Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS215294.roa
File:                     AS215294.roa (raw, json)
Hash identifier:          kV0T4U+Uu+2wGD8Kc4Jfp3Xh97zA8Clbgturvq95LV8=
Subject key identifier:   C5:B3:07:D1:18:BF:07:CD:BE:67:CD:DA:ED:84:AC:AA:4D:E1:3E:3B
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       7D0571874682317E98D05CF079C381E9926436BB
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS215294.roa
Signing time:             Wed 15 Jul 2026 13:58:31 +0000
ROA not before:           Wed 15 Jul 2026 13:53:31 +0000
ROA not after:            Wed 14 Jul 2027 13:58:31 +0000
asID:                     215294
IP address blocks:        2602:ff62:a::/48 maxlen: 48
                          2602:ff62:b::/48 maxlen: 48
                          2602:ff62:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:05:71:87:46:82:31:7e:98:d0:5c:f0:79:c3:81:e9:92:64:36:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 15 13:53:31 2026 GMT
            Not After : Jul 14 13:58:31 2027 GMT
        Subject: CN=C5B307D118BF07CDBE67CDDAED84ACAA4DE13E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:ea:13:01:67:78:7e:22:ef:d2:3e:2c:cd:
                    1f:40:5c:4e:c6:20:4b:17:72:d0:0f:16:af:38:be:
                    b6:a9:43:b9:07:fe:9b:d5:cf:c7:51:75:14:b2:42:
                    31:13:7f:0d:f7:c0:eb:1b:80:d6:32:08:dc:e1:5b:
                    1c:8b:06:80:76:de:64:fe:af:a3:b1:f5:2d:33:ac:
                    d6:45:7f:03:b2:77:a4:67:21:04:60:c0:c0:0b:47:
                    2d:e1:31:09:6a:28:f0:3c:7c:11:55:f9:ec:07:ce:
                    3d:65:f1:6b:a0:1b:09:a9:31:18:99:bc:d3:88:a1:
                    f7:ea:46:cd:fa:42:54:7c:7b:3c:40:d6:49:ae:b5:
                    d0:78:e2:58:0a:83:4c:36:6e:14:c2:1e:e7:93:72:
                    17:91:59:da:0f:e1:78:f7:2b:f0:02:cf:c0:38:a1:
                    88:e1:e9:61:a0:d0:be:5b:86:c5:4e:83:5b:4f:99:
                    4f:c3:6a:24:57:56:2e:dc:fc:24:94:c3:66:33:95:
                    b9:14:51:e2:49:7a:0b:86:b4:1a:73:60:01:3a:12:
                    5c:4a:c6:4d:f3:7c:6b:bf:37:dc:d3:db:44:8a:eb:
                    fc:b5:40:b7:fa:dc:66:22:f8:6d:4a:91:d9:2b:94:
                    55:32:fc:64:ce:b2:27:99:48:83:23:9f:41:92:e9:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B3:07:D1:18:BF:07:CD:BE:67:CD:DA:ED:84:AC:AA:4D:E1:3E:3B
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS215294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:a::-2602:ff62:c:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:ff:93:05:aa:84:1d:fb:ba:c8:e4:cf:62:8b:af:31:c8:
         77:a8:a7:96:f7:fa:41:6e:d8:6a:24:d1:73:43:2a:3c:1b:f1:
         52:48:a1:d0:c5:2d:3b:d3:78:62:f9:24:22:2a:74:19:8c:1b:
         4c:5a:32:07:e5:c5:35:09:90:73:15:9d:76:86:fd:0b:85:03:
         af:db:d9:81:64:34:af:96:27:e6:8b:cd:98:a5:02:23:79:0e:
         da:1a:04:bc:73:12:8f:d9:42:8a:cd:42:01:30:a0:79:a4:8c:
         09:2f:3d:fd:2a:85:34:7d:b9:aa:e0:c6:b9:18:85:4d:dd:cf:
         dd:ad:3a:ce:cf:2c:7f:1a:f5:b6:dc:30:35:62:f3:39:3a:83:
         d2:95:82:cc:97:6a:2e:0f:10:23:ec:61:09:9a:6c:65:b1:1d:
         5a:65:41:71:8d:13:cf:a9:14:94:74:d9:8d:13:e8:89:76:04:
         c0:a1:10:e0:f7:6f:24:70:c9:ac:8e:81:cc:2a:ff:03:57:46:
         25:ac:8d:70:3f:30:68:4c:cd:24:ca:af:1f:9f:4d:ac:c1:94:
         ef:51:8b:36:a3:30:d6:4e:39:ed:51:32:b5:78:b9:f6:c3:c4:
         71:ab:89:54:8e:ec:40:6e:78:f5:86:4e:09:bc:57:49:76:34:
         5b:3c:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:02 2026 by rpki-client