Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213186.roa
File:                     AS213186.roa (raw, json)
Hash identifier:          pil6fFUTFVNKRycwJBCrv2UOyCdJlzRHJ9tyAhFJznc=
Subject key identifier:   96:8E:DE:02:D4:FF:E4:50:4B:02:A0:CE:F5:54:92:E6:1A:DD:64:C4
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6328ABBE152B11F05992591267FA4C75636EA955
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213186.roa
Signing time:             Thu 03 Jul 2025 09:29:44 +0000
ROA not before:           Thu 03 Jul 2025 09:24:44 +0000
ROA not after:            Thu 02 Jul 2026 09:29:44 +0000
asID:                     213186
IP address blocks:        157.254.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 21:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:ab:be:15:2b:11:f0:59:92:59:12:67:fa:4c:75:63:6e:a9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 09:24:44 2025 GMT
            Not After : Jul  2 09:29:44 2026 GMT
        Subject: CN=968EDE02D4FFE4504B02A0CEF55492E61ADD64C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:32:7b:ca:9e:76:bf:e7:08:23:62:ea:1a:
                    da:04:43:69:fd:9d:7e:4d:82:81:ab:06:5f:e7:85:
                    d7:8f:7d:2d:55:e8:ec:1d:b6:82:b9:a6:49:28:61:
                    9f:5d:62:bd:8e:5a:a3:5f:67:32:1e:21:88:d8:de:
                    87:18:2f:ba:36:ce:62:c5:07:e3:48:ef:07:0a:1a:
                    8b:7a:cd:42:77:22:1b:73:97:58:b3:9a:fd:b9:df:
                    10:56:a4:91:cc:b9:07:3b:f1:1a:a6:91:40:ee:7d:
                    6f:31:15:b6:3a:1c:44:93:ae:e1:41:2f:a6:06:1e:
                    f6:84:c8:0f:9f:3c:59:3b:bc:65:de:6a:bd:5c:bb:
                    eb:25:de:34:38:c5:99:f0:7c:8c:be:01:d7:a7:74:
                    ee:4c:d0:8d:21:76:bb:b5:c1:c9:ba:a1:10:b1:2b:
                    93:48:bb:65:0a:7b:a8:7a:1b:a0:bb:8a:86:b7:96:
                    e1:6e:ab:23:b6:1d:22:a3:e3:6f:21:d8:3b:15:52:
                    48:4d:6d:54:a9:de:5c:54:b8:b2:a4:28:eb:82:74:
                    18:55:cd:f8:b9:46:a4:c1:4b:32:21:b8:ed:77:ea:
                    7f:ee:97:9d:48:5b:43:6e:34:51:04:a7:90:db:eb:
                    7e:09:19:fc:96:9c:f9:4d:c9:da:7f:2f:56:c6:3f:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:DE:02:D4:FF:E4:50:4B:02:A0:CE:F5:54:92:E6:1A:DD:64:C4
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:53:ec:8f:5c:b1:a2:35:54:fa:be:3d:e4:12:ac:90:44:9e:
         e1:df:e3:89:28:e1:06:bb:ca:53:66:87:ed:83:ca:41:31:46:
         50:e6:8d:ab:b3:88:7c:5a:9d:1c:25:aa:04:0a:1d:20:87:62:
         dc:55:50:15:ba:79:4b:36:d5:84:0b:4e:22:1a:7e:f2:cf:95:
         9f:0b:55:83:1f:9f:53:53:c3:1d:e5:b7:0d:e3:cb:d5:b0:8c:
         46:71:c3:0a:3d:c1:a9:3e:af:1b:31:42:f6:27:84:5a:50:59:
         96:b5:bc:d5:50:03:58:cc:d3:05:0b:ce:c7:c8:50:b2:14:05:
         04:bb:c0:d7:a3:ac:2f:c6:ff:7a:88:33:65:d2:46:de:46:55:
         65:f0:56:e8:5b:ea:1a:b0:53:73:26:df:4f:4e:45:b6:28:4d:
         84:c7:03:89:29:08:bd:3e:2f:d8:a8:cf:d7:37:b5:03:ae:fb:
         07:68:1b:5d:9e:df:14:91:c0:0d:13:c7:8d:a2:86:c6:51:e5:
         83:42:8c:4c:ad:99:2f:48:8e:10:e6:0b:a3:4d:65:51:3c:ec:
         f1:f8:e6:34:9e:d8:85:f5:c4:35:42:14:ad:f1:e2:a8:d4:11:
         7a:c9:94:1e:64:67:1e:f3:b4:f1:07:b1:d9:fe:7d:43:00:f0:
         05:b4:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:40 2025 by rpki-client