Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS214962.roa
File:                     AS214962.roa (raw, json)
Hash identifier:          8ZRDaajuDo3FkYjNi2orttvv3AZFbel4XeiQe+qm/Oo=
Subject key identifier:   9B:88:15:FE:BB:86:EF:06:AE:DF:87:58:F5:80:6C:20:15:BC:0C:0F
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       6E9B3177F4B793B3C7E6F199F5626A8B1DA0817B
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS214962.roa
Signing time:             Tue 12 May 2026 09:04:21 +0000
ROA not before:           Tue 12 May 2026 08:59:21 +0000
ROA not after:            Tue 11 May 2027 09:04:21 +0000
asID:                     214962
IP address blocks:        207.180.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 11:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9b:31:77:f4:b7:93:b3:c7:e6:f1:99:f5:62:6a:8b:1d:a0:81:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May 12 08:59:21 2026 GMT
            Not After : May 11 09:04:21 2027 GMT
        Subject: CN=9B8815FEBB86EF06AEDF8758F5806C2015BC0C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:f8:cf:68:af:8a:7d:44:6f:d6:56:b2:82:
                    9b:84:ee:78:80:b8:02:3a:75:ac:24:86:17:9a:66:
                    de:b4:03:54:52:fe:e0:31:e8:27:f6:4f:91:29:92:
                    50:0b:3c:f3:95:d9:56:20:f5:12:47:1f:94:bb:14:
                    d1:7c:8e:1d:96:48:95:b6:37:e8:3b:57:05:8f:52:
                    62:36:6c:d3:27:75:d9:91:ac:ec:f1:d4:7b:6a:0d:
                    1f:5b:47:9f:4b:b9:b8:88:6c:07:6d:dd:4a:ab:27:
                    90:3a:a5:56:42:67:c6:be:6a:9a:13:99:a3:26:aa:
                    0e:96:d9:a2:c1:82:aa:60:84:25:db:9c:ae:b5:bc:
                    48:05:61:da:e5:8e:be:aa:83:ac:33:27:ae:7a:63:
                    dd:aa:50:fd:53:1d:67:f5:ac:34:22:b8:db:39:c1:
                    f3:eb:ee:91:f3:c6:eb:0d:0a:44:50:0c:88:84:ec:
                    4e:b6:21:13:56:7a:de:6a:c8:63:a8:74:1a:7d:51:
                    8a:d2:c9:e5:f1:4c:6a:98:61:b4:ff:bb:f4:03:97:
                    ef:16:5a:4f:f2:ed:fb:8c:ee:18:65:d0:bb:9b:7b:
                    cb:14:05:47:83:c2:1f:54:ad:b9:cc:23:3b:23:85:
                    e0:ec:78:0c:67:61:f4:3f:15:37:67:d9:bb:5f:55:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:15:FE:BB:86:EF:06:AE:DF:87:58:F5:80:6C:20:15:BC:0C:0F
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS214962.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:ab:1e:9f:98:58:fc:23:48:c7:41:3c:14:06:30:f2:5c:
         2a:a2:2a:88:e9:cc:38:db:be:80:57:ad:37:0a:93:5b:aa:be:
         d1:25:4b:69:a3:9c:a5:c6:ce:00:50:c2:f2:2c:40:56:0b:3d:
         c9:f1:42:02:8d:2b:c4:2a:fb:58:dc:95:5a:2b:13:78:07:75:
         59:02:ad:0e:1c:35:82:b0:ad:51:8d:b3:b8:61:a9:1c:15:b7:
         fb:08:b7:11:69:ca:d2:2c:56:39:72:2b:83:31:7a:82:bc:5b:
         0f:62:7f:2c:9f:41:06:ee:df:fa:ff:d2:66:54:a2:78:91:0b:
         8c:1c:a8:1d:a2:5f:e5:bf:a2:ea:73:4e:16:b1:9b:0d:35:64:
         24:38:6a:34:bb:0d:37:09:0e:32:09:e9:12:07:b3:63:47:17:
         9f:c2:8c:e2:5d:7a:c4:34:88:9f:c8:54:1e:e1:23:04:c0:00:
         1a:38:e5:bf:6a:0e:5b:fe:10:08:a7:52:d0:ec:b4:d8:34:0e:
         be:85:07:c9:8e:8c:a4:a8:45:b5:01:61:af:ca:48:b3:b9:4e:
         e3:50:bb:65:b7:e9:31:8f:57:c2:28:7b:b3:d7:69:2b:f8:8e:
         35:8f:2c:b4:3d:20:29:13:bc:5e:20:e8:20:6b:9d:33:0e:88:
         cc:31:0f:4a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUbpsxd/S3k7PH5vGZ9WJqix2ggXswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTEyMDg1OTIxWhcNMjcwNTExMDkwNDIx
WjAzMTEwLwYDVQQDEyg5Qjg4MTVGRUJCODZFRjA2QUVERjg3NThGNTgwNkMyMDE1
QkMwQzBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3j4z2ivin1E
b9ZWsoKbhO54gLgCOnWsJIYXmmbetANUUv7gMegn9k+RKZJQCzzzldlWIPUSRx+U
uxTRfI4dlkiVtjfoO1cFj1JiNmzTJ3XZkazs8dR7ag0fW0efS7m4iGwHbd1KqyeQ
OqVWQmfGvmqaE5mjJqoOltmiwYKqYIQl25yutbxIBWHa5Y6+qoOsMyeuemPdqlD9
Ux1n9aw0IrjbOcHz6+6R88brDQpEUAyIhOxOtiETVnreashjqHQafVGK0snl8Uxq
mGG0/7v0A5fvFlpP8u37jO4YZdC7m3vLFAVHg8IfVK25zCM7I4Xg7HgMZ2H0PxU3
Z9m7X1XLQwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJuIFf67hu8Grt+HWPWAbCAV
vAwPMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIxNDk2Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM+0FTANBgkqhkiG9w0BAQsFAAOC
AQEAJderHp+YWPwjSMdBPBQGMPJcKqIqiOnMONu+gFetNwqTW6q+0SVLaaOcpcbO
AFDC8ixAVgs9yfFCAo0rxCr7WNyVWisTeAd1WQKtDhw1grCtUY2zuGGpHBW3+wi3
EWnK0ixWOXIrgzF6grxbD2J/LJ9BBu7f+v/SZlSieJELjByoHaJf5b+i6nNOFrGb
DTVkJDhqNLsNNwkOMgnpEgezY0cXn8KM4l16xDSIn8hUHuEjBMAAGjjlv2oOW/4Q
CKdS0Oy02DQOvoUHyY6MpKhFtQFhr8pIs7lO41C7ZbfpMY9Xwih7s9dpK/iONY8s
tD0gKRO8XiDoIGudMw6IzDEPSg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:49 2026 by rpki-client