Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS215152.roa
File:                     AS215152.roa (raw, json)
Hash identifier:          OZIlRk6PEaN4pRFoyqFp8VdnY9kLncDDGl1WCEpGUYg=
Subject key identifier:   DD:FE:AA:2F:7B:DD:16:AD:7F:D7:84:98:77:E9:FB:50:63:50:EC:FB
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       51C14B525169F675AA3B050B2AB413B5DC31468D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS215152.roa
Signing time:             Wed 15 Apr 2026 01:16:14 +0000
ROA not before:           Wed 15 Apr 2026 01:11:14 +0000
ROA not after:            Wed 14 Apr 2027 01:16:14 +0000
asID:                     215152
IP address blocks:        40.183.118.0/24 maxlen: 24
                          40.183.151.0/24 maxlen: 24
                          40.183.196.0/24 maxlen: 24
                          40.183.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c1:4b:52:51:69:f6:75:aa:3b:05:0b:2a:b4:13:b5:dc:31:46:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 15 01:11:14 2026 GMT
            Not After : Apr 14 01:16:14 2027 GMT
        Subject: CN=DDFEAA2F7BDD16AD7FD7849877E9FB506350ECFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:d1:30:23:d7:48:98:3c:fb:8f:5f:60:bf:
                    af:f8:71:e1:2f:8f:1c:4e:81:07:05:00:41:b8:ff:
                    db:20:62:c1:b5:ad:8e:99:dc:d8:a9:e4:e5:56:95:
                    43:ef:01:5a:e7:89:d2:52:00:9a:75:93:54:fe:3a:
                    63:4c:29:89:63:4f:17:0f:5f:72:a9:4d:fc:eb:98:
                    de:aa:2d:5f:bd:66:02:4d:e8:17:f6:ef:5d:11:e2:
                    b7:2a:c7:b0:d9:f9:93:24:e5:f6:51:3d:97:f5:03:
                    21:9c:05:41:55:df:c6:7c:48:dc:86:12:19:36:a2:
                    22:4a:c3:2e:df:74:8a:85:69:29:27:d4:b0:4b:60:
                    c8:1b:8b:e9:07:ae:8a:47:c5:a1:f6:e6:33:af:6e:
                    ea:9d:8c:05:3e:eb:e7:5b:a1:7a:12:10:b7:f3:97:
                    2a:27:df:96:e7:82:7b:2d:f8:34:22:84:bd:d6:0c:
                    9f:de:82:e2:0e:63:fb:63:c0:5e:3f:3d:d8:2c:2a:
                    35:5d:68:63:68:dd:68:e1:d6:48:40:c4:11:26:1d:
                    d8:9b:60:dc:5d:b4:de:40:02:2a:dc:9b:ca:83:66:
                    0f:02:18:8b:ac:99:46:a4:bb:f0:d6:55:10:c4:a3:
                    2c:13:cf:9c:46:0f:6c:21:30:fd:ed:a7:1a:b3:57:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FE:AA:2F:7B:DD:16:AD:7F:D7:84:98:77:E9:FB:50:63:50:EC:FB
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS215152.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.118.0/24
                  40.183.151.0/24
                  40.183.196.0/24
                  40.183.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:90:1d:5b:6c:49:ac:cb:2d:0b:f2:5c:ec:2d:58:4a:e6:d1:
         9e:8a:19:65:66:13:46:97:89:10:51:72:cd:ca:d8:57:57:fd:
         b1:32:a0:44:a9:51:10:59:b9:43:24:74:0b:1b:7c:a2:0b:b5:
         69:b0:c9:32:25:12:4e:3c:2e:7f:4f:56:91:f2:f7:a5:4e:2c:
         b8:97:df:98:67:f9:e8:00:94:38:df:74:e7:de:2c:ba:1a:8a:
         79:41:f9:48:82:7a:65:37:72:3a:55:d1:d5:2b:2c:d8:79:e4:
         02:c4:85:9f:bf:c3:18:15:83:a1:f3:ba:a7:ff:f3:4c:72:da:
         12:59:6c:5f:21:7d:e1:77:c7:dc:84:42:4b:1c:a3:e5:2a:40:
         43:d4:67:3e:df:b3:a6:9c:a8:99:87:e5:8c:89:80:25:c4:74:
         ba:48:bc:4d:a1:17:f2:a8:f1:da:00:e8:98:d9:9b:10:f3:7c:
         d6:cd:03:3e:31:ed:0c:a6:ff:3d:d2:d3:01:10:b0:37:42:25:
         6d:82:0b:49:62:3c:0e:bd:59:2b:2d:d5:58:fd:7e:5f:76:01:
         0e:d1:8b:bc:41:ba:1b:61:2c:5a:2c:7e:25:cb:7f:69:fb:e9:
         a7:ea:40:96:3c:c5:93:34:81:16:7c:04:ae:3c:4e:5e:0c:78:
         be:ca:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:54 2026 by rpki-client