Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214271.roa
File:                     AS214271.roa (raw, json)
Hash identifier:          YFeaYzlkdpqBRLdWB8iclTK/A3sSmjerto5hcTBIMKM=
Subject key identifier:   6C:1F:37:97:50:5E:53:17:DA:79:33:31:19:BB:B1:71:97:AE:57:F8
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0D7FBB60497C2935D97472AAF1EF5ACDCC007FF3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214271.roa
Signing time:             Tue 28 Oct 2025 08:24:17 +0000
ROA not before:           Tue 28 Oct 2025 08:19:17 +0000
ROA not after:            Tue 27 Oct 2026 08:24:17 +0000
asID:                     214271
IP address blocks:        209.200.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7f:bb:60:49:7c:29:35:d9:74:72:aa:f1:ef:5a:cd:cc:00:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 28 08:19:17 2025 GMT
            Not After : Oct 27 08:24:17 2026 GMT
        Subject: CN=6C1F3797505E5317DA79333119BBB17197AE57F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:be:b3:ac:5c:7a:03:c3:a3:c1:82:da:c2:
                    0c:35:89:1b:d5:7a:d5:cb:41:15:84:f1:62:ef:92:
                    51:25:08:9a:aa:ef:18:65:c9:25:a4:f1:1c:20:37:
                    7b:01:24:6f:96:16:c8:96:c1:72:7f:81:d8:d2:9d:
                    c4:c6:a7:e9:d0:09:46:d8:ee:8b:47:95:4e:9c:12:
                    d8:54:64:b2:44:72:6c:5e:34:3c:15:84:6e:e1:b1:
                    bb:41:61:91:f2:fa:4f:e7:3e:57:d5:3c:cd:32:7e:
                    b0:f0:2b:fe:e7:31:55:ba:0e:41:92:20:5b:ae:c0:
                    65:85:e4:9c:74:a0:d0:3c:a2:4d:6f:7a:79:62:68:
                    b9:6d:1d:21:b3:f1:41:4c:a6:c0:26:70:38:7f:3e:
                    ae:28:ed:cd:63:2b:f4:b4:42:2f:45:4b:62:ad:83:
                    d9:be:3a:7a:ce:73:41:19:db:f7:9a:f6:2c:7e:d5:
                    a6:04:73:87:09:26:66:a1:72:64:88:ed:e3:70:9d:
                    82:25:ee:e1:60:15:12:f7:e2:a3:0e:dc:e5:82:2a:
                    71:00:73:c5:fc:0c:dd:10:7d:61:ae:23:9e:6a:59:
                    8f:62:08:3d:39:98:52:48:c0:0a:73:07:d4:c7:97:
                    13:ba:ce:78:25:de:d1:f7:dd:0b:72:82:ad:2a:4c:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1F:37:97:50:5E:53:17:DA:79:33:31:19:BB:B1:71:97:AE:57:F8
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:27:32:51:2f:67:73:0c:a0:df:ca:d0:35:59:77:cc:03:
         1c:e9:df:27:16:73:52:62:64:7a:d4:9f:13:74:57:a2:c5:28:
         c4:9d:d9:c8:b7:d8:7f:4b:c9:47:0c:49:34:2e:02:02:f5:a6:
         65:14:6c:ae:6a:56:dc:f0:c8:a1:1e:70:e3:0e:79:86:9d:20:
         47:f6:73:e2:4f:c6:5d:62:89:23:f7:8b:00:1a:75:8f:96:e0:
         b3:ee:0a:df:24:8d:99:30:06:50:80:f1:3b:df:76:b7:1f:72:
         44:8f:4f:7d:92:d4:d6:37:b6:a6:ae:c4:e2:cb:d8:e6:67:73:
         3f:d9:26:6e:39:28:68:04:98:ae:ad:26:13:74:32:5f:7e:1a:
         f3:91:1e:aa:45:42:72:89:b6:9f:72:cf:d9:82:03:39:d7:b4:
         7a:61:4a:33:b2:aa:f9:36:79:2f:27:37:f6:69:a4:f1:ba:1c:
         8e:ea:df:bc:9f:4f:fe:ad:a4:6e:74:2e:04:a7:5c:be:d7:e9:
         0a:96:ef:5c:39:eb:57:4d:96:76:24:ae:3f:84:86:61:8e:a7:
         13:66:7b:49:cb:f6:d9:ef:f2:da:50:63:1d:eb:31:5b:97:99:
         69:11:b9:d7:33:31:07:bf:b6:78:81:7a:c1:db:42:5c:8e:0c:
         27:d6:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:35 2025 by rpki-client