Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa
File:                     AS852.roa (raw, json)
Hash identifier:          u5FS+qVqykiu5TK1tI7ocOmVBdE5sNICHE1ggsV30rs=
Subject key identifier:   86:15:59:CD:A6:7C:EE:36:A0:EC:CE:F3:17:CE:29:9D:0D:59:D0:FD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       215C7B95CB380FA69708A4CB72812AB6C88889E1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa
Signing time:             Wed 19 Aug 2026 16:36:20 +0000
ROA not before:           Wed 19 Aug 2026 16:31:20 +0000
ROA not after:            Wed 18 Aug 2027 16:36:20 +0000
asID:                     852
IP address blocks:        216.227.212.0/23 maxlen: 23
                          216.227.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5c:7b:95:cb:38:0f:a6:97:08:a4:cb:72:81:2a:b6:c8:88:89:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 19 16:31:20 2026 GMT
            Not After : Aug 18 16:36:20 2027 GMT
        Subject: CN=861559CDA67CEE36A0ECCEF317CE299D0D59D0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:db:f0:79:4e:e7:f8:b1:1e:38:18:d9:b4:
                    c7:2b:43:59:c6:a2:ae:7e:37:18:ff:95:21:e7:1c:
                    3b:c6:54:92:70:94:91:10:e1:82:a9:4c:9e:e9:b2:
                    97:13:8b:67:7b:18:fe:7f:0e:d4:39:04:a8:75:94:
                    ee:34:7f:bd:b9:ae:88:b4:fb:60:92:0c:f8:4b:e9:
                    4c:4e:a6:df:27:e4:4f:36:25:1b:f0:63:af:d0:76:
                    80:ca:9e:50:7a:7d:10:66:c8:85:97:88:34:f2:5f:
                    41:cf:0c:00:64:65:f4:26:bc:bc:c4:f8:81:59:9c:
                    8c:7e:68:26:8c:c1:f4:89:69:2f:76:17:53:2a:28:
                    e8:d5:6c:91:f2:37:54:b4:69:41:75:5d:a1:15:d1:
                    32:33:22:a9:16:31:e3:13:c4:51:8d:9d:a7:aa:ea:
                    5c:9b:92:a2:28:6e:22:e4:68:45:4e:01:47:3b:73:
                    34:c0:5a:40:ad:0a:0a:c6:9e:4e:ff:59:a8:1f:61:
                    fd:f8:e8:02:61:d8:b4:a5:55:2d:80:e5:2b:07:25:
                    0d:fd:23:a6:a2:02:9e:39:ce:75:cc:08:d9:7d:07:
                    32:fd:3f:51:7a:d8:bc:8d:19:b1:5f:96:e1:ba:63:
                    09:5d:c9:f4:2d:ba:6c:fd:06:a8:f9:3e:57:92:34:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:15:59:CD:A6:7C:EE:36:A0:EC:CE:F3:17:CE:29:9D:0D:59:D0:FD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:01:6d:2f:2e:db:da:7b:a8:e8:28:2c:64:75:19:09:44:
         b2:33:8a:b6:f4:1a:4e:57:fa:c0:e8:f6:2b:98:ec:cc:56:b6:
         1c:e4:7e:38:6a:50:f2:48:33:b6:00:46:2e:79:26:f0:99:16:
         e2:c3:a2:66:44:c1:f1:13:27:0a:9f:bb:a8:e7:af:94:ab:e1:
         7f:12:5a:8b:02:4e:5b:30:b6:88:08:c1:6a:6a:4d:cc:ea:60:
         c4:cc:b9:6e:df:11:e3:33:52:64:70:a1:b6:28:fb:16:e2:20:
         b8:ee:c4:05:f4:e1:15:dd:16:65:69:98:00:8a:07:be:4b:fd:
         81:cd:9a:21:bb:1d:96:b3:a7:27:5e:d3:d4:94:9c:ee:1a:4d:
         bd:bc:f6:75:40:55:b2:68:08:f7:fb:39:ed:24:0b:e3:11:b1:
         cd:06:08:2e:6c:1b:69:56:45:58:9a:31:c7:17:ec:20:96:04:
         52:21:03:be:db:7a:56:e2:c4:70:82:19:74:ce:84:c5:ca:50:
         1d:f9:0e:b2:8c:c0:45:1a:1e:29:ce:c6:7c:e5:f6:1c:53:7b:
         c7:ae:2d:f3:45:64:1b:55:78:de:fc:45:2a:3c:07:4c:9a:70:
         cd:80:60:ed:2d:14:2e:cc:f9:4d:f0:bc:90:27:70:4e:4a:07:
         96:cc:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:33:40 2026 by rpki-client