Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa
File:                     AS852.roa (raw, json)
Hash identifier:          Nv16vVcdDKBfhiEHfgz/1yiegd/1uqB2Q9UtvZQlUG0=
Subject key identifier:   FB:3C:19:90:42:FC:CC:4B:5B:2F:92:FE:91:1F:48:1D:A0:9A:5F:B4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       14EECC94BCA51DCB5F4F4F63A56FA2037719E44A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa
Signing time:             Wed 17 Sep 2025 16:29:45 +0000
ROA not before:           Wed 17 Sep 2025 16:24:45 +0000
ROA not after:            Wed 16 Sep 2026 16:29:45 +0000
asID:                     852
IP address blocks:        216.227.212.0/23 maxlen: 23
                          216.227.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ee:cc:94:bc:a5:1d:cb:5f:4f:4f:63:a5:6f:a2:03:77:19:e4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 17 16:24:45 2025 GMT
            Not After : Sep 16 16:29:45 2026 GMT
        Subject: CN=FB3C199042FCCC4B5B2F92FE911F481DA09A5FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:2c:cb:7e:5e:88:46:93:a1:ad:2c:4d:15:
                    46:35:f0:e2:9d:78:e5:39:a0:e1:f3:02:c7:99:50:
                    7e:9e:fd:29:3b:66:b6:d9:54:a3:ec:e1:2e:50:5e:
                    37:79:8e:7b:fd:7e:c2:62:83:22:1d:24:7c:48:34:
                    06:50:48:43:52:ca:ad:8e:a2:cf:5e:76:79:9b:5b:
                    e1:61:66:80:78:80:02:25:06:69:c1:3a:73:39:98:
                    07:bd:ed:f1:aa:31:f6:a9:67:61:e1:8a:53:4c:95:
                    e0:49:19:c7:71:64:72:ef:ff:a0:94:1a:96:e8:b3:
                    a2:53:3f:8c:90:97:a2:c4:d1:69:db:47:1c:da:2d:
                    42:54:70:02:e4:37:ef:29:f0:35:13:bf:59:7e:71:
                    5c:37:cc:1d:9e:94:7a:26:bc:22:e5:01:df:28:f3:
                    46:3b:99:75:23:f0:d1:f1:c3:c6:54:e8:73:54:08:
                    b0:79:66:03:9d:80:7d:5f:f7:dd:ec:04:26:b8:a6:
                    5d:a7:d0:df:f3:85:4a:18:dc:0a:c4:88:62:27:17:
                    7f:76:24:1a:53:51:73:91:7a:b6:f0:16:46:90:9b:
                    ab:22:26:22:2c:d7:ad:ee:11:33:d8:37:1e:22:43:
                    30:e6:62:da:81:21:5d:06:0e:17:97:17:e0:e0:b3:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3C:19:90:42:FC:CC:4B:5B:2F:92:FE:91:1F:48:1D:A0:9A:5F:B4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:62:f0:c7:91:9d:6e:8d:ee:94:3f:6f:7f:fe:e5:7d:b6:60:
         95:21:c4:3e:88:59:27:df:9f:95:54:7a:84:fb:7b:e4:af:56:
         01:34:84:16:52:d3:a3:22:93:65:08:67:25:a5:7c:66:66:71:
         74:22:35:70:78:ae:6f:c9:79:eb:fe:4c:15:8d:c1:f9:64:a4:
         1b:14:2c:11:91:cb:16:bf:da:03:ec:44:d4:86:ad:21:47:22:
         0b:9c:32:05:ee:e0:7f:2f:78:8f:88:55:50:c8:69:22:45:d2:
         ba:a5:25:68:67:56:dd:54:08:f4:e3:3f:a9:f3:ba:8e:cd:b5:
         9b:ff:73:1a:71:a9:32:0e:7d:72:64:8e:f5:41:92:e2:25:6f:
         a7:e7:d7:9a:85:31:2b:9c:b4:f0:52:86:2c:2a:9e:67:c1:a2:
         c3:26:c1:ca:98:5c:69:00:3e:44:5a:34:33:19:a1:ce:61:4e:
         33:c3:09:67:64:37:83:48:51:33:ce:49:ef:96:29:14:a7:a0:
         62:03:38:1e:06:f1:d8:94:3a:48:eb:72:96:fa:c5:12:6e:ed:
         9a:eb:d3:77:a0:91:14:a4:cc:c7:4b:dd:1a:e7:11:12:52:5f:
         2a:e0:76:a7:31:74:2b:24:f8:c3:7d:97:a5:4f:fc:3a:35:c8:
         0e:5d:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:08 2025 by rpki-client