Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402215.roa
File:                     AS402215.roa (raw, json)
Hash identifier:          TabIwNA+NKZxkJlmX7X+129csPkevdPwawOBJAe7ISQ=
Subject key identifier:   BD:9C:4B:89:9D:A9:1B:13:9E:AF:12:3F:25:2C:D6:AD:EC:04:8D:56
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       113DEE96A0BB4D1C65D48C2BA205CCE233F9E750
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402215.roa
Signing time:             Tue 21 Jul 2026 06:46:43 +0000
ROA not before:           Tue 21 Jul 2026 06:41:43 +0000
ROA not after:            Tue 20 Jul 2027 06:46:43 +0000
asID:                     402215
IP address blocks:        107.173.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3d:ee:96:a0:bb:4d:1c:65:d4:8c:2b:a2:05:cc:e2:33:f9:e7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 21 06:41:43 2026 GMT
            Not After : Jul 20 06:46:43 2027 GMT
        Subject: CN=BD9C4B899DA91B139EAF123F252CD6ADEC048D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:48:ad:24:4d:ef:f1:ad:fa:f2:02:21:5d:
                    ad:cf:d9:89:ae:59:37:94:c7:eb:33:f2:d1:74:e4:
                    2c:a6:52:29:b2:14:35:b0:c6:6a:1a:63:03:93:fb:
                    7e:d9:28:79:13:3d:27:6e:22:37:95:b6:f4:27:54:
                    21:25:4d:f6:c8:09:e0:ca:b9:19:69:4c:6a:ea:05:
                    9e:83:e2:ba:b3:23:aa:07:67:bd:1d:e0:f5:ff:43:
                    dc:86:89:64:26:e6:00:3f:b8:73:00:63:af:a1:e8:
                    e7:ee:5f:30:fb:1b:45:0c:93:6c:ad:38:ef:4a:4f:
                    62:48:50:db:27:04:44:55:4e:33:ac:2d:0e:f0:3f:
                    9b:f5:d9:d5:5c:3a:61:5f:7f:2d:41:80:c3:ea:8d:
                    66:38:1f:b8:ff:11:f0:80:64:84:45:6f:37:6d:30:
                    73:79:89:46:88:6a:a7:e7:c9:a3:76:2b:e3:c0:64:
                    50:7d:83:d8:d7:3b:f2:26:43:ef:41:01:14:74:f1:
                    8c:f2:66:8e:50:7f:f5:10:e5:61:aa:a9:f7:6b:3f:
                    72:c1:ca:d3:90:ff:33:ee:4b:08:29:b9:9d:6a:23:
                    ee:44:7e:c3:be:b9:a1:97:92:94:56:f5:66:fd:3d:
                    24:48:64:af:36:27:c4:5e:85:f1:c2:57:f0:34:d1:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9C:4B:89:9D:A9:1B:13:9E:AF:12:3F:25:2C:D6:AD:EC:04:8D:56
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:39:0f:b5:9e:f4:87:e3:8b:aa:d7:3a:f6:ee:8c:38:e1:90:
         80:76:39:14:15:2e:b1:bd:9d:c5:d7:71:55:bb:4b:9c:f0:c2:
         de:89:0c:34:e3:cd:58:e8:49:32:82:d5:3e:44:04:32:31:7f:
         00:7c:d3:28:e5:26:2f:3b:ff:7a:85:03:26:a2:f9:38:d6:5a:
         f7:a7:c1:45:92:6d:a4:87:bd:b2:64:a7:37:87:74:cc:8f:8d:
         8b:10:7c:b4:ac:61:68:46:0f:0a:80:3d:d1:05:17:5f:f2:e5:
         56:af:e7:89:52:93:b6:cf:43:3d:b8:c0:b5:33:06:74:41:c9:
         56:fd:fe:ec:65:3e:5f:b3:1d:80:a3:c9:57:f3:fd:08:58:e5:
         bd:8f:b8:02:7b:6a:5a:2e:56:d1:66:fb:1f:ef:49:a1:f0:e6:
         1d:35:49:88:76:67:9c:c9:45:96:70:6e:3e:76:8b:92:02:1a:
         49:55:75:84:5e:63:33:50:af:c9:3d:be:b1:81:80:79:11:fa:
         02:b8:48:d5:35:90:02:b7:ec:13:78:e6:f7:90:5c:2b:ff:e2:
         4c:a4:00:84:ba:7f:0e:93:71:22:2d:af:cf:a8:7f:ce:f7:6c:
         18:67:5a:eb:79:48:27:e5:9f:a8:8b:86:f2:a6:5d:2a:cf:d6:
         99:0d:96:b4
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUET3ulqC7TRxl1IwrogXM4jP551AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNzIxMDY0MTQzWhcNMjcwNzIwMDY0NjQz
WjAzMTEwLwYDVQQDEyhCRDlDNEI4OTlEQTkxQjEzOUVBRjEyM0YyNTJDRDZBREVD
MDQ4RDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GZIrSRN7/Gt
+vICIV2tz9mJrlk3lMfrM/LRdOQsplIpshQ1sMZqGmMDk/t+2Sh5Ez0nbiI3lbb0
J1QhJU32yAngyrkZaUxq6gWeg+K6syOqB2e9HeD1/0PcholkJuYAP7hzAGOvoejn
7l8w+xtFDJNsrTjvSk9iSFDbJwREVU4zrC0O8D+b9dnVXDphX38tQYDD6o1mOB+4
/xHwgGSERW83bTBzeYlGiGqn58mjdivjwGRQfYPY1zvyJkPvQQEUdPGM8maOUH/1
EOVhqqn3az9ywcrTkP8z7ksIKbmdaiPuRH7Dvrmhl5KUVvVm/T0kSGSvNifEXoXx
wlfwNNGuZQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFL2cS4mdqRsTnq8SPyUs1q3s
BI1WMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzQwMjIxNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGutzTANBgkqhkiG9w0BAQsFAAOC
AQEAwDkPtZ70h+OLqtc69u6MOOGQgHY5FBUusb2dxddxVbtLnPDC3okMNOPNWOhJ
MoLVPkQEMjF/AHzTKOUmLzv/eoUDJqL5ONZa96fBRZJtpIe9smSnN4d0zI+NixB8
tKxhaEYPCoA90QUXX/LlVq/niVKTts9DPbjAtTMGdEHJVv3+7GU+X7MdgKPJV/P9
CFjlvY+4AntqWi5W0Wb7H+9JofDmHTVJiHZnnMlFlnBuPnaLkgIaSVV1hF5jM1Cv
yT2+sYGAeRH6ArhI1TWQArfsE3jm95BcK//iTKQAhLp/DpNxIi2vz6h/zvdsGGda
63lIJ+WfqIuG8qZdKs/WmQ2WtA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 14:03:06 2026 by rpki-client