Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213734.roa
File:                     AS213734.roa (raw, json)
Hash identifier:          NSHMDbsxXZ0Yt24DFTWqtkvkr85UgL5Y1Hda/eWL6jk=
Subject key identifier:   44:57:BD:82:D5:FB:1D:AF:FB:F1:60:CC:34:44:A8:DB:01:6C:82:16
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3763369D8623E0DC2C785BAC3DE2EC6CB1EB85F9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213734.roa
Signing time:             Sun 08 Mar 2026 14:38:50 +0000
ROA not before:           Sun 08 Mar 2026 14:33:50 +0000
ROA not after:            Sun 07 Mar 2027 14:38:50 +0000
asID:                     213734
IP address blocks:        69.12.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 18:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:63:36:9d:86:23:e0:dc:2c:78:5b:ac:3d:e2:ec:6c:b1:eb:85:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar  8 14:33:50 2026 GMT
            Not After : Mar  7 14:38:50 2027 GMT
        Subject: CN=4457BD82D5FB1DAFFBF160CC3444A8DB016C8216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:55:d6:19:3f:22:95:a0:fa:bd:24:50:13:
                    21:da:82:ba:21:27:cf:f5:b3:3f:4e:a5:36:0e:ec:
                    11:da:77:f1:f4:1a:d3:35:38:f2:6c:ba:de:ff:61:
                    40:b2:67:d8:8f:c5:56:22:dc:dd:2b:c5:ed:1a:21:
                    8e:41:2e:8f:1f:04:05:d4:53:14:d1:e2:9f:0c:c2:
                    9b:fd:85:29:1e:69:59:b5:d7:df:47:d5:3c:db:00:
                    82:aa:77:36:d0:92:b3:f7:ef:7d:a4:ba:99:8b:3e:
                    89:35:1c:20:42:ae:51:84:01:24:d8:e2:86:cc:d1:
                    d2:a5:a9:90:d5:41:e4:eb:e6:2a:85:7e:44:9b:b0:
                    9b:09:66:0e:6a:0f:93:13:9d:d1:fa:b7:c7:b4:b6:
                    ee:ab:45:2a:50:b8:42:97:61:9b:e8:fb:35:fe:da:
                    f8:18:2e:ee:93:f1:9e:e8:75:e9:e3:17:5f:65:57:
                    b0:5a:67:66:7c:50:8c:01:56:8b:d2:ba:29:89:06:
                    4e:3b:d1:54:6c:33:5a:3c:b6:ca:81:b3:fb:4b:ba:
                    f4:a3:ec:ae:38:95:3b:6f:fc:33:b6:8d:72:17:45:
                    f3:4f:e4:c2:2a:ca:06:e4:cf:4f:d5:d0:dd:28:51:
                    df:a6:f7:5b:67:2c:b3:c0:1a:19:b6:68:98:74:a4:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:57:BD:82:D5:FB:1D:AF:FB:F1:60:CC:34:44:A8:DB:01:6C:82:16
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:a9:9c:4c:31:72:0a:47:42:4b:27:23:74:ea:97:e9:fe:
         5d:ab:1a:58:47:04:5d:31:a1:f0:e1:06:17:d4:64:40:63:1a:
         b9:e3:57:8e:92:20:97:be:14:c8:00:67:15:83:9c:0e:0c:8e:
         8a:00:53:05:37:1d:c9:65:46:10:5d:a0:c7:3e:d7:4a:be:66:
         52:44:22:7f:39:0c:b9:9c:90:cd:24:00:76:93:5a:0c:71:a2:
         86:0b:af:de:dc:dd:da:3e:d3:b2:f1:ae:a1:b7:31:2c:16:8a:
         d4:55:4c:bf:cb:f7:0a:97:fe:04:30:94:45:eb:b1:7d:1e:94:
         d7:3d:be:df:80:f8:28:e6:e1:7d:ba:52:79:13:cf:9f:a0:a1:
         2a:44:28:89:94:16:ec:06:83:6d:dc:93:f8:07:85:af:29:f2:
         88:12:82:3b:7a:80:b2:c0:9d:7d:a6:cd:c6:40:95:07:a4:08:
         7d:d9:89:4b:07:63:74:b8:77:c7:9e:db:13:eb:20:45:ff:a8:
         ce:37:d7:ba:ba:41:bf:ce:28:2d:bd:1f:b3:63:c7:6e:46:e2:
         6d:fd:9b:f7:d6:41:2a:44:75:01:39:ad:b9:76:36:96:93:36:
         9d:37:c3:ab:7d:c4:d9:e5:52:3d:59:50:c5:a7:57:b9:39:f6:
         0f:8e:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:12:01 2026 by rpki-client