Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
File:                     AS215224.roa (raw, json)
Hash identifier:          BlUl1ZCuLu3kzZyEE5fxafZvk1Nzl132ldmDvFhECtI=
Subject key identifier:   14:28:2B:92:5F:EA:AF:47:1A:2E:FB:E3:B2:21:79:54:7C:D5:6C:7C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4F7D7EC1A9D164584A6529B964CC62F62CF75C2C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
Signing time:             Tue 27 Jan 2026 13:50:47 +0000
ROA not before:           Tue 27 Jan 2026 13:45:47 +0000
ROA not after:            Tue 26 Jan 2027 13:50:47 +0000
asID:                     215224
IP address blocks:        98.142.244.0/24 maxlen: 24
                          104.234.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7d:7e:c1:a9:d1:64:58:4a:65:29:b9:64:cc:62:f6:2c:f7:5c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 27 13:45:47 2026 GMT
            Not After : Jan 26 13:50:47 2027 GMT
        Subject: CN=14282B925FEAAF471A2EFBE3B22179547CD56C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:4c:2d:be:d1:0c:57:e0:bb:4b:50:4e:3b:44:
                    65:84:d1:db:f1:c2:61:6a:f7:a4:56:f9:bd:f9:70:
                    9b:2b:51:ba:6f:89:21:ef:48:ed:44:af:17:b5:fa:
                    dd:35:cc:36:8f:66:d2:fa:49:39:8a:e7:b2:25:0b:
                    ab:a5:20:6a:64:a0:22:80:e5:cf:af:87:9b:34:d3:
                    ed:22:0e:61:24:8a:09:ed:a4:35:96:d6:91:51:6a:
                    7b:1d:55:c1:1f:37:62:a0:ad:fa:a7:28:2c:4a:a0:
                    f9:0b:98:db:85:ae:3a:51:a0:d4:cd:cd:bf:21:de:
                    51:b5:46:17:66:4d:3f:32:ab:a3:a6:5f:21:02:43:
                    7d:0e:37:de:77:13:2b:e7:29:bb:69:1a:f4:44:c8:
                    33:3b:4c:02:14:eb:cb:59:94:5a:e5:f1:90:41:83:
                    58:cf:a1:a4:2d:9f:2c:73:14:7c:c7:10:52:04:2d:
                    b5:5c:2b:7a:b7:f4:cd:10:3d:6e:33:3f:71:a8:b4:
                    88:b7:01:14:07:06:6e:0f:c3:33:35:d0:59:6a:2c:
                    42:31:ef:48:0a:e0:bf:14:94:4c:57:73:54:ee:7d:
                    9f:e2:bd:15:c5:eb:b7:31:98:00:3a:f3:e1:cb:11:
                    a3:e1:68:f4:87:8c:75:df:8a:d6:e5:1a:75:26:15:
                    e1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:28:2B:92:5F:EA:AF:47:1A:2E:FB:E3:B2:21:79:54:7C:D5:6C:7C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.244.0/24
                  104.234.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:d1:b8:9d:91:a9:8d:e0:45:6b:8e:01:c9:f3:92:59:28:
         b2:fb:c3:1d:47:1a:84:17:d2:ec:88:90:64:1d:78:4a:eb:c5:
         52:f5:fc:a5:24:97:51:de:15:cc:d2:ef:97:4b:79:65:4c:16:
         30:ec:fb:8e:61:e0:72:0f:ad:55:02:cc:5f:f8:41:fa:8d:22:
         ce:13:3e:78:34:84:30:ce:d5:1c:45:00:ea:b5:0e:d6:cb:80:
         22:e3:23:cd:68:c8:4f:9d:32:23:52:89:c6:11:57:6e:58:4c:
         3b:d2:5b:f6:ce:71:51:9e:f8:97:42:33:f8:cd:77:71:40:9a:
         48:8e:73:5d:70:3c:c4:16:b2:fe:cd:eb:f9:24:af:89:a1:17:
         96:eb:97:12:00:c2:75:71:a2:15:7e:77:d7:5e:5d:7e:78:10:
         50:92:c7:0d:74:eb:e5:00:9b:78:14:36:31:1a:b7:68:81:1a:
         8c:ed:77:8b:a8:e4:62:cd:bd:7d:4b:8b:33:14:a0:19:48:84:
         c3:b1:5e:52:43:3d:58:da:3d:b0:ed:41:f5:9b:ed:ec:dc:9b:
         fc:f2:c3:ac:16:75:ec:27:65:c3:62:99:f4:a8:b0:fe:14:99:
         df:57:2b:30:c6:b5:9f:c2:54:b0:dc:17:88:86:2a:87:03:47:
         af:bb:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:34:02 2026 by rpki-client