Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
File:                     AS214024.roa (raw, json)
Hash identifier:          i+c93hdZi+rJNr5MP1n5Rz7pG8wse10FjLdtJTLloMM=
Subject key identifier:   FB:6B:D1:58:C8:7B:2D:55:CB:88:9D:0A:4B:4F:6C:7F:7C:EC:DB:B8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       03B81593691FB6A9D19652555E4115E2DA47DF5F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
Signing time:             Tue 01 Jul 2025 15:59:25 +0000
ROA not before:           Tue 01 Jul 2025 15:54:25 +0000
ROA not after:            Tue 30 Jun 2026 15:59:25 +0000
asID:                     214024
IP address blocks:        104.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b8:15:93:69:1f:b6:a9:d1:96:52:55:5e:41:15:e2:da:47:df:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  1 15:54:25 2025 GMT
            Not After : Jun 30 15:59:25 2026 GMT
        Subject: CN=FB6BD158C87B2D55CB889D0A4B4F6C7F7CECDBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:69:ad:78:2c:2e:b6:b6:cb:dd:ff:eb:7a:
                    a8:71:a4:eb:7b:cb:ae:af:04:53:a4:3c:10:26:ff:
                    73:39:02:ff:5c:39:b9:6a:14:86:bc:1b:47:22:5f:
                    76:eb:71:d2:87:e5:d8:b2:40:7e:c1:8b:6d:fc:2a:
                    61:e6:22:64:7b:a5:a0:2f:c4:51:c5:64:0d:dd:4e:
                    63:3c:03:cf:c0:e2:e3:b2:60:dc:2e:eb:b2:fb:a9:
                    11:5a:16:71:48:b1:cd:89:b6:76:b3:96:fc:35:ce:
                    84:1a:2d:01:1a:f4:d4:d6:e9:49:23:60:7c:19:2d:
                    c7:9d:af:97:a7:06:d7:d2:10:e5:69:50:60:01:d4:
                    8e:41:2e:1d:e0:37:bc:40:8b:21:3a:f2:83:2f:63:
                    41:c3:46:73:d4:24:5a:bf:20:5c:d6:3c:91:a0:5b:
                    04:5a:a1:2c:b2:d0:91:8a:84:69:ec:52:c2:ca:fb:
                    da:ad:25:aa:45:b2:35:e7:62:77:a6:36:38:5f:95:
                    17:e0:60:2a:20:79:3e:49:96:df:7d:1c:3d:c2:bb:
                    98:87:a5:06:fa:90:3b:df:bc:e7:b0:aa:c3:ac:26:
                    71:97:93:38:3f:20:11:b5:05:65:89:ae:5c:7c:66:
                    71:b2:27:b2:98:60:1d:27:54:a8:21:73:81:92:cb:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6B:D1:58:C8:7B:2D:55:CB:88:9D:0A:4B:4F:6C:7F:7C:EC:DB:B8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:c5:d9:ee:86:e9:e8:43:76:00:d8:7d:a3:9e:83:20:a8:de:
         dc:d4:ed:af:e8:51:72:73:14:4f:41:fa:26:18:d1:00:6f:33:
         6f:b0:8c:fd:af:71:5b:f8:c5:6f:04:6a:b9:95:1b:fc:01:2b:
         aa:12:c6:58:93:cd:07:25:3e:26:34:6d:86:b4:6a:8e:09:2a:
         6f:a9:cf:c8:c0:c6:f0:a7:12:c0:67:c2:23:13:40:b1:40:98:
         fa:2a:46:eb:55:0d:49:39:78:5b:e1:e1:28:bf:ba:af:6b:1e:
         45:7f:41:92:70:0b:dd:6d:77:57:28:8f:08:e2:62:b3:01:c1:
         3d:a9:d6:9e:8b:32:3a:24:3e:24:fe:d3:0a:da:0b:b9:09:98:
         2e:e6:e0:93:6b:85:2a:89:00:43:b6:fd:7e:6b:a2:d2:a1:ca:
         59:e2:f4:68:b0:ce:8b:cc:1c:61:8d:5b:4f:49:6e:b0:04:71:
         7b:20:af:bf:f9:25:00:00:bf:f1:1b:02:5a:14:54:8f:a8:6b:
         08:92:48:d8:a8:5c:e5:14:42:f8:86:43:33:c9:4d:ca:ec:f0:
         bd:c7:5c:8c:f0:d6:3b:fe:3d:4c:66:bb:0b:47:70:8d:ed:6d:
         6e:d2:49:5b:3b:42:93:83:07:c0:23:0c:26:69:ef:a7:5c:fe:
         1d:dc:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:11 2025 by rpki-client