Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
File:                     AS214716.roa (raw, json)
Hash identifier:          SLIfd0TRTqee4IPXFWPMhGMQYoX81WcVZx6NciHyiWs=
Subject key identifier:   62:75:16:6B:93:B0:2C:00:3A:1B:41:24:51:36:5A:7C:FD:AA:C8:1F
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       59EEEA5E8BEC5E8E6BCF6949D73B54E7485A3E88
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
Signing time:             Wed 22 Jul 2026 09:22:54 +0000
ROA not before:           Wed 22 Jul 2026 09:17:54 +0000
ROA not after:            Wed 21 Jul 2027 09:22:54 +0000
asID:                     214716
IP address blocks:        81.31.210.0/24 maxlen: 24
                          81.31.211.0/24 maxlen: 24
                          85.155.98.0/24 maxlen: 24
                          85.155.226.0/24 maxlen: 24
                          103.109.234.0/24 maxlen: 24
                          143.246.182.0/24 maxlen: 24
                          167.104.217.0/24 maxlen: 24
                          167.104.223.0/24 maxlen: 24
                          195.184.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ee:ea:5e:8b:ec:5e:8e:6b:cf:69:49:d7:3b:54:e7:48:5a:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul 22 09:17:54 2026 GMT
            Not After : Jul 21 09:22:54 2027 GMT
        Subject: CN=6275166B93B02C003A1B412451365A7CFDAAC81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:74:63:de:5d:ad:99:be:b0:22:bb:e7:94:
                    9f:c1:ff:f7:b0:07:60:d8:0e:4a:27:db:80:d4:61:
                    3c:ef:28:72:d8:b0:a5:cb:93:70:8d:ec:c4:8e:93:
                    c5:3a:27:4e:0f:e3:35:55:75:5d:5e:ba:3c:72:7a:
                    17:a8:f8:2d:32:8f:1c:11:14:c3:a1:ba:55:89:db:
                    14:0a:87:63:b9:77:e0:1d:c7:ef:21:2c:66:a1:b0:
                    a9:c5:69:b7:f8:bd:c2:7b:61:73:d2:ba:3d:00:24:
                    2f:c6:8d:68:99:dc:88:16:43:7f:69:9f:49:67:85:
                    39:7e:bf:73:60:fa:af:ba:a2:81:95:5d:f9:dd:41:
                    85:02:d3:c5:71:43:37:be:a7:03:4c:2f:bc:86:a7:
                    de:fa:6e:bd:40:07:3f:27:27:76:58:f1:b8:cf:aa:
                    ef:94:0b:b5:97:e6:54:62:5b:04:b0:96:19:7c:01:
                    bc:84:08:b3:94:58:6d:2f:10:da:a3:2b:46:0e:83:
                    ef:9d:d8:e1:12:06:81:67:c0:95:c6:47:4e:bc:57:
                    bf:4b:36:88:1e:27:fb:f9:00:03:dd:a8:cd:22:ef:
                    be:c2:48:f1:22:cb:2f:9f:28:6d:32:0c:27:38:dd:
                    ab:81:02:45:b4:69:4a:ef:9b:03:e5:56:87:07:46:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:75:16:6B:93:B0:2C:00:3A:1B:41:24:51:36:5A:7C:FD:AA:C8:1F
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.210.0/23
                  85.155.98.0/24
                  85.155.226.0/24
                  103.109.234.0/24
                  143.246.182.0/24
                  167.104.217.0/24
                  167.104.223.0/24
                  195.184.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:53:7d:61:bc:53:5a:e6:5b:a9:7a:5d:ff:31:1a:53:5a:
         7b:30:f4:29:d8:c8:e7:b7:05:6a:8e:f6:45:f3:9b:4b:b8:44:
         d7:d4:bc:6f:29:37:70:10:d7:84:fa:61:0d:1c:88:12:ca:ad:
         cc:bf:9a:4b:e5:f8:65:82:81:4f:b6:f2:78:e9:07:45:ac:d7:
         4b:7b:99:ee:dc:2c:62:2d:92:47:1f:4f:9d:84:29:79:f1:69:
         46:89:f4:33:fa:d1:30:d9:60:4a:80:90:9b:56:65:c2:e8:59:
         1b:66:2c:fc:56:bc:53:85:b6:99:e5:3b:db:f4:cd:15:42:6d:
         2a:5d:e9:8f:bd:21:ad:b1:ce:3e:ad:83:0e:7a:68:29:be:fb:
         a7:dc:26:3c:e8:16:23:83:41:c9:bd:0d:bb:df:ea:fa:fb:34:
         08:c5:ab:f7:76:6b:b1:c4:87:f5:1f:4a:28:d6:d3:43:eb:23:
         27:ba:38:dd:f9:b1:44:47:a7:0d:17:18:38:19:3e:20:e4:fa:
         94:c4:7c:5b:dc:12:e5:92:5d:eb:cf:af:e4:0a:18:60:e9:0d:
         00:95:b9:e6:54:54:62:62:90:9d:9b:45:18:1a:6b:2c:76:0d:
         bf:66:00:88:83:87:0e:b5:8d:ec:ae:f0:22:40:3f:3a:39:c4:
         30:bd:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:10:20 2026 by rpki-client