Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
File:                     AS215224.roa (raw, json)
Hash identifier:          Oxdp8Fn3GZfn1y1g7/PwOQARBHe2maBPOFXJ3MWJ0vA=
Subject key identifier:   D3:06:A4:82:A1:83:B9:7B:9E:63:29:55:E0:45:A8:E2:EE:6C:91:6C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       45500E3139D6F0D6242059D1299D7D6D814040A6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
Signing time:             Wed 20 May 2026 00:00:54 +0000
ROA not before:           Tue 19 May 2026 23:55:54 +0000
ROA not after:            Wed 19 May 2027 00:00:54 +0000
asID:                     215224
IP address blocks:        98.142.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 05:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:50:0e:31:39:d6:f0:d6:24:20:59:d1:29:9d:7d:6d:81:40:40:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 19 23:55:54 2026 GMT
            Not After : May 19 00:00:54 2027 GMT
        Subject: CN=D306A482A183B97B9E632955E045A8E2EE6C916C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:e7:7e:1e:70:3e:28:c1:8a:88:37:ea:74:
                    86:5b:67:84:ef:11:f4:85:43:83:59:72:75:fa:e1:
                    c3:aa:54:3b:91:7d:c6:80:bd:24:b9:fd:3a:d7:d6:
                    37:41:a8:39:85:f3:a0:e9:b4:98:af:46:e2:cb:de:
                    ef:a9:f0:b0:a8:88:0a:5f:82:0b:c9:57:94:73:96:
                    77:26:1f:c4:b9:47:f2:0f:e6:39:0d:1a:90:83:36:
                    9d:c4:bd:9b:2b:8e:f4:ab:72:4a:9a:6a:6e:89:26:
                    58:47:6b:87:32:72:f2:ea:11:3c:91:11:ae:51:d0:
                    90:a8:80:14:5b:95:9b:77:ee:1c:b0:5d:cf:29:f4:
                    e4:25:98:dd:f8:bd:5f:fe:71:e1:38:06:01:bd:15:
                    45:79:1a:46:eb:1d:8c:d9:35:c8:f4:73:38:fa:7b:
                    26:27:f3:a6:18:71:9d:68:bc:91:71:c7:55:bf:bf:
                    55:a8:2e:07:54:86:0e:3f:66:36:fd:e3:56:3b:be:
                    12:f8:d6:b8:f6:43:1a:5a:57:aa:af:b7:69:f8:1a:
                    70:62:d9:9d:98:0b:89:ba:31:b2:44:10:8c:cf:5b:
                    fb:66:e0:69:d0:1b:d6:37:b6:dd:ca:82:a5:59:fc:
                    9c:97:98:65:9b:97:31:ab:6c:b0:7f:6a:c1:4a:1a:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:06:A4:82:A1:83:B9:7B:9E:63:29:55:E0:45:A8:E2:EE:6C:91:6C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:51:80:8b:4e:3e:e3:24:d9:52:e6:27:72:4a:54:be:68:
         99:3d:ad:e4:05:40:96:67:08:12:e2:4f:95:0b:7a:f1:98:cf:
         81:61:f0:51:47:6b:c6:58:43:aa:79:c5:c5:89:7e:9f:89:2d:
         90:35:58:fa:05:15:fe:e6:3d:ee:c9:9e:f6:53:86:ca:43:70:
         e1:1a:d4:36:d3:0b:9b:e8:bc:96:0b:94:4a:ed:17:46:2e:3a:
         85:84:ee:6f:b1:68:55:95:82:5a:37:42:0b:d9:70:25:1e:61:
         ed:77:67:83:f2:bf:0b:21:65:e3:cb:5c:4b:84:b0:36:aa:aa:
         89:79:59:7f:c5:eb:a0:04:cc:cb:b7:14:8f:6c:5f:8b:a5:cc:
         25:88:7a:31:50:0d:64:0a:54:b4:bc:15:02:e4:ad:c3:21:4d:
         78:91:3b:82:bb:8b:47:35:3f:ea:63:85:ba:9b:9b:13:28:14:
         22:05:18:e7:8a:5e:39:6e:62:41:44:9f:b1:d3:23:b5:f5:1b:
         66:ac:07:11:30:08:ac:be:2f:78:c1:3f:6a:46:3d:d3:6f:0d:
         a3:c0:79:36:85:9f:83:ad:fa:ef:0d:57:88:e5:c3:4b:20:7b:
         75:4e:76:fe:57:41:10:2d:a5:86:22:7c:1a:27:65:d2:a1:52:
         cd:21:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:06:34 2026 by rpki-client