Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: Vc5x7Aj8Sys4p4ihXKGNqA7xEiEGbOCzY6Z8l2GnMak=
Subject key identifier: 2F:2B:DA:27:70:56:0F:C5:3C:BD:03:26:82:ED:E4:14:C3:3E:5F:44
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 3A8042BD3027E78FB5AAAC6F0008CCADAAE17CBB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215224.roa
Signing time: Wed 26 Mar 2025 15:31:09 +0000
ROA not before: Wed 26 Mar 2025 15:26:09 +0000
ROA not after: Wed 25 Mar 2026 15:31:09 +0000
asID: 215224
IP address blocks: 157.254.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 12:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:80:42:bd:30:27:e7:8f:b5:aa:ac:6f:00:08:cc:ad:aa:e1:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 26 15:26:09 2025 GMT
Not After : Mar 25 15:31:09 2026 GMT
Subject: CN=2F2BDA2770560FC53CBD032682EDE414C33E5F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:a6:24:91:9c:3e:55:a6:2b:2e:f7:c6:07:
f4:7e:40:8b:71:36:8d:0d:80:30:9e:f2:9e:4f:a1:
0c:73:ba:ed:66:f7:05:9d:fe:03:fc:39:35:ff:15:
10:11:94:8c:72:de:6a:3c:77:63:cf:a2:c0:3c:6c:
e6:8c:2c:72:dd:0c:58:b4:4a:8c:bc:d0:26:42:79:
0a:99:fd:df:70:70:d7:b3:67:f3:e8:f2:78:e5:d9:
30:93:e7:58:8f:e1:92:dc:e2:12:17:d0:4a:bc:4d:
a2:ac:13:53:86:46:f4:1b:d6:6f:6a:d4:26:48:df:
d3:fd:e8:f6:d5:3d:5d:74:5d:c2:d1:06:84:05:94:
74:14:65:51:07:e9:95:83:0e:b1:ba:b6:b1:14:0c:
08:60:79:e1:0c:13:22:62:56:98:a3:44:3c:c7:cc:
ed:e8:35:fc:aa:0b:90:55:fd:fc:18:58:b5:34:a6:
b4:c4:f4:6b:90:21:cc:cf:83:e5:b6:76:fb:32:c1:
2f:f3:29:9c:06:32:1f:83:fa:c4:c6:88:9c:e9:38:
82:71:2e:1e:23:75:db:3e:91:df:c9:a7:0e:90:ef:
80:28:e8:b8:9d:59:e0:74:37:04:fa:86:fa:0c:72:
e9:ac:b4:96:25:3e:d4:87:7e:e4:92:7d:a2:b7:b4:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:DA:27:70:56:0F:C5:3C:BD:03:26:82:ED:E4:14:C3:3E:5F:44
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4c:2b:a7:40:dd:5e:65:09:ab:5e:17:55:c1:36:0d:53:33:
89:9b:2c:fe:9d:90:8c:00:04:56:74:cf:14:1a:e2:a4:af:a6:
ad:ae:4f:39:62:9e:53:bb:7d:38:c5:81:01:32:57:0a:6e:d0:
76:bb:4d:ab:07:45:8d:2b:cb:a7:9b:e5:6f:4c:67:b6:80:67:
d6:b9:ae:16:03:16:45:b3:72:6a:5f:32:7b:01:e5:30:21:b0:
fa:69:bd:a3:9a:67:d8:e4:d3:25:51:c6:85:e1:46:6b:d4:bb:
f8:a1:4e:2a:ba:71:f0:9e:05:15:6a:6e:b5:01:af:83:9a:70:
74:ee:ec:79:25:0a:5d:57:60:c6:ea:68:db:05:26:a2:a3:1c:
b8:9f:9e:47:82:53:ec:09:86:d3:29:71:92:00:fd:66:f6:80:
4d:8f:34:a6:0a:53:5a:24:0c:a1:fe:99:7c:c1:51:11:46:9b:
ed:44:21:c6:e9:ec:fd:d4:4f:48:18:ca:1a:d4:a9:2d:de:ca:
b7:e9:3b:01:5e:5f:d3:94:02:21:6f:69:e2:ce:56:94:c1:21:
0f:55:00:71:b6:65:06:11:97:d0:8b:82:ab:29:02:06:2e:07:
5f:9e:b8:9d:1c:ad:07:1c:93:44:db:d4:66:33:69:0e:9a:fe:
92:76:61:cc
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUOoBCvTAn54+1qqxvAAjMrarhfLswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMzI2MTUyNjA5WhcNMjYwMzI1MTUzMTA5
WjAzMTEwLwYDVQQDEygyRjJCREEyNzcwNTYwRkM1M0NCRDAzMjY4MkVERTQxNEMz
M0U1RjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/WmJJGcPlWm
Ky73xgf0fkCLcTaNDYAwnvKeT6EMc7rtZvcFnf4D/Dk1/xUQEZSMct5qPHdjz6LA
PGzmjCxy3QxYtEqMvNAmQnkKmf3fcHDXs2fz6PJ45dkwk+dYj+GS3OISF9BKvE2i
rBNThkb0G9ZvatQmSN/T/ej21T1ddF3C0QaEBZR0FGVRB+mVgw6xuraxFAwIYHnh
DBMiYlaYo0Q8x8zt6DX8qguQVf38GFi1NKa0xPRrkCHMz4Pltnb7MsEv8ymcBjIf
g/rExoic6TiCcS4eI3XbPpHfyacOkO+AKOi4nVngdDcE+ob6DHLprLSWJT7Uh37k
kn2it7TDBwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFC8r2idwVg/FPL0DJoLt5BTD
Pl9EMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzIxNTIyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+vDANBgkqhkiG9w0BAQsFAAOC
AQEAK0wrp0DdXmUJq14XVcE2DVMziZss/p2QjAAEVnTPFBripK+mra5POWKeU7t9
OMWBATJXCm7QdrtNqwdFjSvLp5vlb0xntoBn1rmuFgMWRbNyal8yewHlMCGw+mm9
o5pn2OTTJVHGheFGa9S7+KFOKrpx8J4FFWputQGvg5pwdO7seSUKXVdgxupo2wUm
oqMcuJ+eR4JT7AmG0ylxkgD9ZvaATY80pgpTWiQMof6ZfMFREUab7UQhxuns/dRP
SBjKGtSpLd7Kt+k7AV5f05QCIW9p4s5WlMEhD1UAcbZlBhGX0IuCqykCBi4HX564
nRytBxyTRNvUZjNpDpr+knZhzA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:53 2025 by rpki-client