Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215885.roa
File:                     AS215885.roa (raw, json)
Hash identifier:          Mn2uyhBxI5t9y/AFeRExU0zYqMWI3uDyCsP7VnyKBcc=
Subject key identifier:   75:27:88:C1:F3:A8:48:6F:9A:77:08:FF:DA:E7:88:AA:E8:4E:F6:C5
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7D33BA41FE4198E1DC7DD06D3515B6C16D9DAADD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215885.roa
Signing time:             Fri 19 Sep 2025 12:49:46 +0000
ROA not before:           Fri 19 Sep 2025 12:44:46 +0000
ROA not after:            Fri 18 Sep 2026 12:49:46 +0000
asID:                     215885
IP address blocks:        23.95.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 22:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:33:ba:41:fe:41:98:e1:dc:7d:d0:6d:35:15:b6:c1:6d:9d:aa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 19 12:44:46 2025 GMT
            Not After : Sep 18 12:49:46 2026 GMT
        Subject: CN=752788C1F3A8486F9A7708FFDAE788AAE84EF6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:71:6a:29:27:88:d0:a2:e8:9a:04:97:f1:
                    8a:49:d0:a7:5f:4d:9f:a1:b3:c9:bc:25:04:15:b4:
                    a1:c8:04:93:10:28:3e:01:d0:54:d8:bd:dc:c1:ab:
                    b3:2a:64:66:41:14:04:17:90:bd:86:dd:70:50:b6:
                    fd:78:fb:d0:a6:1c:50:15:8b:ad:ca:67:81:e3:ba:
                    b8:39:d4:2e:f6:b8:75:d1:23:e8:ed:21:46:c6:98:
                    55:1e:50:69:50:64:5b:92:6e:81:40:8b:6d:4a:88:
                    e7:9b:9b:69:46:23:b6:e3:d8:51:80:38:25:a9:c7:
                    a0:9e:88:05:52:c1:47:7b:91:ad:3a:66:6e:0d:52:
                    1f:87:91:7b:02:ef:3f:6a:81:c6:b1:2e:3c:a6:85:
                    fe:52:62:d0:b0:99:58:21:e4:8a:94:e7:4f:f8:83:
                    b6:36:50:e0:be:62:03:4b:ce:4b:1e:f9:11:c8:e7:
                    99:38:bc:01:96:2a:6c:85:ca:d3:e6:4c:c9:2e:d7:
                    37:ed:2d:55:77:b5:e2:ec:3f:14:fb:96:c0:44:bc:
                    10:68:1b:10:75:15:2d:a6:b0:dc:e2:4e:df:51:cd:
                    2f:78:36:a6:fd:f3:45:e8:61:cb:1b:cd:74:ce:bd:
                    5e:e2:2c:43:a8:dc:3d:e3:df:4f:31:ac:fe:05:d2:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:88:C1:F3:A8:48:6F:9A:77:08:FF:DA:E7:88:AA:E8:4E:F6:C5
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215885.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:cc:3c:f3:8f:3a:aa:a0:e2:8e:1c:e2:d4:8f:44:3a:f7:
         53:37:8a:bc:46:2f:88:2c:f2:10:06:99:24:ff:31:87:31:e4:
         06:12:3d:e5:e7:62:a8:aa:80:74:ee:b4:e5:66:34:7a:79:59:
         2f:dd:ef:2c:83:8f:69:7d:42:72:90:47:19:eb:fe:c4:96:9e:
         1d:a2:fa:38:8f:62:72:36:d7:83:06:46:ab:aa:15:b7:29:44:
         26:e6:99:7c:9d:16:8e:b8:b6:bb:b5:5a:77:6f:92:10:39:eb:
         ee:a2:d0:13:64:36:6f:f0:de:a6:4c:ee:c3:2d:de:eb:f5:b6:
         6d:bd:10:97:9f:46:e5:7f:4a:5a:19:42:72:cd:4f:e6:58:3f:
         ae:38:10:3d:56:9f:93:2d:e7:74:46:b0:c6:a4:c7:fe:43:62:
         a5:1b:a1:73:3b:d1:9a:95:04:84:72:80:e3:43:cc:b6:fc:6e:
         46:a3:2d:d1:7b:de:69:29:40:c7:82:b1:c1:62:d2:e7:91:f9:
         1e:89:66:65:a4:fe:7c:b2:bc:2a:52:38:3c:1a:00:fc:dc:0a:
         f6:63:31:08:8f:e1:a8:d1:f3:32:68:64:db:c1:9e:e3:b1:8b:
         e2:4e:94:cc:dd:fa:f2:11:8e:f5:ab:24:aa:66:c8:16:48:47:
         d1:d8:34:cd
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUfTO6Qf5BmOHcfdBtNRW2wW2dqt0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTE5MTI0NDQ2WhcNMjYwOTE4MTI0OTQ2
WjAzMTEwLwYDVQQDEyg3NTI3ODhDMUYzQTg0ODZGOUE3NzA4RkZEQUU3ODhBQUU4
NEVGNkM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoRxaikniNCi
6JoEl/GKSdCnX02fobPJvCUEFbShyASTECg+AdBU2L3cwauzKmRmQRQEF5C9ht1w
ULb9ePvQphxQFYutymeB47q4OdQu9rh10SPo7SFGxphVHlBpUGRbkm6BQIttSojn
m5tpRiO249hRgDglqcegnogFUsFHe5GtOmZuDVIfh5F7Au8/aoHGsS48poX+UmLQ
sJlYIeSKlOdP+IO2NlDgvmIDS85LHvkRyOeZOLwBlipshcrT5kzJLtc37S1Vd7Xi
7D8U+5bARLwQaBsQdRUtprDc4k7fUc0veDam/fNF6GHLG810zr1e4ixDqNw9499P
Maz+BdLFAwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHUniMHzqEhvmncI/9rniKro
TvbFMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxNTg4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdflTANBgkqhkiG9w0BAQsFAAOC
AQEANPXMPPOPOqqg4o4c4tSPRDr3UzeKvEYviCzyEAaZJP8xhzHkBhI95ediqKqA
dO605WY0enlZL93vLIOPaX1CcpBHGev+xJaeHaL6OI9icjbXgwZGq6oVtylEJuaZ
fJ0Wjri2u7Vad2+SEDnr7qLQE2Q2b/Depkzuwy3e6/W2bb0Ql59G5X9KWhlCcs1P
5lg/rjgQPVafky3ndEawxqTH/kNipRuhczvRmpUEhHKA40PMtvxuRqMt0XveaSlA
x4KxwWLS55H5HolmZaT+fLK8KlI4PBoA/NwK9mMxCI/hqNHzMmhk28Ge47GL4k6U
zN368hGO9askqmbIFkhH0dg0zQ==
-----END CERTIFICATE-----
Generated at Sat Oct 18 20:17:19 2025 by rpki-client