Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214940.roa
File:                     AS214940.roa (raw, json)
Hash identifier:          /+6trZ1cx1XzebtUEASPQm7ppltnQ0YpPu+gJo+csRg=
Subject key identifier:   19:A2:8A:58:31:B6:F4:26:FB:E1:9B:5D:9E:C2:B8:A9:28:34:09:48
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6F0EA69959F900E0024EBFE67E15FE13F3F75905
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214940.roa
Signing time:             Mon 12 May 2025 18:17:31 +0000
ROA not before:           Mon 12 May 2025 18:12:31 +0000
ROA not after:            Mon 11 May 2026 18:17:31 +0000
asID:                     214940
IP address blocks:        198.55.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0e:a6:99:59:f9:00:e0:02:4e:bf:e6:7e:15:fe:13:f3:f7:59:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 12 18:12:31 2025 GMT
            Not After : May 11 18:17:31 2026 GMT
        Subject: CN=19A28A5831B6F426FBE19B5D9EC2B8A928340948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:5e:4f:7c:4f:56:05:50:32:46:b4:5d:cc:
                    df:66:77:70:95:c2:ab:7a:86:97:fa:ea:d3:e1:43:
                    4a:99:ee:04:e6:c2:bf:52:8d:24:af:94:84:bb:98:
                    86:1a:75:36:6b:24:ce:87:f9:f1:fb:b4:ed:e9:20:
                    77:36:a8:97:bd:bd:a4:8a:d6:e8:dc:05:2e:41:65:
                    51:cb:a8:90:b7:76:dc:06:ee:71:be:25:1f:e3:6c:
                    1f:1d:79:45:a8:41:92:c3:66:ae:fd:62:d0:2a:ba:
                    9f:83:f9:fa:59:60:c6:d7:ec:d3:bc:22:75:ca:8e:
                    08:8c:67:cd:b2:ce:59:a7:3b:b8:aa:9b:df:67:dd:
                    95:06:ff:8b:87:30:e8:03:10:60:3e:34:de:ca:63:
                    ce:17:bf:0e:94:5b:13:bf:19:a1:a8:98:e5:b8:52:
                    03:dc:52:ef:22:56:cc:8b:26:c9:5f:1a:f5:4a:f5:
                    fb:ac:ab:0c:17:02:cc:dd:99:34:d9:0b:79:00:7a:
                    5e:8e:3e:3c:51:9f:7f:84:d6:ab:95:b5:2c:0e:91:
                    1e:0b:54:b3:12:2c:87:41:e0:4c:0d:5f:d9:2b:e8:
                    c0:23:14:5a:ce:24:ec:0d:18:d0:91:f3:3f:07:a4:
                    dd:11:9a:18:50:63:4a:ca:fa:71:e2:46:21:9a:b4:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:8A:58:31:B6:F4:26:FB:E1:9B:5D:9E:C2:B8:A9:28:34:09:48
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.55.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:25:ad:a3:26:f7:9f:76:fd:3f:9f:ac:b2:33:42:65:e3:
         8d:44:38:d1:eb:2b:be:1c:61:21:b8:e1:84:8f:3c:c3:d0:68:
         e8:07:a8:47:f2:48:a7:20:29:69:50:5f:3f:77:18:d8:1f:6d:
         28:15:98:50:f5:73:b5:ec:25:21:5d:a9:fa:ff:c8:bc:ed:94:
         61:f0:ac:aa:4d:6e:c5:8d:31:42:17:3b:01:30:05:0c:85:b1:
         32:8b:50:5a:01:8f:69:ac:fd:92:29:8e:6d:47:41:2a:e0:bd:
         c1:20:ff:ad:e4:45:e1:cd:e3:c2:2b:91:f1:b7:90:c3:d3:3c:
         9a:f4:4f:9f:03:9c:93:38:1d:4f:c2:ff:da:d0:7f:56:49:77:
         c9:0a:ae:28:56:ba:82:dd:3a:9c:4e:55:a9:e8:d8:f1:a2:9a:
         7c:88:ce:c9:7d:e6:72:73:e9:d3:6e:1d:e0:3f:fc:b9:ff:2a:
         3f:00:0a:70:50:dc:e5:d9:16:53:2a:fa:5c:f2:24:6c:81:a5:
         94:00:0c:2b:6b:c9:19:2d:91:12:71:9d:a8:de:51:c9:0a:d5:
         32:ec:83:bd:eb:e8:1e:c2:4e:93:d1:8f:f3:a3:d6:aa:17:66:
         7a:45:a4:89:11:48:73:8d:ef:fd:21:f6:b3:fd:26:46:26:32:
         0f:a5:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:04 2025 by rpki-client