Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215607.roa
File:                     AS215607.roa (raw, json)
Hash identifier:          VQFdh53WGGMD80otEogV9oCI6DKTlsbe33dxL3xNW1s=
Subject key identifier:   8C:59:08:B0:2E:1E:52:ED:94:E5:AC:16:CF:B3:43:27:DE:75:E6:7F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       066C9458ED548FC4786D6E9E40EEA76EFE6F5B86
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215607.roa
Signing time:             Wed 08 Jul 2026 20:48:24 +0000
ROA not before:           Wed 08 Jul 2026 20:43:24 +0000
ROA not after:            Wed 07 Jul 2027 20:48:24 +0000
asID:                     215607
IP address blocks:        23.95.175.0/24 maxlen: 24
                          64.50.177.0/24 maxlen: 24
                          107.172.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6c:94:58:ed:54:8f:c4:78:6d:6e:9e:40:ee:a7:6e:fe:6f:5b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  8 20:43:24 2026 GMT
            Not After : Jul  7 20:48:24 2027 GMT
        Subject: CN=8C5908B02E1E52ED94E5AC16CFB34327DE75E67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:c7:a6:73:8d:76:37:de:8b:f6:e5:c7:34:
                    4e:bc:10:8e:bb:93:93:ad:94:1b:7d:19:7f:1d:2d:
                    ae:e5:cb:89:58:13:60:4e:80:ec:2a:3c:e2:bf:7d:
                    22:e6:46:6e:68:8a:38:66:be:be:12:48:91:54:9d:
                    df:98:1e:2a:1e:60:9d:b1:3f:ec:25:a5:63:5b:ca:
                    5e:3b:6c:f5:d4:99:55:56:c4:e9:33:17:cb:13:5e:
                    b6:90:11:b6:fc:c4:8e:4e:79:72:2c:6f:e3:ba:38:
                    df:6c:b3:68:89:77:f9:a1:3c:13:ea:e7:05:c1:dc:
                    0d:a5:65:da:61:c1:62:87:cc:93:9f:c6:e8:0d:3c:
                    3f:e2:a2:ed:60:ac:cc:cf:a8:e1:d9:4d:27:b6:03:
                    e4:24:b1:c2:f6:66:1e:61:fd:64:ed:b6:51:f9:a1:
                    4c:08:55:bb:6d:46:2f:d8:7f:a6:60:e3:b2:4d:8f:
                    ee:ea:71:2f:23:7c:c9:48:42:d1:b8:e0:74:40:44:
                    28:07:db:96:b9:10:01:90:87:4a:4e:36:8e:cd:e0:
                    24:47:2e:fa:78:fd:12:83:b1:73:09:42:a7:85:0a:
                    e8:cb:0f:d5:a4:7f:72:29:63:ee:87:df:1e:5a:d6:
                    bc:7f:c9:ea:a3:db:d6:9a:d6:f8:da:d2:70:5e:57:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:59:08:B0:2E:1E:52:ED:94:E5:AC:16:CF:B3:43:27:DE:75:E6:7F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.175.0/24
                  64.50.177.0/24
                  107.172.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:a6:8e:83:7d:7a:bf:f3:38:34:40:4c:d3:a6:1c:b2:2c:
         29:35:9d:01:c6:08:a3:33:a0:bb:4e:8f:2c:27:5e:29:c4:e7:
         e1:e8:fb:24:8a:4f:b9:43:4d:2b:69:58:3d:b9:5e:34:32:fe:
         f4:87:f3:50:02:26:48:44:fa:5d:b2:b3:fb:86:1a:b1:51:b8:
         ad:d0:69:9a:1a:56:70:87:a3:4d:20:f0:48:6c:a5:f3:a6:c8:
         19:2b:b6:16:eb:57:4a:00:82:e7:fc:6a:4d:a1:ef:01:6f:23:
         bc:36:39:19:9b:1b:1c:ff:7e:6d:2d:c6:ed:70:3f:73:d8:69:
         09:54:63:46:40:8e:c8:b2:51:5e:a4:75:c7:26:ae:c5:71:b3:
         bd:43:03:ba:d3:f2:3e:c6:26:50:e2:62:6f:fe:c8:32:75:7e:
         34:87:68:82:c0:2c:3d:19:be:b9:43:da:88:9c:da:14:ed:6d:
         3f:b3:3e:8a:78:b6:75:98:3d:a0:34:a1:ce:b9:e5:d7:56:f3:
         76:9a:41:b9:0c:6a:6d:f3:df:dc:9c:ed:42:56:fb:54:bf:7a:
         f0:6d:52:bf:41:17:7f:75:f5:5f:9e:ff:27:cb:f5:83:7f:c0:
         36:6d:af:68:75:27:3f:6d:28:ca:9e:f5:7a:f9:69:a7:99:2a:
         a5:8c:48:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:52:24 2026 by rpki-client