Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa
File:                     AS140641.roa (raw, json)
Hash identifier:          OFdd9urLBuGXO7IH+Z1ThPLHuejoRVeY1+pm620X3F4=
Subject key identifier:   78:E6:82:FF:5B:B2:BC:3D:6F:5A:F2:0D:A9:4A:05:44:1A:7F:21:30
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0D5CAF2E5852784385C61DF1D68D6FBB4D6C1B19
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa
Signing time:             Sat 16 Aug 2025 18:40:21 +0000
ROA not before:           Sat 16 Aug 2025 18:35:21 +0000
ROA not after:            Sat 15 Aug 2026 18:40:21 +0000
asID:                     140641
IP address blocks:        140.99.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:af:2e:58:52:78:43:85:c6:1d:f1:d6:8d:6f:bb:4d:6c:1b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 16 18:35:21 2025 GMT
            Not After : Aug 15 18:40:21 2026 GMT
        Subject: CN=78E682FF5BB2BC3D6F5AF20DA94A05441A7F2130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:4d:7f:58:11:65:a4:53:aa:bf:10:12:56:
                    7d:38:83:11:df:6f:d0:1b:d9:12:ec:e1:19:06:f1:
                    9c:a9:52:9b:27:0e:56:9d:b1:d9:72:5b:cb:9f:21:
                    37:5b:23:2f:d6:bc:57:5d:1a:6b:6a:fa:6a:c8:c3:
                    47:7f:cb:86:b0:e2:ff:73:33:4e:42:52:c3:25:88:
                    0f:38:0e:06:9d:d7:11:7f:ae:ab:53:8b:0d:a4:6c:
                    bc:48:a3:a3:d2:4a:94:f0:fe:0c:79:ad:b0:d5:0c:
                    0f:0e:00:c7:3a:b5:a5:8c:dd:de:17:d4:b9:34:74:
                    bb:e8:e4:15:ed:9f:25:a7:bc:5a:70:22:86:fa:77:
                    1f:e7:6b:49:39:db:a8:bc:87:67:a2:60:57:ef:ee:
                    7b:20:48:c0:ae:6c:f1:c1:14:0f:41:22:e1:1c:44:
                    43:9a:23:f5:4b:cb:d4:26:38:88:30:b2:30:cc:ce:
                    ad:50:90:eb:24:a1:37:ac:63:fa:0b:58:2b:a9:8e:
                    90:df:eb:90:93:85:05:7a:9c:59:62:c1:80:ba:6c:
                    0a:fc:54:e4:3f:b7:05:87:38:a9:bd:e2:ad:35:50:
                    1d:42:b0:a3:02:bf:af:ad:9c:80:98:9a:3d:83:16:
                    a0:ed:41:15:58:45:31:35:d2:d2:6c:21:a4:f3:2e:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:82:FF:5B:B2:BC:3D:6F:5A:F2:0D:A9:4A:05:44:1A:7F:21:30
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:12:0e:cc:cc:71:97:aa:6a:7b:79:e0:89:12:1e:cc:f8:57:
         3f:6b:16:ee:c1:d9:27:24:24:5f:4e:bd:e3:a9:f9:3c:c3:d4:
         4e:ec:5a:e8:6e:3f:b5:e3:69:82:76:f8:79:b5:a6:c7:52:a5:
         87:4c:cc:e9:17:82:e9:50:d4:de:74:bc:b6:a2:4f:bd:83:c1:
         84:0b:25:9c:2b:03:2c:dd:34:44:0a:58:71:84:48:5a:3e:ad:
         8b:cb:79:67:8a:d7:74:ce:ff:fa:d1:fd:81:a2:30:bc:d3:2c:
         95:b0:51:a5:af:92:2d:7a:19:36:7c:6e:48:f4:75:79:41:7a:
         7d:a3:59:32:96:f9:5d:21:e9:3e:36:f0:74:8e:2e:bf:8e:51:
         64:ea:6c:6c:6f:fb:f9:d7:96:0d:ce:8d:fe:cc:04:39:ae:d1:
         87:05:19:11:ad:06:e3:78:9b:e5:8c:08:4f:05:a9:6e:b5:aa:
         30:c5:57:3e:f2:fa:1e:33:d1:11:2b:60:c8:dc:5f:a9:e0:34:
         76:61:bc:56:f9:ea:ff:05:46:a7:02:5c:eb:0f:80:c3:95:4f:
         6e:7d:ec:fc:f1:3b:c9:c1:ce:16:1c:0a:3d:e5:1e:f1:d8:b0:
         64:4f:b3:c2:09:e1:bf:1e:ae:3e:8c:af:d5:72:4d:4a:b6:4a:
         4b:39:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:00 2025 by rpki-client