Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          1knrv5OBnNRTiiAnEp42kf83mSd7+e1+bkWtyoVWLL4=
Subject key identifier:   7F:77:EB:50:FD:0D:CF:C7:E2:00:B2:32:A8:15:8F:12:0B:8F:58:BD
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       75DB0C69ED1BD005625340B88A6A294CE09B0C4B
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS212238.roa
Signing time:             Mon 30 Mar 2026 10:24:41 +0000
ROA not before:           Mon 30 Mar 2026 10:19:41 +0000
ROA not after:            Mon 29 Mar 2027 10:24:41 +0000
asID:                     212238
IP address blocks:        40.27.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:db:0c:69:ed:1b:d0:05:62:53:40:b8:8a:6a:29:4c:e0:9b:0c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 30 10:19:41 2026 GMT
            Not After : Mar 29 10:24:41 2027 GMT
        Subject: CN=7F77EB50FD0DCFC7E200B232A8158F120B8F58BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:1e:7f:95:2a:52:4c:81:8f:05:c0:bd:d7:
                    e0:9a:c5:d2:27:27:43:91:22:23:cd:30:9f:74:d4:
                    3a:19:35:37:c1:f8:01:d9:38:fa:da:f4:12:35:1d:
                    03:f6:ed:70:a8:7c:47:76:e9:35:0c:b1:d0:19:aa:
                    da:fc:03:ef:dc:f6:4e:3c:35:98:cd:0d:51:55:d8:
                    e4:68:9e:a1:fb:1b:9c:10:1f:3d:f7:a9:e1:d7:cb:
                    e0:2a:b9:cd:36:52:33:4a:51:9d:33:a7:4c:dc:c3:
                    fa:20:f5:b7:1c:14:d6:d6:cb:06:72:09:b0:fc:5a:
                    c3:68:d3:e8:72:28:d8:7d:1a:26:c3:d9:9b:b0:12:
                    d0:10:72:e3:d1:b5:6a:06:0f:7c:dd:ff:56:31:fd:
                    77:e1:9e:45:32:a4:7b:66:b5:5a:ac:e7:38:42:f6:
                    1d:7f:f6:a2:fa:3b:17:ec:7d:7b:6f:40:ee:ab:1f:
                    e5:5c:fc:cc:7c:ee:81:a1:00:be:26:e1:23:c3:ca:
                    bc:03:63:30:7b:29:40:78:8d:42:39:ba:38:63:bb:
                    3a:10:9c:83:9b:5a:6c:91:e3:f3:ad:0c:f4:21:dc:
                    ea:95:3f:ba:eb:51:d0:19:80:82:73:fa:2b:a9:da:
                    fb:b9:ab:fe:21:a5:ed:f0:0e:fb:15:4d:ac:44:a7:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:77:EB:50:FD:0D:CF:C7:E2:00:B2:32:A8:15:8F:12:0B:8F:58:BD
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:7c:ad:8d:e6:b0:a1:5e:eb:6e:02:4f:a9:d9:1e:b9:31:
         0c:e5:3d:6c:8e:fe:5f:ec:31:5c:2f:02:ec:c5:fb:81:b2:7e:
         4a:e2:75:46:96:e1:c6:09:8b:ee:2e:a6:49:00:ea:6d:1e:76:
         15:a3:12:f0:53:65:81:27:fa:87:da:16:2c:73:fd:fd:0e:17:
         78:08:40:cd:d4:cd:52:26:ac:f8:e3:be:4d:61:63:09:b9:f7:
         79:ae:ee:a7:6b:39:43:b9:e3:0f:7c:ac:60:ad:0e:b5:85:5d:
         cf:35:ee:39:48:02:6e:b0:f5:40:b7:3b:c4:89:04:31:b3:77:
         52:82:2c:3a:95:5d:d3:bb:f5:cb:69:be:1f:f0:ce:87:2b:34:
         97:09:7e:9e:85:73:7c:c3:bd:06:ec:24:70:6a:12:a2:e9:19:
         e1:b0:4e:f9:6a:dd:cf:0b:34:85:21:d5:10:70:51:23:ee:af:
         6c:cc:dc:28:ae:72:dc:d8:07:bc:ac:6b:93:e6:e5:39:4d:33:
         29:90:c8:09:0b:05:5f:a1:9b:77:e5:a6:3b:32:7d:eb:1b:4e:
         c8:ba:40:72:09:b4:e1:ae:da:b0:4b:04:7c:34:a1:2e:df:9c:
         15:ac:64:dc:93:3e:05:fa:c8:30:cf:18:ba:d4:56:40:3b:a5:
         c3:c1:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:49 2026 by rpki-client