Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS215607.roa
File:                     AS215607.roa (raw, json)
Hash identifier:          cArLG29i2sE58b0JqvvLuLm7UIQAzXA5M946dN0wV3w=
Subject key identifier:   2A:FD:7C:4F:A2:B3:CA:52:58:62:9F:2A:0C:0D:CC:04:FF:B6:8B:36
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       07ADD39450028ACEF00EC1362C09C2B7A12767F1
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS215607.roa
Signing time:             Sat 28 Mar 2026 08:47:22 +0000
ROA not before:           Sat 28 Mar 2026 08:42:22 +0000
ROA not after:            Sat 27 Mar 2027 08:47:22 +0000
asID:                     215607
IP address blocks:        40.27.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ad:d3:94:50:02:8a:ce:f0:0e:c1:36:2c:09:c2:b7:a1:27:67:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 28 08:42:22 2026 GMT
            Not After : Mar 27 08:47:22 2027 GMT
        Subject: CN=2AFD7C4FA2B3CA5258629F2A0C0DCC04FFB68B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:6c:75:12:ce:3b:41:2a:f3:0e:9e:b7:31:
                    44:22:62:49:8f:63:a3:e8:dc:58:c6:66:4f:53:64:
                    2a:80:69:f7:aa:47:d4:74:3d:e1:82:4b:97:9d:da:
                    f8:4c:b1:33:8c:91:ec:9d:c5:af:39:eb:de:a2:61:
                    ca:91:df:bd:8d:c3:c9:d3:33:ef:9c:2a:69:f0:0a:
                    bc:aa:66:78:60:3f:ad:54:43:88:bd:08:6b:85:29:
                    56:c2:e4:58:b2:09:1f:76:5e:83:11:a8:12:44:89:
                    9a:33:ed:db:35:9a:3f:f1:96:21:1b:40:35:96:09:
                    93:04:11:cd:f5:9a:83:ea:56:4c:28:e9:25:52:da:
                    80:16:94:6a:27:09:99:e5:7b:37:c4:3e:c1:5c:5f:
                    19:2b:b8:4f:a8:c0:a7:bb:c4:8d:38:36:77:0d:ea:
                    55:eb:41:ca:65:5f:bf:25:80:2c:02:b0:df:52:5d:
                    82:83:c7:c8:11:af:de:8a:54:9d:87:24:c6:65:c7:
                    5f:0d:6e:08:ae:56:57:5b:d1:0b:ef:c3:4c:23:bb:
                    af:1b:78:af:24:c9:0b:44:eb:5a:d7:d0:06:bf:b3:
                    fd:30:08:c5:35:42:56:5c:e6:72:b7:b1:61:e0:80:
                    e4:3c:66:67:05:de:95:93:8e:34:52:ed:d6:bf:5d:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FD:7C:4F:A2:B3:CA:52:58:62:9F:2A:0C:0D:CC:04:FF:B6:8B:36
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS215607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:28:95:fa:a8:5c:12:97:78:e0:c5:50:e7:b3:b6:75:2b:98:
         81:c6:78:5c:8a:09:88:d4:77:ef:e9:95:cf:1e:15:3a:6c:20:
         61:5a:ed:57:45:03:d8:f9:13:66:02:e2:6d:13:f6:16:be:6f:
         e1:6e:d3:bf:7a:4f:dd:43:b6:43:91:7d:90:5f:44:68:19:38:
         a4:16:7e:6d:5e:e2:64:aa:5f:72:7e:ae:83:c5:75:cb:34:b6:
         3b:70:f2:21:a4:d3:62:69:da:3d:17:6d:da:f8:46:ff:f5:f9:
         70:55:42:cc:83:95:4a:4f:80:34:e4:27:53:57:b7:14:83:92:
         6e:8e:7f:9d:53:02:88:3b:13:16:b2:d2:d2:5c:95:1b:ed:f8:
         e7:6e:ba:33:9d:79:81:c0:68:ef:8b:02:a8:5e:af:7d:f4:af:
         18:f7:54:60:a2:d4:14:13:3c:a5:05:26:80:fd:e5:90:ff:0e:
         f4:90:85:4a:e6:a2:7c:0d:5d:53:69:2c:47:28:ee:45:5f:d9:
         6e:f2:61:61:4b:ea:ca:18:d1:d0:ce:bb:88:97:4e:4c:1d:80:
         8c:76:48:8e:47:3a:e1:88:6d:8e:70:9c:21:fb:ac:55:11:63:
         f8:a3:47:f9:53:4a:e5:a6:e9:20:f6:17:8b:d3:8e:9f:2e:8e:
         bd:75:36:db
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUB63TlFACis7wDsE2LAnCt6EnZ/EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzI4MDg0MjIyWhcNMjcwMzI3MDg0NzIy
WjAzMTEwLwYDVQQDEygyQUZEN0M0RkEyQjNDQTUyNTg2MjlGMkEwQzBEQ0MwNEZG
QjY4QjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK9sdRLOO0Eq
8w6etzFEImJJj2Oj6NxYxmZPU2QqgGn3qkfUdD3hgkuXndr4TLEzjJHsncWvOeve
omHKkd+9jcPJ0zPvnCpp8Aq8qmZ4YD+tVEOIvQhrhSlWwuRYsgkfdl6DEagSRIma
M+3bNZo/8ZYhG0A1lgmTBBHN9ZqD6lZMKOklUtqAFpRqJwmZ5Xs3xD7BXF8ZK7hP
qMCnu8SNODZ3DepV60HKZV+/JYAsArDfUl2Cg8fIEa/eilSdhyTGZcdfDW4IrlZX
W9EL78NMI7uvG3ivJMkLROta19AGv7P9MAjFNUJWXOZyt7Fh4IDkPGZnBd6Vk440
Uu3Wv11mQQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCr9fE+is8pSWGKfKgwNzAT/
tos2MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzIxNTYwNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgbFzANBgkqhkiG9w0BAQsFAAOC
AQEALyiV+qhcEpd44MVQ57O2dSuYgcZ4XIoJiNR37+mVzx4VOmwgYVrtV0UD2PkT
ZgLibRP2Fr5v4W7Tv3pP3UO2Q5F9kF9EaBk4pBZ+bV7iZKpfcn6ug8V1yzS2O3Dy
IaTTYmnaPRdt2vhG//X5cFVCzIOVSk+ANOQnU1e3FIOSbo5/nVMCiDsTFrLS0lyV
G+345266M515gcBo74sCqF6vffSvGPdUYKLUFBM8pQUmgP3lkP8O9JCFSuaifA1d
U2ksRyjuRV/ZbvJhYUvqyhjR0M67iJdOTB2AjHZIjkc64YhtjnCcIfusVRFj+KNH
+VNK5abpIPYXi9OOny6OvXU22w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:49 2026 by rpki-client