Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215152.roa
File:                     AS215152.roa (raw, json)
Hash identifier:          6EbA9cCBrOsXckwWjpUfXVmJwkY35okgUZFfN5/I6eM=
Subject key identifier:   13:1A:22:58:1E:C0:D7:B5:56:40:60:F2:42:DB:75:F2:76:0D:08:03
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       50CFB98A09480778268AF4934BD194CF8BAC3FC9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215152.roa
Signing time:             Fri 26 Jun 2026 07:43:36 +0000
ROA not before:           Fri 26 Jun 2026 07:38:36 +0000
ROA not after:            Fri 25 Jun 2027 07:43:36 +0000
asID:                     215152
IP address blocks:        157.254.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 01:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cf:b9:8a:09:48:07:78:26:8a:f4:93:4b:d1:94:cf:8b:ac:3f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 26 07:38:36 2026 GMT
            Not After : Jun 25 07:43:36 2027 GMT
        Subject: CN=131A22581EC0D7B5564060F242DB75F2760D0803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:be:d7:99:2b:ad:3e:30:6c:1c:7b:63:6d:
                    e0:db:cc:46:dd:64:be:63:e5:1d:29:e7:a3:47:3b:
                    46:c5:c0:cd:19:17:4a:f3:e6:44:9e:4a:5e:4a:06:
                    0a:fd:0f:e7:60:2f:64:4e:4a:00:6d:13:d7:5e:5a:
                    a3:47:60:4d:38:18:c6:ec:5c:71:23:ce:3a:fa:15:
                    fa:82:24:e1:f2:39:4e:bb:a7:c6:4c:fd:68:8d:a9:
                    84:2f:e7:c1:ae:13:cd:97:c0:32:c6:ab:e6:9b:91:
                    1a:db:11:54:b0:87:32:33:27:f7:94:28:84:94:48:
                    31:0b:6c:51:df:65:d4:6d:e6:0b:a5:a3:ae:b2:6e:
                    6b:1b:35:d4:f5:66:ce:e5:95:09:cc:29:78:26:a9:
                    32:47:6d:5c:4a:8a:b0:95:a2:99:0c:6d:c0:40:a3:
                    9c:43:df:b5:e0:75:49:10:08:7c:85:f2:67:1e:df:
                    bb:61:82:3e:e1:5f:9c:1c:99:b4:50:7c:4d:83:1a:
                    23:69:f2:1c:cf:76:1d:4e:32:7b:31:dc:63:6f:e4:
                    c7:73:6a:4d:df:e9:4a:a2:65:16:ad:20:3c:af:6b:
                    ce:67:da:08:88:4a:b9:21:95:93:6d:90:c4:e1:1f:
                    4c:f1:25:10:ec:0a:65:f0:1a:6c:bc:de:cf:a2:c9:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:22:58:1E:C0:D7:B5:56:40:60:F2:42:DB:75:F2:76:0D:08:03
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215152.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d4:63:37:c0:06:bd:cb:5e:43:da:91:c7:1f:d2:77:cf:b5:
         e0:7a:0b:00:20:48:ea:f9:cf:c9:01:34:15:4f:aa:53:50:d5:
         77:d1:3d:b9:9c:47:67:98:21:c8:0d:69:76:06:21:3f:eb:70:
         3a:34:8a:aa:8c:30:9c:51:70:68:03:76:c0:1f:1d:6d:ff:33:
         3e:23:ed:8c:1a:b0:54:f4:54:f3:c1:87:32:96:61:45:4c:37:
         63:66:1d:8a:bc:bf:9e:b6:02:9c:ba:36:09:ea:1b:62:2c:26:
         d6:2a:b7:e5:cf:2a:73:c7:22:b1:a7:c4:6d:bd:ca:e9:63:6a:
         dc:1a:6a:ef:66:50:ad:e8:b6:a0:08:69:e9:1e:3f:fe:5f:36:
         07:97:c4:19:16:4d:50:9a:ab:64:69:31:83:20:44:a5:ad:cf:
         e8:3f:73:c9:2a:66:86:0e:af:fd:b2:68:24:52:ef:f3:c5:b1:
         f3:23:5d:7d:20:62:89:1b:60:51:d1:9d:84:9a:ef:5f:27:4a:
         b8:14:9b:9d:c9:f1:52:61:dd:21:32:42:30:bb:53:71:f4:35:
         cc:41:bd:b1:eb:e3:75:df:7b:fc:f1:45:a4:00:bb:90:6d:8b:
         94:87:25:8b:18:af:dd:4d:40:a9:72:82:08:d2:d7:e1:78:ca:
         55:c5:63:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:35:08 2026 by rpki-client