Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215304.roa
File:                     AS215304.roa (raw, json)
Hash identifier:          YDSHJ+r2IizikqBRirnzt2atihtyOfOtQ3NAGJoUq1w=
Subject key identifier:   10:2A:93:B8:E8:9B:20:59:18:C6:B8:33:6B:8A:84:60:32:06:50:B6
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       029E86CD74E35CC5CFFB1EC5B4D7556CF12567B8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215304.roa
Signing time:             Tue 01 Jul 2025 15:59:27 +0000
ROA not before:           Tue 01 Jul 2025 15:54:27 +0000
ROA not after:            Tue 30 Jun 2026 15:59:27 +0000
asID:                     215304
IP address blocks:        192.228.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 19:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9e:86:cd:74:e3:5c:c5:cf:fb:1e:c5:b4:d7:55:6c:f1:25:67:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  1 15:54:27 2025 GMT
            Not After : Jun 30 15:59:27 2026 GMT
        Subject: CN=102A93B8E89B205918C6B8336B8A8460320650B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3e:20:00:cf:34:6b:40:a5:9e:26:e6:36:17:
                    fc:58:15:d1:1d:02:89:9f:49:b3:38:71:1a:18:d4:
                    17:18:b6:50:b6:18:ef:03:b3:51:63:da:55:6f:2c:
                    ee:08:99:f3:da:17:7b:a2:2d:bd:de:13:da:48:f8:
                    92:5b:66:0a:d9:90:eb:20:82:99:2d:a3:8d:5f:e6:
                    2c:5d:56:6c:c2:8f:d3:64:23:da:e0:04:66:b8:11:
                    f4:b3:59:82:94:3b:0a:dc:c3:f8:ca:88:e7:fb:43:
                    b6:29:cd:5c:6c:81:2a:71:74:9c:84:9d:2b:6e:1b:
                    f3:33:4f:b9:5c:32:65:e1:4f:88:3e:ad:f6:87:fd:
                    7e:8c:89:a7:92:1a:a4:28:f3:eb:ad:23:4f:4b:95:
                    77:76:ff:78:89:0b:59:cc:66:85:ff:d8:b4:dc:c1:
                    a6:ff:70:16:88:c1:09:ab:08:16:a7:7b:26:c5:74:
                    89:41:0c:90:02:45:c8:16:86:fe:8d:56:9b:8c:4b:
                    f0:1e:13:b8:76:0d:02:f2:b9:19:05:49:9a:9e:f8:
                    71:8d:70:ab:9d:0a:66:c0:db:74:0f:21:b0:56:79:
                    8b:cc:4d:8d:c6:d9:88:6e:f6:ab:8e:0a:2c:3e:e9:
                    55:ae:71:e7:d9:96:09:38:aa:fb:b2:85:9a:0b:44:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2A:93:B8:E8:9B:20:59:18:C6:B8:33:6B:8A:84:60:32:06:50:B6
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:e2:d4:85:50:ae:06:ca:83:dd:c2:d5:22:fa:f5:c0:be:63:
         26:53:26:0f:e2:8c:33:ba:1c:94:96:38:21:f4:a8:82:12:f2:
         d9:7e:60:50:e2:7f:b7:54:ca:e0:fa:0e:fc:66:92:8e:7b:6e:
         84:4f:b9:cb:b8:35:fc:94:c0:54:64:87:26:4b:6c:99:7b:4e:
         ce:30:d9:9b:ad:b6:3b:94:cd:3f:87:c6:4c:c4:78:99:a5:4a:
         52:58:67:13:21:b2:68:1e:5e:a0:10:9b:48:0c:09:25:7b:1a:
         bd:3a:80:3d:ef:00:d4:ce:92:73:b2:ac:92:e4:4c:b2:0c:28:
         71:7b:18:c1:e3:e7:c8:c8:21:0c:33:21:0b:0c:ea:5c:c3:f9:
         98:16:6d:8c:91:93:e0:f7:f3:0f:8f:7a:67:dc:af:d3:da:d2:
         60:1e:13:31:88:14:df:ab:65:aa:bd:26:2b:09:c3:2e:c8:1f:
         57:65:87:40:66:fa:2e:42:8d:2c:00:87:97:9b:56:21:08:55:
         15:a1:30:44:d8:11:1f:42:ac:40:81:ec:11:7f:84:df:c6:db:
         c2:74:c2:68:7e:ab:11:b4:16:67:01:1f:51:ce:7c:fa:65:e0:
         8f:d1:c5:e6:39:ad:a7:f6:da:74:1d:ba:6c:ac:10:b6:77:f8:
         3b:14:ff:6d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUAp6GzXTjXMXP+x7FtNdVbPElZ7gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzAxMTU1NDI3WhcNMjYwNjMwMTU1OTI3
WjAzMTEwLwYDVQQDEygxMDJBOTNCOEU4OUIyMDU5MThDNkI4MzM2QjhBODQ2MDMy
MDY1MEI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j4gAM80a0Cl
nibmNhf8WBXRHQKJn0mzOHEaGNQXGLZQthjvA7NRY9pVbyzuCJnz2hd7oi293hPa
SPiSW2YK2ZDrIIKZLaONX+YsXVZswo/TZCPa4ARmuBH0s1mClDsK3MP4yojn+0O2
Kc1cbIEqcXSchJ0rbhvzM0+5XDJl4U+IPq32h/1+jImnkhqkKPPrrSNPS5V3dv94
iQtZzGaF/9i03MGm/3AWiMEJqwgWp3smxXSJQQyQAkXIFob+jVabjEvwHhO4dg0C
8rkZBUmanvhxjXCrnQpmwNt0DyGwVnmLzE2NxtmIbvarjgosPulVrnHn2ZYJOKr7
soWaC0T2HQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFBAqk7jomyBZGMa4M2uKhGAy
BlC2MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxNTMwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDkezANBgkqhkiG9w0BAQsFAAOC
AQEAxuLUhVCuBsqD3cLVIvr1wL5jJlMmD+KMM7oclJY4IfSoghLy2X5gUOJ/t1TK
4PoO/GaSjntuhE+5y7g1/JTAVGSHJktsmXtOzjDZm622O5TNP4fGTMR4maVKUlhn
EyGyaB5eoBCbSAwJJXsavTqAPe8A1M6Sc7KskuRMsgwocXsYwePnyMghDDMhCwzq
XMP5mBZtjJGT4PfzD496Z9yv09rSYB4TMYgU36tlqr0mKwnDLsgfV2WHQGb6LkKN
LACHl5tWIQhVFaEwRNgRH0KsQIHsEX+E38bbwnTCaH6rEbQWZwEfUc58+mXgj9HF
5jmtp/badB26bKwQtnf4OxT/bQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:36:27 2025 by rpki-client