Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa
File:                     AS137409.roa (raw, json)
Hash identifier:          jgZq3/yk8+k9Av17Noqhrc0AqbwxRxqidBEUYPDYQk8=
Subject key identifier:   68:24:FB:24:D8:72:04:53:6F:CB:07:E0:BD:3F:00:21:CE:02:03:BA
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6252AEA076307EEFD08057FB2127C00309CBB821
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa
Signing time:             Tue 07 Oct 2025 09:30:38 +0000
ROA not before:           Tue 07 Oct 2025 09:25:38 +0000
ROA not after:            Tue 06 Oct 2026 09:30:38 +0000
asID:                     137409
IP address blocks:        140.99.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:52:ae:a0:76:30:7e:ef:d0:80:57:fb:21:27:c0:03:09:cb:b8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct  7 09:25:38 2025 GMT
            Not After : Oct  6 09:30:38 2026 GMT
        Subject: CN=6824FB24D87204536FCB07E0BD3F0021CE0203BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:7c:0e:25:be:4f:92:07:9a:22:3b:eb:50:
                    e4:30:92:ac:3b:8a:28:a7:c8:72:ec:ab:76:3e:3c:
                    f9:32:db:46:f6:0f:0c:9f:d1:6b:a5:d0:7b:b1:73:
                    8a:8c:fd:28:75:50:db:74:f3:fb:5a:8c:4b:fc:c3:
                    7b:97:4e:4f:24:3b:d2:9f:8b:f0:5c:0b:30:bd:8d:
                    cf:a8:d4:d8:9d:96:99:d7:95:7d:a6:d2:3f:83:75:
                    35:e0:12:67:06:06:2b:fe:22:2f:e2:15:32:2f:9d:
                    4b:96:1b:d3:76:81:35:61:f4:8e:18:7f:18:13:8c:
                    82:c4:0f:e1:3e:c8:0f:1a:7f:b0:87:8a:3a:b7:88:
                    49:d2:b1:09:6a:9f:c3:eb:17:70:00:24:1c:fe:ae:
                    45:f0:22:6a:c3:68:19:5f:38:6d:ec:c5:17:b0:65:
                    6e:e8:07:d2:b6:01:83:40:67:34:77:69:5a:97:64:
                    89:df:c8:3d:fa:1b:d1:f2:3a:03:c8:25:a2:6f:f8:
                    cd:1f:ed:9b:8c:6b:4d:cb:7b:ef:4f:a4:5f:bc:f3:
                    1f:30:ed:b0:dd:68:8b:13:a4:63:86:1f:11:2b:18:
                    ff:93:65:c4:81:63:1e:00:94:1d:2b:ae:05:0b:dc:
                    04:33:48:c8:a0:e0:33:5e:8d:53:e9:80:61:0e:8c:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:24:FB:24:D8:72:04:53:6F:CB:07:E0:BD:3F:00:21:CE:02:03:BA
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:30:34:0b:a9:b0:88:69:27:a3:94:44:da:cb:b4:b1:2e:41:
         fb:0d:d5:3b:74:f8:d9:57:18:88:2b:bd:d4:72:ce:a9:04:5d:
         37:ae:40:08:a8:b6:1e:ae:d4:9f:75:ed:73:50:cc:05:62:7d:
         7b:ee:a5:6c:94:38:0f:94:91:e2:51:11:aa:49:36:36:c9:62:
         81:ee:1d:a4:52:e9:63:07:be:d0:2d:20:d3:07:57:69:52:21:
         ac:59:da:e2:4a:ea:1d:20:fe:c8:17:7c:a7:d0:90:62:62:bd:
         c8:05:0e:57:76:22:4b:2f:86:36:83:fe:08:a2:27:c8:3a:ad:
         3e:5e:6e:0e:fc:84:01:1f:a8:15:fc:a5:30:24:bb:83:12:80:
         a9:cc:3c:cf:a4:55:ba:5b:5f:60:ec:88:78:0c:56:cc:68:25:
         ea:d3:65:d2:ab:61:08:99:15:f2:33:69:e0:7b:b2:67:4b:9a:
         de:ad:16:d0:e5:fc:a0:b6:4a:a8:dc:7f:a7:d4:ca:41:e1:9a:
         ac:96:ae:19:c5:b2:e2:f9:69:af:b7:e1:df:56:09:0b:93:06:
         77:fd:52:d4:3b:93:b4:e1:55:b0:07:eb:8f:51:37:43:3e:3d:
         de:04:09:bc:dd:f4:2b:1e:ed:4b:d1:21:e5:f0:f3:d4:77:99:
         0e:97:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:31 2025 by rpki-client