZnTU9qrYhCFwudNQ6v
PuqGo9wJbm79Cz1LucpvgM5fFrwk1r74yEX5KP2D1yswP88nDdrYyAa0MBoHW0kC
zj3Me8XL3hUxlO8SE3m0Fg3+taiF7ZHpxI8ZoGOBpH66JHGWypPR0YvSDB4PIAZR
POYxeG8x5NGx+Yfo9Tb/vmcI0g==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:58:04 2026 by rpki-client