Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
File:                     AS214025.roa (raw, json)
Hash identifier:          VQH9z5x4/w12g9jFllfFEuMGgxxyg1qoBB2KxzfVAGY=
Subject key identifier:   B6:81:53:63:E4:23:19:D7:E6:20:3F:F7:4D:DC:48:7E:14:3C:4D:4B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       126AD1C8E491F5B53A8E947BFAAF0D074932B19A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
Signing time:             Wed 04 Feb 2026 05:55:00 +0000
ROA not before:           Wed 04 Feb 2026 05:50:00 +0000
ROA not after:            Wed 03 Feb 2027 05:55:00 +0000
asID:                     214025
IP address blocks:        206.53.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6a:d1:c8:e4:91:f5:b5:3a:8e:94:7b:fa:af:0d:07:49:32:b1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb  4 05:50:00 2026 GMT
            Not After : Feb  3 05:55:00 2027 GMT
        Subject: CN=B6815363E42319D7E6203FF74DDC487E143C4D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:b8:c1:fd:f2:e6:5c:cb:37:9a:df:68:9c:
                    6a:48:96:14:20:8a:3c:16:e9:42:ad:9c:1d:7a:b0:
                    60:6d:72:ae:6a:91:47:d6:87:3e:3c:b3:fb:9a:e8:
                    d6:e0:04:82:09:11:3e:b9:fb:f8:32:f9:ce:1e:0d:
                    1c:72:f0:be:c4:60:10:b9:56:d2:f9:e4:05:25:d2:
                    7f:ba:f7:0d:b8:0b:96:f6:02:cc:f8:a3:90:66:71:
                    1d:ab:79:12:b9:05:1b:a1:9e:3c:e1:84:c5:f1:86:
                    20:18:40:64:1d:38:b0:d6:68:c6:f8:e0:e5:3e:14:
                    5d:d2:61:fa:71:ef:44:8f:5d:93:ad:00:77:75:46:
                    dd:1a:fc:5d:c0:56:09:1d:9a:b3:0b:dc:9d:3a:0b:
                    84:74:79:6c:d1:e6:69:89:ab:b8:7b:9e:28:72:31:
                    75:5a:42:c3:21:22:8d:7a:21:eb:70:3f:ad:17:b6:
                    55:41:7b:84:36:ef:2b:8a:25:73:1a:bb:9a:de:42:
                    96:3d:e7:73:b6:7c:c9:04:62:9c:49:f8:35:5b:03:
                    d4:10:65:f9:cc:a7:21:69:74:08:5a:12:ba:bb:1b:
                    d8:72:78:18:e9:99:35:a9:cc:ac:c5:81:9d:ac:73:
                    de:70:2f:c1:76:fe:c5:3c:4b:31:e0:87:b8:57:56:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:81:53:63:E4:23:19:D7:E6:20:3F:F7:4D:DC:48:7E:14:3C:4D:4B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:af:3b:e0:d7:ad:2f:8b:e6:14:9e:0c:27:ab:ee:b6:17:
         b4:25:57:00:e0:27:24:9b:a3:34:18:82:b2:ad:04:b4:2c:55:
         3a:20:34:a9:a0:36:82:d8:b4:d3:a6:aa:55:97:b8:62:10:e4:
         dd:7b:d7:98:02:04:7b:1b:b8:e9:f4:ca:1d:ce:f4:75:8f:50:
         20:f2:30:25:3b:8c:7b:08:19:57:d2:d1:f6:81:b4:7e:ef:fb:
         e4:43:e5:f0:83:40:f7:13:7f:b1:9a:c6:75:77:e3:24:6c:5a:
         db:6f:10:50:ae:d6:8f:c8:06:c5:22:a0:00:43:19:4c:36:e9:
         a4:e8:07:aa:7b:3f:da:65:4e:04:0d:d9:59:37:20:e8:02:e8:
         f5:ba:58:e1:64:89:94:4f:07:4f:48:f3:09:cb:db:38:e0:1a:
         49:8c:3d:2b:87:99:26:b1:9a:09:71:1d:e0:15:2c:0d:c2:6f:
         aa:15:7b:26:e7:5d:42:22:3c:2d:9f:32:d3:fa:3c:8a:35:9c:
         05:ef:b2:b1:34:5a:00:e5:06:69:2d:73:ee:1e:97:ac:39:60:
         c8:ed:94:d8:8d:5b:91:bc:87:e8:58:4b:e4:e4:9e:2d:91:9c:
         65:d8:47:19:4f:70:6d:e7:92:59:12:c5:4f:a5:8e:47:3e:1f:
         8a:92:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:58 2026 by rpki-client