Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          RV22W3z4v27JQYcwqTUXnHEZy6JOx1fQqmAn3N0Va5U=
Subject key identifier:   BD:02:3A:55:4D:0F:9E:08:BB:77:E2:8E:2F:92:C6:C3:C8:30:2D:20
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       476F8470761BD0593FF0ED35F53E3C2F163B4F64
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa
Signing time:             Thu 04 Jun 2026 09:36:05 +0000
ROA not before:           Thu 04 Jun 2026 09:31:05 +0000
ROA not after:            Thu 03 Jun 2027 09:36:05 +0000
asID:                     212669
IP address blocks:        157.254.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6f:84:70:76:1b:d0:59:3f:f0:ed:35:f5:3e:3c:2f:16:3b:4f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  4 09:31:05 2026 GMT
            Not After : Jun  3 09:36:05 2027 GMT
        Subject: CN=BD023A554D0F9E08BB77E28E2F92C6C3C8302D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:9a:4f:4f:2b:7a:8b:ec:ff:c3:a8:72:d6:
                    9e:4d:79:36:78:51:16:ce:eb:5e:bc:fa:80:6c:34:
                    8c:61:78:1d:5e:74:a0:ae:ae:93:e2:e1:2d:0b:cf:
                    59:04:53:5e:2d:c3:af:76:16:45:87:be:1a:d4:45:
                    6b:a7:e2:4e:cb:b6:f7:e1:c9:f6:d4:ca:06:e9:86:
                    a8:85:57:26:53:6f:32:ea:7c:d1:23:ec:49:06:e5:
                    8a:a9:18:94:b9:ca:8e:48:e2:a9:6a:b0:c4:73:1b:
                    33:45:11:36:50:ab:c0:eb:ed:15:fb:3d:84:39:e9:
                    d5:79:b6:38:2f:aa:97:31:c9:91:e6:52:6f:3a:42:
                    2b:c4:65:85:3a:99:bb:96:41:98:41:c7:b2:e4:ac:
                    eb:2e:4d:f3:30:45:6d:d1:3b:cc:cf:85:7f:02:7e:
                    d6:65:3e:cd:b6:3f:90:8e:d4:1c:15:15:e3:51:5c:
                    c3:b4:86:02:e3:74:1f:6a:6d:e3:00:8d:8f:65:25:
                    ce:36:23:d5:1c:f2:71:8b:9c:60:11:77:56:d2:b3:
                    76:be:f6:18:a3:a2:3e:42:08:76:d5:26:94:21:8c:
                    03:4e:1e:2d:25:23:9f:0b:e2:29:c7:6d:77:2a:28:
                    bd:18:df:78:0a:28:4a:cc:de:4d:e7:84:66:e1:83:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:02:3A:55:4D:0F:9E:08:BB:77:E2:8E:2F:92:C6:C3:C8:30:2D:20
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:12:49:82:5d:f8:51:3f:25:28:27:64:1d:60:5e:50:26:1b:
         8b:37:de:38:e4:82:c6:c3:d3:ec:36:43:6e:5e:0f:ad:3b:57:
         78:45:7f:ec:79:6a:17:86:a5:c8:4f:7c:d5:7b:83:d3:f7:1a:
         98:18:b7:9c:97:80:27:85:89:2f:03:27:29:fe:8e:83:0f:31:
         a1:03:a4:bc:d1:8c:77:f2:54:62:68:d2:b8:b6:34:c7:5a:93:
         b9:29:9b:86:3c:98:8f:99:88:3b:e2:ab:17:16:81:4d:10:79:
         5b:0b:c3:20:50:a3:ef:42:a4:72:be:69:fd:04:8f:ab:4c:6e:
         1e:a7:02:85:73:2e:88:e2:a8:2c:91:a2:20:3f:e8:60:f8:b2:
         42:2e:6a:b4:b6:97:65:74:cd:c7:5d:3d:01:ef:54:4d:2e:2f:
         33:6e:55:ec:f3:9f:d9:1a:d1:8f:f1:4e:92:fd:70:08:6e:ff:
         81:1b:f3:7f:be:3d:2c:31:1c:a4:be:3e:24:e4:12:9f:68:57:
         1a:ca:0f:ce:48:7c:eb:3f:7d:57:e1:9e:2f:47:28:6e:86:f2:
         87:62:17:4f:1f:2c:7a:4c:de:9f:b5:07:cc:bd:21:64:e2:e8:
         d5:e1:c1:73:25:57:9b:82:d4:f9:2a:d2:34:c9:56:73:da:3d:
         a2:1a:10:0e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUR2+EcHYb0Fk/8O019T48LxY7T2QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjA0MDkzMTA1WhcNMjcwNjAzMDkzNjA1
WjAzMTEwLwYDVQQDEyhCRDAyM0E1NTREMEY5RTA4QkI3N0UyOEUyRjkyQzZDM0M4
MzAyRDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/OaT08reovs
/8OoctaeTXk2eFEWzutevPqAbDSMYXgdXnSgrq6T4uEtC89ZBFNeLcOvdhZFh74a
1EVrp+JOy7b34cn21MoG6YaohVcmU28y6nzRI+xJBuWKqRiUucqOSOKparDEcxsz
RRE2UKvA6+0V+z2EOenVebY4L6qXMcmR5lJvOkIrxGWFOpm7lkGYQcey5KzrLk3z
MEVt0TvMz4V/An7WZT7Ntj+QjtQcFRXjUVzDtIYC43Qfam3jAI2PZSXONiPVHPJx
i5xgEXdW0rN2vvYYo6I+Qgh21SaUIYwDTh4tJSOfC+Ipx213Kii9GN94CihKzN5N
54Rm4YMmiwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFL0COlVND54Iu3fiji+SxsPI
MC0gMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzIxMjY2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+3DANBgkqhkiG9w0BAQsFAAOC
AQEAURJJgl34UT8lKCdkHWBeUCYbizfeOOSCxsPT7DZDbl4PrTtXeEV/7HlqF4al
yE981XuD0/camBi3nJeAJ4WJLwMnKf6Ogw8xoQOkvNGMd/JUYmjSuLY0x1qTuSmb
hjyYj5mIO+KrFxaBTRB5WwvDIFCj70Kkcr5p/QSPq0xuHqcChXMuiOKoLJGiID/o
YPiyQi5qtLaXZXTNx109Ae9UTS4vM25V7POf2RrRj/FOkv1wCG7/gRvzf749LDEc
pL4+JOQSn2hXGsoPzkh86z99V+GeL0cobobyh2IXTx8sekzen7UHzL0hZOLo1eHB
cyVXm4LU+SrSNMlWc9o9ohoQDg==
-----END CERTIFICATE-----
Generated at Sun Jun 7 20:00:34 2026 by rpki-client