Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214483.roa
File:                     AS214483.roa (raw, json)
Hash identifier:          /4eJM5dlCVbZ0qfaQOoSYqcDYDqBdmL5bGtZw7PbbwY=
Subject key identifier:   B2:5A:64:45:13:09:75:A5:66:B5:1B:F0:45:AC:32:C0:77:9E:76:78
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       216A7817CBDA499E9058F858C246A692C66C0144
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214483.roa
Signing time:             Tue 15 Sep 2026 06:29:16 +0000
ROA not before:           Tue 15 Sep 2026 06:24:16 +0000
ROA not after:            Tue 14 Sep 2027 06:29:16 +0000
asID:                     214483
IP address blocks:        157.254.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6a:78:17:cb:da:49:9e:90:58:f8:58:c2:46:a6:92:c6:6c:01:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 15 06:24:16 2026 GMT
            Not After : Sep 14 06:29:16 2027 GMT
        Subject: CN=B25A6445130975A566B51BF045AC32C0779E7678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:fe:51:3d:6a:02:ca:83:bb:02:61:ce:fe:
                    8f:f3:7f:a8:bc:49:45:fe:3b:5f:c0:77:02:82:cf:
                    cc:11:6d:0e:4a:9f:af:bc:ef:f7:13:f6:4b:ca:66:
                    8a:6d:68:ce:d8:a8:85:92:f8:a0:26:33:d0:28:50:
                    7e:71:79:a5:55:4a:44:56:17:35:59:98:4a:1e:64:
                    51:85:fa:40:09:39:d3:6d:cf:55:c7:f3:0d:40:f1:
                    47:1b:98:b6:fd:83:bb:ce:7c:7e:77:a5:a0:b1:d5:
                    cd:5a:11:ca:df:1d:a2:42:76:45:16:9b:8c:5f:c1:
                    c4:f0:77:1f:0a:e4:c4:c6:e1:fd:31:75:db:29:14:
                    5a:dd:cf:53:b4:bb:ae:e1:18:91:45:d4:ff:2d:fc:
                    39:84:75:1e:cb:7c:e5:61:6e:8a:84:a7:97:d8:61:
                    a4:28:9e:52:99:24:2a:b9:6b:5b:05:5b:d1:67:80:
                    62:e5:e2:17:85:9b:07:aa:5f:9d:0a:3d:cc:45:29:
                    45:92:3d:68:a4:ab:00:59:9c:23:61:fc:5a:a9:5d:
                    bb:2e:8b:ac:f0:7d:c9:c0:d6:31:e5:c2:66:db:ac:
                    f0:17:15:2f:49:fd:1a:db:fb:ee:95:ea:12:98:be:
                    68:70:e0:90:65:4d:b0:45:13:e2:e1:69:4b:00:5d:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:64:45:13:09:75:A5:66:B5:1B:F0:45:AC:32:C0:77:9E:76:78
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:3a:d3:a9:4c:ad:ea:67:fd:96:f5:20:88:6f:9d:a7:a1:
         1d:d3:e9:81:fb:e9:3a:dd:6c:e8:75:0a:2c:fe:3e:49:55:84:
         7d:82:04:a5:de:e0:e3:cb:9e:8e:91:06:ae:8a:39:0f:e7:41:
         0b:53:f6:e7:78:07:56:5c:a6:7e:7d:67:e8:dd:f8:c6:cb:d8:
         98:c3:da:cb:6b:2c:7c:db:21:d8:45:cf:a5:4f:20:c1:de:a5:
         de:be:35:f3:f4:1c:8b:8c:a2:eb:f8:2b:9e:df:54:76:55:c1:
         c1:63:01:26:3d:0b:a2:cb:1d:39:cd:21:7b:26:b0:1a:a1:74:
         8b:9d:27:0a:46:ab:52:38:aa:51:e9:35:79:5f:cc:7c:aa:f4:
         84:26:b0:1e:74:45:2d:70:68:9a:76:5f:82:7f:37:26:3c:33:
         11:40:90:e2:57:17:74:33:97:b6:e4:9d:a0:6e:1e:0d:b5:77:
         aa:3c:d4:2a:6c:82:a4:42:ee:72:a3:36:02:54:68:6f:b1:f5:
         15:c8:3d:95:c6:9e:94:3a:14:d2:32:b3:d1:e2:c4:42:84:49:
         3b:dc:f5:0c:7b:40:48:ee:63:fb:cf:53:79:c1:df:8d:35:fd:
         d6:86:53:fd:9d:70:34:08:58:46:5f:85:67:1b:33:5f:6b:ee:
         d3:24:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 20:41:39 2026 by rpki-client