Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa
File:                     AS214943.roa (raw, json)
Hash identifier:          4mX8Tqgp+bJMrTiVjABGgP6E+X8QJcJPH3cjmfbJAug=
Subject key identifier:   90:EF:8A:AD:2B:BE:99:54:37:5C:58:06:BB:0F:69:F4:4E:93:55:0A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       42F26C5479242A6C313E5CD843C52D523ABA6706
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa
Signing time:             Tue 07 Oct 2025 15:32:43 +0000
ROA not before:           Tue 07 Oct 2025 15:27:43 +0000
ROA not after:            Tue 06 Oct 2026 15:32:43 +0000
asID:                     214943
IP address blocks:        167.160.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f2:6c:54:79:24:2a:6c:31:3e:5c:d8:43:c5:2d:52:3a:ba:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  7 15:27:43 2025 GMT
            Not After : Oct  6 15:32:43 2026 GMT
        Subject: CN=90EF8AAD2BBE9954375C5806BB0F69F44E93550A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:f6:a5:aa:48:e9:ad:68:b8:e9:8f:27:c5:
                    f2:69:95:0a:cd:77:0a:e3:3d:16:57:46:30:3a:47:
                    ac:4f:05:ca:12:ca:50:95:c9:43:78:52:b8:55:ba:
                    ed:9f:bf:15:a3:86:c0:c6:02:db:58:ba:bb:1c:ae:
                    b1:a4:ce:d6:6f:8b:c9:4b:e2:78:4b:3c:e1:b4:d5:
                    0b:0a:bb:a7:e2:96:0b:89:2e:4c:cd:29:ce:63:8e:
                    c4:83:80:77:31:2a:2c:26:9a:25:2d:07:c6:99:24:
                    47:e1:2f:9b:af:fe:86:cd:27:95:50:48:64:fd:66:
                    95:6b:38:a7:ba:03:b4:41:25:dc:d8:4d:58:83:2e:
                    a8:10:98:44:5f:7e:93:41:0d:81:7e:ac:02:c7:c8:
                    b5:a2:53:67:3e:d3:f2:08:48:6f:4d:9c:0b:dc:21:
                    21:14:6f:71:ec:bb:0a:e6:0d:2a:b5:b2:06:e0:61:
                    e6:30:d9:72:ab:c9:b2:b4:ff:54:80:21:00:66:03:
                    69:c8:c8:68:c8:88:2e:70:da:95:d0:7f:6b:50:a5:
                    29:27:9f:9e:51:70:2d:5c:ac:fc:de:f0:4b:28:9b:
                    c5:99:1f:a7:81:64:7c:ba:80:82:9f:f0:a6:06:3d:
                    a6:67:f9:31:08:06:ff:88:dc:5c:4e:24:68:2a:81:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EF:8A:AD:2B:BE:99:54:37:5C:58:06:BB:0F:69:F4:4E:93:55:0A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:13:8f:b4:97:ec:46:67:e5:5e:ce:48:3d:01:9a:4c:65:ec:
         3c:07:19:fe:1c:83:2a:ac:4a:01:d1:bf:91:59:2b:83:87:da:
         8a:f9:e8:a8:89:d9:28:3b:3f:68:4d:f0:36:dd:c5:6e:05:f9:
         3d:2b:18:94:75:73:0c:5e:b7:ab:8d:4d:10:f8:09:c1:d6:5a:
         84:cb:b7:ea:4e:b1:b7:35:4d:3b:98:be:45:4a:80:de:18:d7:
         0c:79:af:88:cc:ef:ba:ce:bb:82:56:2b:f1:a9:0c:ab:2e:55:
         c3:24:d4:7f:5a:c8:fe:29:de:4b:ae:6f:8a:ac:a4:58:70:6e:
         e2:44:20:9b:b1:39:ef:9f:82:8d:46:f2:33:a3:4f:40:5a:47:
         b9:09:67:62:b1:db:61:db:9a:81:cd:cb:50:a8:f2:45:b5:6f:
         b9:31:48:7a:f5:1b:fd:1f:3c:50:79:ce:f7:dd:7f:19:be:8a:
         d8:25:e5:97:8d:51:d5:a3:05:df:d8:f7:85:88:12:74:49:b3:
         09:de:67:33:ef:bc:72:8f:22:94:60:84:be:10:5f:45:99:7a:
         9a:3a:d8:fc:2d:e8:0c:54:a1:9b:06:d6:26:c9:e8:a4:dd:03:
         7a:b3:a7:d9:23:d1:e7:1c:cf:a4:39:34:c0:c6:4c:a4:ab:bc:
         41:7e:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:52 2025 by rpki-client