Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          ddXxozTcmYF3kGTJ/m6Qr1JaanJDH0s3seK0/CUS8Cw=
Subject key identifier:   08:99:00:7E:1C:F0:25:97:79:95:F6:35:10:56:DF:29:88:DA:CC:CE
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4BCCF674A696FFE9F7204172E62C3E6FDA341E9A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa
Signing time:             Tue 30 Sep 2025 18:30:38 +0000
ROA not before:           Tue 30 Sep 2025 18:25:38 +0000
ROA not after:            Tue 29 Sep 2026 18:30:38 +0000
asID:                     209242
IP address blocks:        140.99.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:f6:74:a6:96:ff:e9:f7:20:41:72:e6:2c:3e:6f:da:34:1e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 30 18:25:38 2025 GMT
            Not After : Sep 29 18:30:38 2026 GMT
        Subject: CN=0899007E1CF025977995F6351056DF2988DACCCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:60:ca:5b:f9:2d:ac:42:0d:39:2c:bc:b0:
                    1a:45:28:e8:03:55:b7:14:3d:4e:b4:24:f5:5c:8c:
                    71:89:17:6d:1f:35:cd:f4:d7:12:98:48:ac:ff:40:
                    36:85:87:59:4a:8f:a1:79:f6:26:bd:d4:90:2b:d8:
                    d1:c6:d6:3c:b1:da:10:55:5d:94:7a:b8:c6:bb:ed:
                    f2:b3:1f:d9:f8:a9:04:82:39:cd:24:9d:55:13:b2:
                    25:5d:02:a9:0b:ae:cd:08:dc:5f:c1:6d:9b:61:47:
                    95:e3:aa:fc:13:fa:a3:38:1a:5c:b2:11:ad:9a:84:
                    47:d3:31:04:ca:e7:15:fe:58:13:34:df:13:64:7c:
                    12:3a:b7:ac:76:da:08:5c:29:48:03:e7:4d:15:cd:
                    d6:7c:84:93:7d:e4:ff:89:d3:1e:bf:eb:fa:1f:bb:
                    e2:f8:6e:8f:5f:42:53:01:91:e9:f3:68:39:61:8f:
                    97:75:3e:fd:13:4f:a1:5a:8f:66:9f:2f:28:88:da:
                    a6:7d:32:8a:a0:6e:19:4a:77:77:62:65:96:62:69:
                    78:25:67:71:81:72:3b:f0:8c:11:31:19:6a:64:e2:
                    ba:72:35:a6:59:db:10:ab:c1:2b:10:d3:5b:d6:f2:
                    cb:22:44:ef:de:d4:70:cd:bb:1d:37:f0:5f:9d:eb:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:99:00:7E:1C:F0:25:97:79:95:F6:35:10:56:DF:29:88:DA:CC:CE
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:f2:dd:37:da:8e:5e:17:f8:10:47:b5:d5:e7:fe:8c:fa:
         00:42:5d:c1:d1:a8:c5:56:e9:49:8d:d0:1e:c3:cf:7e:fd:8b:
         bd:fa:d2:35:df:12:64:ca:db:7d:8b:c6:11:d0:0b:02:fb:42:
         25:40:bb:ff:83:34:88:bf:98:21:4c:a8:27:de:77:ea:7a:86:
         29:3b:91:a1:f0:15:88:6b:73:fd:a4:95:ee:a1:28:55:c2:00:
         b1:df:80:4e:e8:0e:61:9a:66:50:ad:36:6c:1e:2a:0d:0e:21:
         d6:6a:29:29:08:d0:66:fa:84:64:91:8b:64:43:1c:b3:56:de:
         bb:9c:eb:e3:db:81:82:24:bb:c8:ae:a7:ed:03:5a:3b:2c:f3:
         ba:de:8c:a2:21:f6:29:1a:34:b8:32:33:63:67:18:05:03:52:
         a7:b8:d4:5c:e9:d8:7d:73:33:16:c7:88:dd:6a:49:cf:9f:9c:
         d1:4f:ba:a3:34:14:c0:4f:aa:b1:1e:c6:f2:af:e4:b7:71:9a:
         ac:b9:d9:c0:d4:8c:00:a3:4d:41:e0:fd:5d:4c:a8:51:3e:df:
         4e:5a:06:6f:c2:4f:be:21:8d:0e:b7:d0:e0:12:8d:b5:68:07:
         9b:d5:5d:cc:c1:96:63:46:32:0d:5d:c9:2d:49:a9:2e:fa:8e:
         a3:71:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:54 2025 by rpki-client