Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
File:                     AS215304.roa (raw, json)
Hash identifier:          45zUeHQgV8RJ0wmTI4TrUbG0YvNpr3C9bBHGNhU6jAo=
Subject key identifier:   D3:4E:00:52:67:C7:7F:F3:E0:64:A9:51:09:16:80:12:94:91:3C:87
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       034AC46BC94A226419B2ED84DB19E62448AF592B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
Signing time:             Sat 26 Apr 2025 12:19:22 +0000
ROA not before:           Sat 26 Apr 2025 12:14:22 +0000
ROA not after:            Sat 25 Apr 2026 12:19:22 +0000
asID:                     215304
IP address blocks:        104.234.237.0/24 maxlen: 24
                          104.234.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4a:c4:6b:c9:4a:22:64:19:b2:ed:84:db:19:e6:24:48:af:59:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 26 12:14:22 2025 GMT
            Not After : Apr 25 12:19:22 2026 GMT
        Subject: CN=D34E005267C77FF3E064A9510916801294913C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:8d:6f:41:59:ce:4e:83:16:d8:da:56:b2:
                    7a:2a:fa:8f:c1:3e:93:e0:2f:46:de:e4:7c:02:c3:
                    92:46:a6:8a:63:35:3d:8e:97:60:f6:7f:ab:22:2d:
                    9c:39:d0:00:28:56:74:54:33:67:03:5c:f0:65:65:
                    3c:58:b7:65:2f:5c:9b:a3:32:77:6f:2f:35:93:01:
                    8f:84:8e:6a:7a:68:2e:5f:b1:29:d6:b9:78:87:24:
                    55:4b:ea:1f:a1:80:90:2e:2e:7c:4f:f4:f4:9d:f4:
                    19:68:1f:75:df:22:d9:8b:3c:df:48:79:03:de:2d:
                    ba:cd:4b:f2:68:3d:f7:27:0f:65:15:f6:15:9e:a1:
                    c3:e4:2b:42:9c:6b:e8:19:14:04:4e:cc:bb:0f:d2:
                    0f:9a:5f:a7:9b:73:16:7d:f8:23:9e:cd:ff:8a:a5:
                    5f:82:28:76:1a:a6:23:e7:a7:14:d4:70:81:5e:70:
                    54:f4:b9:fd:42:81:ee:42:38:1a:11:5b:ed:8e:77:
                    23:e0:3d:94:73:8c:6f:82:df:b6:97:6d:ee:37:e2:
                    8c:7f:5e:2c:6b:b7:b0:7f:33:6e:49:3f:5e:29:c7:
                    88:f6:9c:b5:9f:94:34:85:3f:48:a0:4f:61:8c:ee:
                    ef:f4:df:c8:41:d9:57:63:05:8d:bd:90:93:82:cb:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:00:52:67:C7:7F:F3:E0:64:A9:51:09:16:80:12:94:91:3C:87
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.237.0/24
                  104.234.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:63:a6:57:71:2b:f7:3a:8c:b7:da:e5:e3:b6:5e:ac:e3:
         8b:42:58:44:c8:32:2b:77:e0:8b:7a:ff:ec:b1:0c:a2:a3:dd:
         00:7a:b4:65:ee:cd:88:c3:50:64:2b:cf:a4:dd:17:f8:03:a8:
         ae:20:e6:66:1e:20:bf:cd:af:1d:fc:1d:19:ec:6c:6e:d7:09:
         9b:ed:10:a1:f7:fc:5a:26:e4:78:38:2e:cf:60:8e:99:d2:31:
         1e:0a:5f:22:9c:c3:ec:2b:86:f5:90:b0:df:0d:bd:d5:56:4c:
         34:af:f5:1d:85:60:3e:2e:53:c2:87:89:2f:34:b5:28:f4:01:
         24:c0:f5:f9:54:5e:d8:b0:05:74:49:48:8c:d7:18:b1:8b:e0:
         d6:d8:b7:ae:20:58:f2:03:06:02:89:8e:1b:75:dd:b4:3c:de:
         1a:8e:05:65:d1:bf:87:31:cc:62:65:b7:f4:63:e6:c7:fc:0a:
         0e:c1:2c:9c:55:40:65:3e:83:b8:f6:de:62:16:20:d0:9f:9f:
         a4:26:21:36:97:8f:8b:a9:72:27:27:7b:5d:c3:0f:44:2c:d8:
         22:b8:09:29:cd:fa:03:f7:cc:24:b2:c4:40:eb:be:04:1a:1b:
         71:58:76:c1:bf:c7:e1:e7:80:4b:43:01:90:10:6f:e2:c4:e1:
         f9:49:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:44:19 2025 by rpki-client