Route Origin Authorization

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u55/0/AS214630.roa
File:                     AS214630.roa (raw, json)
Hash identifier:          l6iXL0H7/xvdss4aIx/6xqTuK9U/VAWZaK9T36FGVjY=
Subject key identifier:   36:BF:04:75:99:56:13:20:07:C0:2D:C4:43:36:14:96:AF:D6:CE:EE
Certificate issuer:       /CN=153E24BE98EC220D987AA8B4FF35A90CD6CE42D2
Certificate serial:       4C22E07C9C167858405C4CA755825ED63780ABE5
Authority key identifier: 15:3E:24:BE:98:EC:22:0D:98:7A:A8:B4:FF:35:A9:0C:D6:CE:42:D2
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/153E24BE98EC220D987AA8B4FF35A90CD6CE42D2.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-u55/0/AS214630.roa
Signing time:             Thu 29 Oct 2026 22:01:04 +0000
ROA not before:           Thu 29 Oct 2026 21:56:04 +0000
ROA not after:            Thu 28 Oct 2027 22:01:04 +0000
asID:                     214630
IP address blocks:        2602:f72e:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.proxy-arp.network/repo/bgp43-u55/0/153E24BE98EC220D987AA8B4FF35A90CD6CE42D2.crl
                          rsync://rsync.proxy-arp.network/repo/bgp43-u55/0/153E24BE98EC220D987AA8B4FF35A90CD6CE42D2.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/153E24BE98EC220D987AA8B4FF35A90CD6CE42D2.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:22:e0:7c:9c:16:78:58:40:5c:4c:a7:55:82:5e:d6:37:80:ab:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153E24BE98EC220D987AA8B4FF35A90CD6CE42D2
        Validity
            Not Before: Oct 29 21:56:04 2026 GMT
            Not After : Oct 28 22:01:04 2027 GMT
        Subject: CN=36BF04759956132007C02DC443361496AFD6CEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:55:ed:72:f5:fe:39:cf:c9:ec:c1:72:37:
                    43:e2:5d:38:a6:6f:e7:ce:3a:da:57:b7:4c:69:ad:
                    4c:a2:7d:9f:37:f8:a9:4d:31:02:04:de:1f:dd:97:
                    82:9b:ea:bd:2b:3c:c2:c2:4e:ce:1a:7c:bb:72:8d:
                    76:e5:59:d4:38:aa:c1:f2:14:b7:5a:8d:67:d9:96:
                    65:6b:3d:8a:bd:c3:6d:4e:16:f5:46:67:cd:b0:43:
                    10:55:f2:73:fa:a8:ce:c3:36:dd:c1:b0:1b:6b:f6:
                    22:39:bd:dd:5a:f5:be:6d:ef:52:e7:32:ae:42:e9:
                    24:58:55:31:c3:cc:c4:59:14:dc:a0:7e:5d:ef:41:
                    cc:01:c0:5b:9a:34:ab:9c:fe:66:7f:11:92:9c:d9:
                    b1:83:65:10:ce:4f:68:81:de:55:7c:e8:5d:a6:1a:
                    fe:a6:c6:7f:93:e0:d4:6e:d6:2e:6b:63:5a:de:bf:
                    eb:58:2c:a7:be:a0:7b:21:7d:55:7a:c9:6e:a9:6d:
                    be:1b:50:07:13:18:e2:4a:9a:86:91:50:59:65:17:
                    9e:fd:20:9c:38:32:2d:44:43:7f:c1:43:8b:d8:9e:
                    b5:31:c2:1a:ea:1a:82:22:eb:cc:fc:fc:7e:73:fe:
                    14:e6:79:d0:fb:dd:83:7e:3a:0c:d6:b9:2a:9d:7e:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BF:04:75:99:56:13:20:07:C0:2D:C4:43:36:14:96:AF:D6:CE:EE
            X509v3 Authority Key Identifier:
                keyid:15:3E:24:BE:98:EC:22:0D:98:7A:A8:B4:FF:35:A9:0C:D6:CE:42:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u55/0/153E24BE98EC220D987AA8B4FF35A90CD6CE42D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/153E24BE98EC220D987AA8B4FF35A90CD6CE42D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u55/0/AS214630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:2b:d4:0a:70:24:1c:ff:25:35:01:9c:fc:a5:08:58:f1:39:
         e1:ed:7c:94:1a:0e:8a:85:ca:73:0e:fe:20:8e:d2:82:75:76:
         38:61:96:08:e2:4a:36:a4:24:4c:33:97:91:cc:1b:69:3f:f4:
         f2:ad:6b:f1:7b:50:f0:af:66:19:9f:d9:2f:d0:ee:21:06:e9:
         3a:ee:69:6a:d8:05:c4:98:08:39:5c:0a:81:76:bd:4f:e7:06:
         97:2d:13:15:41:e4:cc:88:46:f8:af:c9:0c:0c:5e:7a:7a:1a:
         dc:b4:3f:07:cd:df:9a:0e:55:eb:5a:39:f0:62:00:a0:2b:ec:
         d8:d3:62:d5:43:e4:6b:ca:05:99:dc:74:9b:46:04:b4:f4:5f:
         14:0c:0d:6b:f1:43:ec:a8:e7:4b:83:58:02:05:c1:be:4b:c6:
         29:70:0c:6e:be:0b:7b:5e:e2:9c:d7:10:42:dc:2d:a3:df:91:
         cb:e0:3f:5b:df:62:e7:0b:02:92:68:8d:f4:ff:6d:1a:54:1a:
         02:5a:9f:83:a7:e6:3b:0c:73:7c:4e:66:b4:ca:bd:d7:a3:1f:
         2e:22:2c:5b:23:1e:11:3f:d6:64:8d:9d:d0:51:3a:53:1c:97:
         4a:2e:b9:08:e4:e2:fe:82:94:8e:37:a5:0e:49:03:78:6b:f7:
         6b:49:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:09 2026 by rpki-client