Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214432.roa
File:                     AS214432.roa (raw, json)
Hash identifier:          TkNfpZq0pMcSwhQbCamPdld35fr6n9HKRp7XCPWhmcg=
Subject key identifier:   94:38:A1:57:00:7C:02:D2:16:39:3B:95:A5:0F:C4:CA:A2:0A:CC:D7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3951D2D0A25BB1DD2F6BBA48C5FA0FBA8D7C35CC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214432.roa
Signing time:             Sun 22 Jun 2025 14:58:08 +0000
ROA not before:           Sun 22 Jun 2025 14:53:08 +0000
ROA not after:            Sun 21 Jun 2026 14:58:08 +0000
asID:                     214432
IP address blocks:        206.53.54.0/24 maxlen: 24
                          206.53.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 08:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:51:d2:d0:a2:5b:b1:dd:2f:6b:ba:48:c5:fa:0f:ba:8d:7c:35:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 22 14:53:08 2025 GMT
            Not After : Jun 21 14:58:08 2026 GMT
        Subject: CN=9438A157007C02D216393B95A50FC4CAA20ACCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:d5:8d:25:49:e9:6b:7c:4f:1d:d6:a1:db:
                    70:d9:3c:cd:a7:9a:70:a7:9e:03:5b:34:c6:64:85:
                    fe:a9:a0:e5:e5:6e:50:ef:44:54:9f:39:dd:1a:3b:
                    dc:ff:32:b5:3e:b0:de:70:92:99:6b:d4:58:25:cc:
                    c4:84:74:26:bb:2e:db:a2:c5:70:1a:d0:37:b3:18:
                    db:54:6e:1e:88:22:b0:9a:d4:c2:76:24:d0:d8:e7:
                    2a:82:e7:86:c9:b9:95:13:0c:58:8b:71:ed:46:de:
                    dd:86:da:eb:c2:a4:1d:65:5c:36:24:f0:1a:29:18:
                    1b:f4:04:29:38:88:51:49:41:be:48:cb:0f:8b:79:
                    b1:08:cc:f3:81:91:1c:80:d8:2e:f8:44:79:b9:28:
                    01:00:b7:98:13:88:68:b5:e7:6e:82:cd:8d:be:bd:
                    3e:8e:87:cc:a2:97:33:77:24:b7:70:cf:57:d9:79:
                    1a:8e:6a:bf:98:15:56:39:31:4c:f9:ab:c4:68:b9:
                    8f:d3:68:94:c0:c0:5f:a1:0c:4d:74:50:68:6f:ce:
                    1f:c8:37:4d:8f:f3:38:19:d8:1d:c7:d6:73:86:03:
                    eb:5a:e6:ed:e9:f0:1f:4f:5d:90:a5:21:e2:e3:ef:
                    2a:a8:28:66:87:30:a0:63:68:b8:df:63:c1:72:74:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:38:A1:57:00:7C:02:D2:16:39:3B:95:A5:0F:C4:CA:A2:0A:CC:D7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.54.0/24
                  206.53.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:f8:5a:55:0b:9a:90:f6:9c:36:98:a4:46:f1:8c:e5:26:4a:
         d3:a0:6e:a8:bd:15:66:bf:01:33:9f:8c:97:75:92:28:d7:ef:
         af:85:fd:6c:86:ad:f1:fa:2c:78:16:52:b8:f8:72:1c:37:33:
         be:b5:7b:cf:b5:51:00:54:16:0e:4f:15:21:15:c3:4d:04:c2:
         a9:c1:72:85:e2:ab:c0:97:1c:ac:ec:f0:77:93:c3:fa:23:2f:
         e1:26:93:4b:af:24:c0:c5:2d:ae:78:bd:86:17:51:c4:73:ff:
         97:94:a2:8b:16:bf:4e:09:95:61:d0:9a:97:2b:4e:e9:36:1e:
         27:16:5f:46:d4:d2:88:4b:d7:8e:dd:97:cf:fa:3a:1a:be:7d:
         c9:bc:8a:28:86:95:4f:e0:ba:a0:c4:48:ed:9e:5a:5f:42:a7:
         b5:50:5f:d4:0e:ce:88:71:b0:27:ca:fb:0b:58:c2:4b:be:2a:
         62:d8:40:34:f1:81:30:d0:9c:91:e6:49:4c:e7:ad:1d:d6:b5:
         2d:65:4c:5b:e9:bc:08:cd:55:86:ef:3b:f3:da:bb:01:3b:4e:
         b2:42:3b:d6:3a:f0:5f:69:34:51:85:d2:d9:44:4e:f3:1b:74:
         b7:e7:99:23:97:73:d6:cf:ec:d6:ea:ca:8b:43:c1:ae:66:a1:
         f2:d7:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:27:26 2025 by rpki-client