Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS213734.roa
File:                     AS213734.roa (raw, json)
Hash identifier:          sCEEGzmBGcYHoBeAFEObKTqTt60kLnemQlo084I6/7M=
Subject key identifier:   BC:5A:46:7F:57:56:E4:63:F0:2F:12:F5:96:A6:EF:BA:D8:3E:34:D4
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3729D8B1A256AB8F4522C42DC49589BD52D8CEB1
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS213734.roa
Signing time:             Sun 08 Mar 2026 14:38:54 +0000
ROA not before:           Sun 08 Mar 2026 14:33:54 +0000
ROA not after:            Sun 07 Mar 2027 14:38:54 +0000
asID:                     213734
IP address blocks:        40.27.129.0/24 maxlen: 24
                          40.27.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 10:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:29:d8:b1:a2:56:ab:8f:45:22:c4:2d:c4:95:89:bd:52:d8:ce:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  8 14:33:54 2026 GMT
            Not After : Mar  7 14:38:54 2027 GMT
        Subject: CN=BC5A467F5756E463F02F12F596A6EFBAD83E34D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:29:18:4d:50:6d:c8:e4:a9:72:f9:ca:07:7b:
                    98:1a:52:2a:ad:b1:f7:bd:1d:01:c7:8f:ff:7a:1b:
                    63:45:09:2d:e9:03:7b:a8:51:fa:72:21:ee:be:58:
                    90:90:9b:9f:5a:fc:b3:27:16:ad:a0:60:09:e8:ca:
                    bb:02:59:33:c8:fc:e4:36:f3:96:4a:0c:ca:c7:ff:
                    53:09:b6:93:0f:06:f1:cd:8a:f2:71:bb:3e:33:19:
                    4d:9f:24:0e:05:ab:ef:d3:70:03:d4:b8:b8:c5:a4:
                    dc:7e:82:f9:55:fe:10:a0:4b:af:33:d6:62:18:80:
                    04:55:18:d4:9e:ca:b3:2e:c8:68:00:ec:dd:a4:2b:
                    0c:63:bb:02:38:6b:20:5d:5a:c0:d5:fe:38:c2:6a:
                    d4:bc:57:01:51:16:ce:63:9e:81:99:dd:d3:74:15:
                    bf:c6:1a:17:28:8d:df:93:15:e6:74:fe:79:2a:7e:
                    48:1b:e2:2b:38:c9:a2:69:74:6f:ba:ea:ea:e6:26:
                    19:28:6d:25:76:e0:66:3b:ea:a9:3e:18:9f:ec:5f:
                    5e:55:0b:36:e6:ef:7f:cf:47:fd:50:12:7b:94:51:
                    c9:fb:41:ec:9a:02:83:9b:11:13:ac:c7:94:02:dd:
                    2e:b8:7a:7f:87:67:e6:84:64:ec:fa:44:72:8a:ab:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5A:46:7F:57:56:E4:63:F0:2F:12:F5:96:A6:EF:BA:D8:3E:34:D4
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS213734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.129.0/24
                  40.27.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:77:29:b4:ff:ae:36:f0:4c:f3:8d:94:4b:63:f5:c3:a2:
         09:b2:ed:90:b3:55:e0:9c:3e:31:3d:92:e4:b1:74:24:59:4f:
         e2:10:82:ce:64:6f:9a:0b:ac:5e:cd:f7:d5:6f:76:43:c3:ec:
         44:7f:a2:9e:29:7f:49:8a:00:1a:1b:59:03:1f:1f:38:fe:dd:
         3e:e6:93:60:6f:9c:ea:7f:98:26:fd:3f:26:e2:fb:04:04:9a:
         13:e9:cf:f8:fb:61:7f:e9:78:3d:38:d0:16:b6:34:0e:f1:32:
         4f:a3:f6:84:98:52:30:b3:64:53:22:d4:bc:88:85:d8:a3:2b:
         52:14:f2:c7:f3:a4:d4:3b:31:42:2b:57:40:fb:84:00:f9:a0:
         25:f3:8c:28:fb:54:cf:a1:27:d4:c7:c4:43:38:2e:b8:55:cf:
         f6:b4:ce:1e:30:f8:a4:33:3f:13:cc:9f:94:60:2a:dc:c6:9a:
         be:7b:12:f7:4e:23:6b:7d:00:52:64:06:23:27:e0:d3:09:64:
         ab:c4:48:49:f9:7a:15:34:3c:64:87:04:77:ff:bd:c1:5d:d5:
         49:30:b6:85:43:80:bb:18:8b:8c:14:1c:70:3e:27:42:26:11:
         c5:01:ab:fb:a0:c2:3f:39:80:2a:67:38:cb:c1:da:d0:00:a1:
         c0:06:53:91
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUNynYsaJWq49FIsQtxJWJvVLYzrEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzA4MTQzMzU0WhcNMjcwMzA3MTQzODU0
WjAzMTEwLwYDVQQDEyhCQzVBNDY3RjU3NTZFNDYzRjAyRjEyRjU5NkE2RUZCQUQ4
M0UzNEQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SkYTVBtyOSp
cvnKB3uYGlIqrbH3vR0Bx4//ehtjRQkt6QN7qFH6ciHuvliQkJufWvyzJxatoGAJ
6Mq7AlkzyPzkNvOWSgzKx/9TCbaTDwbxzYrycbs+MxlNnyQOBavv03AD1Li4xaTc
foL5Vf4QoEuvM9ZiGIAEVRjUnsqzLshoAOzdpCsMY7sCOGsgXVrA1f44wmrUvFcB
URbOY56Bmd3TdBW/xhoXKI3fkxXmdP55Kn5IG+IrOMmiaXRvuurq5iYZKG0lduBm
O+qpPhif7F9eVQs25u9/z0f9UBJ7lFHJ+0HsmgKDmxETrMeUAt0uuHp/h2fmhGTs
+kRyiqvT0wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFLxaRn9XVuRj8C8S9Zam77rY
PjTUMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzIxMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACgbgQMEACgbwDANBgkqhkiG9w0B
AQsFAAOCAQEAg8J3KbT/rjbwTPONlEtj9cOiCbLtkLNV4Jw+MT2S5LF0JFlP4hCC
zmRvmgusXs331W92Q8PsRH+inil/SYoAGhtZAx8fOP7dPuaTYG+c6n+YJv0/JuL7
BASaE+nP+Pthf+l4PTjQFrY0DvEyT6P2hJhSMLNkUyLUvIiF2KMrUhTyx/Ok1Dsx
QitXQPuEAPmgJfOMKPtUz6En1MfEQzguuFXP9rTOHjD4pDM/E8yflGAq3MaavnsS
904ja30AUmQGIyfg0wlkq8RISfl6FTQ8ZIcEd/+9wV3VSTC2hUOAuxiLjBQccD4n
QiYRxQGr+6DCPzmAKmc4y8Ha0AChwAZTkQ==
-----END CERTIFICATE-----
Generated at Tue Mar 17 17:31:31 2026 by rpki-client