Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
File:                     AS215672.roa (raw, json)
Hash identifier:          q/jVtrj0vLYHkUncP7vCcx7/ScgJinBLQje2zywZeTg=
Subject key identifier:   9C:84:36:EE:08:87:95:90:7E:D9:45:03:D5:52:57:84:8F:3E:3D:8F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       387ACDA9E6B6DB224750A2FC8A25F4544F04D5F8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
Signing time:             Fri 24 Apr 2026 12:28:26 +0000
ROA not before:           Fri 24 Apr 2026 12:23:26 +0000
ROA not after:            Fri 23 Apr 2027 12:28:26 +0000
asID:                     215672
IP address blocks:        162.213.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 20:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7a:cd:a9:e6:b6:db:22:47:50:a2:fc:8a:25:f4:54:4f:04:d5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 24 12:23:26 2026 GMT
            Not After : Apr 23 12:28:26 2027 GMT
        Subject: CN=9C8436EE088795907ED94503D55257848F3E3D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:53:df:19:1c:e4:b0:8e:3c:cb:46:24:41:
                    9a:3b:eb:db:83:ce:c3:f2:0d:20:08:d3:30:9b:27:
                    41:a2:d5:79:4b:65:8b:19:43:64:3d:3c:a8:f4:a6:
                    de:fa:79:e3:97:6d:14:bf:13:d5:4d:f3:4c:a7:aa:
                    86:4d:b4:d0:eb:1b:89:e1:cd:c0:81:7c:58:6c:5f:
                    88:86:0a:aa:12:62:4e:ca:89:65:c2:08:f2:65:f0:
                    0f:21:16:24:8a:38:04:4c:5b:e0:5c:95:0c:38:e6:
                    00:53:13:87:10:d9:40:ad:80:4f:0f:69:98:7a:b3:
                    fa:8c:9a:70:e8:54:77:da:39:06:51:e9:3b:61:bf:
                    81:b5:dc:ce:78:51:b6:3b:f4:8a:bd:de:ee:be:0f:
                    f4:22:94:49:9d:70:66:d3:aa:7b:0a:d4:43:f5:b8:
                    4a:84:e8:7e:be:f3:18:ca:d5:d8:dc:dd:c2:2a:15:
                    0b:67:42:c6:ba:d1:6c:74:32:eb:63:5e:a9:1b:ed:
                    5f:35:3d:b5:c4:b1:84:94:ab:81:b7:91:12:29:b7:
                    53:03:ea:1b:fb:04:98:c0:1b:7e:82:8c:5e:d3:5d:
                    9b:c9:5d:1a:41:a2:3e:f4:74:7e:72:ed:2a:18:18:
                    c9:77:82:0e:b9:03:c8:11:77:05:d5:ef:aa:4e:b9:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:36:EE:08:87:95:90:7E:D9:45:03:D5:52:57:84:8F:3E:3D:8F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:16:32:a4:21:f9:03:cb:f2:4c:f2:b2:48:a2:08:51:62:6a:
         3a:d4:d5:a1:bc:fb:b7:9a:e3:2a:d1:e3:87:92:8d:a1:97:fb:
         1c:82:84:52:34:a0:04:7f:e2:f6:d7:87:1f:4c:9c:99:fb:30:
         81:b0:5a:40:7b:3d:81:71:6f:9e:78:ea:42:d7:c2:66:c0:81:
         0c:37:56:9d:93:42:19:17:c6:4e:85:56:c1:db:12:f6:1d:25:
         f0:52:10:44:1c:6c:5b:13:7a:a2:db:c0:88:88:6b:17:ba:a2:
         0d:be:b6:e0:42:12:3e:2d:b4:21:e6:50:25:27:3b:36:b3:a8:
         5b:58:b8:94:87:76:0c:83:e5:b9:d7:a1:2f:2d:86:b9:b5:a8:
         41:2f:0b:69:6e:1b:3a:ee:d8:23:1e:f2:69:ce:77:d0:b4:22:
         aa:f8:d6:59:0e:bc:59:6f:4d:49:f6:8b:34:7c:a5:aa:73:9d:
         90:a5:71:c5:47:f0:5a:57:66:39:8d:a3:fc:01:5b:ec:cd:69:
         51:45:fd:76:d9:04:4a:2e:fa:55:36:e4:89:ed:b9:92:24:24:
         2c:38:92:d5:34:fe:a7:e9:ab:cf:c0:5b:86:54:69:6b:42:89:
         4d:16:03:51:7d:1c:94:6c:50:16:5b:b8:fa:76:01:b3:af:61:
         11:7b:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:54:50 2026 by rpki-client