Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
File:                     AS215304.roa (raw, json)
Hash identifier:          mtdB+3b08H+RERi+NcBSer3N9rjvIqsLXDm3Edk1pN8=
Subject key identifier:   5B:28:50:91:79:F7:3E:94:EE:EC:0D:B8:1C:D4:D3:66:BA:F2:C7:03
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4C3ABE96DA409F6DBEE326E7226FFE5A90428CBA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
Signing time:             Tue 01 Jul 2025 15:59:25 +0000
ROA not before:           Tue 01 Jul 2025 15:54:25 +0000
ROA not after:            Tue 30 Jun 2026 15:59:25 +0000
asID:                     215304
IP address blocks:        104.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3a:be:96:da:40:9f:6d:be:e3:26:e7:22:6f:fe:5a:90:42:8c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  1 15:54:25 2025 GMT
            Not After : Jun 30 15:59:25 2026 GMT
        Subject: CN=5B28509179F73E94EEEC0DB81CD4D366BAF2C703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:e4:f8:1a:01:18:f0:32:18:6a:04:a8:c6:
                    08:d2:57:83:41:2f:f0:d2:85:67:b0:da:07:e7:c5:
                    e6:b7:a3:f8:25:ff:9e:1a:fd:60:20:d4:51:f9:90:
                    02:a0:9a:03:ed:9f:1e:fe:cb:a6:43:9d:a5:dd:14:
                    86:0d:02:6e:ba:e0:01:e1:69:dd:1c:92:87:62:7c:
                    c4:ee:28:94:c4:49:ed:f0:70:4c:1b:bc:c7:14:13:
                    1a:be:50:19:0a:88:27:e1:71:87:14:3c:3a:a4:9f:
                    cc:1a:13:a1:8f:2d:05:6c:10:df:97:33:ef:22:ed:
                    51:52:1c:ed:18:a7:ef:f6:2a:83:f7:44:06:e3:8f:
                    1d:a5:19:9f:ef:79:8a:ac:d3:39:2d:59:f2:bb:39:
                    6c:cc:b7:a8:cd:a8:8f:9b:19:d4:64:d7:10:c6:f8:
                    37:6f:7f:af:6b:01:6d:c2:ef:57:75:8c:85:5c:fb:
                    45:b9:e7:9b:73:ca:c4:7c:76:d6:34:44:3a:3b:dc:
                    22:32:b0:65:ab:cf:78:9b:f2:d7:5f:b6:be:14:b2:
                    61:b1:ca:81:03:31:ab:25:87:7b:7f:6a:09:1c:68:
                    24:6d:0d:38:88:79:b4:aa:0e:3e:28:00:e6:1f:89:
                    8b:7a:64:2d:d8:e4:61:d5:c4:d4:80:61:e1:98:22:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:28:50:91:79:F7:3E:94:EE:EC:0D:B8:1C:D4:D3:66:BA:F2:C7:03
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:9a:15:82:73:ad:dc:78:2b:8a:09:57:1b:21:61:97:86:
         a6:ff:3b:16:52:dc:37:b8:10:63:92:e1:63:2f:e1:1f:54:0d:
         44:92:66:41:bd:22:a6:a5:0f:6c:69:87:7b:12:65:97:be:e1:
         f8:8f:f4:b3:98:b3:a5:63:96:1d:ae:13:a9:81:3b:b5:6c:cb:
         e6:d4:2e:45:af:5c:9e:b1:0c:7f:69:a8:f4:f9:24:f1:3f:4c:
         82:d5:7a:bf:77:1c:33:e6:bd:35:1e:86:77:76:75:54:8c:5a:
         18:b6:63:84:50:ac:f7:d8:e9:db:0e:e6:01:3b:e8:42:bf:47:
         92:1a:5d:c7:4a:3a:04:31:56:60:5f:24:8b:13:b2:b0:e3:dd:
         e0:d2:92:02:a3:a6:ad:7a:fe:3e:89:ad:53:1b:71:7d:79:19:
         38:a4:ae:a2:9e:b0:03:c0:a6:a3:61:6d:d8:e1:e5:bf:9e:5a:
         83:3b:eb:7f:57:be:de:a0:68:3f:c2:32:8a:d7:70:ae:f3:0e:
         a4:f0:ff:b5:58:8f:a9:aa:0b:fb:dc:7f:a1:66:8e:fa:70:97:
         55:0d:73:86:2d:5f:25:c0:02:d4:3f:08:b9:87:5a:2e:69:8f:
         bd:bc:af:9e:15:d2:15:36:c7:75:87:15:0b:e3:1a:45:f8:7f:
         9c:94:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:50 2025 by rpki-client