Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
File:                     AS215672.roa (raw, json)
Hash identifier:          hVP63N0dAXc3XFNLXuDbeWZzcfniX0JAFNaSwCgwmqU=
Subject key identifier:   27:04:C5:8C:10:2C:EB:DA:2C:BD:8A:17:57:23:C4:6D:CD:D2:A5:DC
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1DEE8118A25A0C379430DB19CACDFB026DC70A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
Signing time:             Tue 29 Jul 2025 11:41:35 +0000
ROA not before:           Tue 29 Jul 2025 11:36:35 +0000
ROA not after:            Tue 28 Jul 2026 11:41:35 +0000
asID:                     215672
IP address blocks:        23.94.129.0/24 maxlen: 24
                          74.50.4.0/24 maxlen: 24
                          162.213.0.0/24 maxlen: 24
                          209.200.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 06:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ee:81:18:a2:5a:0c:37:94:30:db:19:ca:cd:fb:02:6d:c7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 29 11:36:35 2025 GMT
            Not After : Jul 28 11:41:35 2026 GMT
        Subject: CN=2704C58C102CEBDA2CBD8A175723C46DCDD2A5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:11:7f:d6:a4:fb:7a:7c:b6:cf:8e:c8:d8:
                    32:a9:f7:51:e5:ee:b1:c4:05:8e:5d:57:69:de:ea:
                    74:6c:fb:78:00:d8:3a:34:2c:15:7b:45:54:cb:53:
                    b2:8f:f9:41:be:f2:b0:1b:45:15:46:3f:5e:04:fd:
                    96:d4:91:45:3b:8f:af:51:0a:d2:e0:8c:d7:18:6f:
                    39:29:88:a8:c4:48:ee:1f:43:3a:b7:a0:57:06:72:
                    a5:51:de:f8:78:8f:6d:94:22:ed:42:14:10:07:bf:
                    93:ee:45:1c:1a:31:c9:0b:73:96:5c:aa:5a:3e:53:
                    77:56:85:1d:a6:61:87:06:76:c8:ad:9d:5a:05:23:
                    4e:3d:44:72:43:3a:32:a0:71:fb:6e:45:9c:de:84:
                    48:7f:be:2f:11:59:3c:14:a6:1a:e0:78:1d:a2:3f:
                    7e:c5:11:e3:54:98:2d:10:fa:4c:19:fb:9b:ad:94:
                    c2:4c:39:0d:c5:12:3b:43:c8:4d:22:b0:51:94:c3:
                    13:21:71:10:3e:6c:3d:6e:66:60:69:ed:e8:c4:db:
                    dc:20:06:54:f3:29:09:00:2a:db:51:91:e7:f1:55:
                    a4:4d:94:47:91:66:4b:5d:9a:06:dc:bf:b7:9a:63:
                    b4:2d:3a:a5:25:52:5f:12:63:eb:05:cc:90:a0:19:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:C5:8C:10:2C:EB:DA:2C:BD:8A:17:57:23:C4:6D:CD:D2:A5:DC
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.129.0/24
                  74.50.4.0/24
                  162.213.0.0/24
                  209.200.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:7f:ef:52:82:5e:fb:c7:eb:12:aa:ee:93:c8:37:7b:3a:
         35:55:35:c7:da:da:14:34:b6:35:cf:a5:3f:c6:14:89:39:22:
         bb:f8:48:25:9f:f8:9f:a1:dc:88:87:e4:43:62:0d:d8:70:86:
         b1:43:be:36:7e:4c:8f:b4:a0:22:72:59:45:bc:bc:44:0b:3f:
         73:29:1f:fb:55:37:bf:88:ff:25:6f:ca:48:48:d4:f2:ac:b7:
         df:09:18:35:0b:bd:cd:cc:ae:c3:95:8e:0b:a6:59:ba:5d:39:
         ee:90:b7:90:8a:32:0b:e1:cd:7b:8e:79:4e:15:c5:c6:d1:04:
         b0:ab:0c:71:5f:90:0a:7a:96:9c:07:f3:8c:50:57:be:1b:27:
         2d:aa:69:de:11:18:21:ba:7f:d4:df:f4:4d:c8:ce:fa:bd:17:
         d8:c1:7e:bb:d6:02:64:b1:d3:78:a1:b6:60:10:50:ae:32:9e:
         c4:a5:a7:54:d8:52:42:58:2c:e1:f8:cc:23:11:4c:98:dd:88:
         db:e3:2c:36:04:cb:56:e3:c2:1f:89:a9:44:3c:e3:7e:ec:96:
         2b:f7:14:17:d6:f8:17:af:bf:02:1f:1f:1b:06:61:36:26:42:
         5a:97:3d:7f:ab:e8:b6:8c:99:09:74:cd:f6:58:c0:9f:a4:e6:
         16:f9:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:42 2025 by rpki-client