Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          ZzXgwqNKLr1kO1Cg0+hMOql4Jo/Zg3ygyyZ1lhF3oyI=
Subject key identifier:   4B:D4:34:D6:C8:9F:37:1B:71:12:EF:5E:16:2E:E0:B8:FF:CA:89:28
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4951B564608A18C50C40A3DAE966921F45BFC532
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
Signing time:             Wed 01 Oct 2025 00:15:49 +0000
ROA not before:           Wed 01 Oct 2025 00:10:49 +0000
ROA not after:            Wed 30 Sep 2026 00:15:49 +0000
asID:                     212669
IP address blocks:        140.99.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:51:b5:64:60:8a:18:c5:0c:40:a3:da:e9:66:92:1f:45:bf:c5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct  1 00:10:49 2025 GMT
            Not After : Sep 30 00:15:49 2026 GMT
        Subject: CN=4BD434D6C89F371B7112EF5E162EE0B8FFCA8928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:f0:dc:31:6d:c5:0a:57:f4:17:5c:21:8d:
                    c7:fd:1e:af:59:34:d0:b1:6b:57:38:91:b3:e5:c4:
                    16:fc:ad:34:b1:c2:c7:c9:df:ea:f4:29:ca:e8:72:
                    07:68:83:51:b6:c7:07:f1:d4:1f:a0:89:70:c8:6c:
                    15:f2:5b:b9:a5:f6:38:8a:e9:67:fa:06:f6:4a:76:
                    66:3c:a1:d3:66:3d:3f:5e:c5:c8:d7:aa:fd:49:1e:
                    6e:92:ad:b2:18:52:7f:e4:50:bb:2b:dc:9f:3f:4b:
                    10:1c:ec:37:bb:1f:f1:56:aa:a0:9e:96:04:bb:22:
                    3f:ac:ca:d0:74:c6:c1:47:7d:88:4f:cb:a1:53:3c:
                    30:29:fd:12:74:a6:af:f0:26:2c:e0:07:2f:c0:ad:
                    2c:f3:ca:ea:94:f2:fb:1f:89:52:14:c5:3f:cd:63:
                    4c:ff:e5:db:41:e3:50:fd:18:9e:01:06:c7:d1:33:
                    b5:26:00:06:83:62:06:90:52:2c:9b:24:e0:05:de:
                    f3:7b:00:1c:ab:91:a1:1a:50:20:c3:52:71:36:6e:
                    06:24:5a:8c:e9:1e:4a:80:c9:a0:88:b6:60:39:ed:
                    54:7d:1d:79:c4:43:67:d0:47:9a:2f:02:38:81:0d:
                    50:bf:bb:de:54:16:c5:16:98:21:04:52:a8:36:ad:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D4:34:D6:C8:9F:37:1B:71:12:EF:5E:16:2E:E0:B8:FF:CA:89:28
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:4e:89:52:4f:9c:8f:30:b0:42:a5:a3:13:7f:71:a3:e5:
         a8:7f:1a:81:22:ef:b9:93:25:79:61:9d:61:65:aa:cb:f2:f5:
         98:18:75:84:88:46:22:b5:2c:3f:71:2a:c7:f7:ad:5c:fd:7b:
         46:9c:4e:83:97:b2:2a:9f:36:80:d7:d1:a1:0a:90:89:ce:b5:
         ac:b3:13:8a:40:f2:8f:5a:e9:34:ab:1b:32:ba:0c:5b:4b:8e:
         3b:35:d2:51:2f:a5:7b:f4:15:82:75:17:f9:9e:32:36:97:42:
         1b:d0:d7:09:b1:24:de:ac:40:e9:27:19:0f:a6:b6:c2:d3:5a:
         40:8f:b3:8f:cb:f0:42:5f:e4:4c:79:a0:0d:2b:85:d9:f1:fd:
         ab:51:b9:df:4e:c6:5c:a3:4a:50:74:d8:ae:bc:52:be:19:30:
         b8:ee:d2:f4:22:99:1e:93:03:3b:44:62:ae:a1:78:77:ab:69:
         3e:c7:74:32:dd:bf:e5:7e:a2:4b:62:71:fe:97:69:31:98:e1:
         8a:c6:9f:84:58:f4:a2:d1:27:0f:d0:24:c0:15:33:78:da:40:
         a6:19:2b:2e:d4:f8:0d:ab:d2:f4:8b:f6:99:2b:4a:f4:f6:c2:
         7e:73:94:27:0d:7f:6b:ef:41:c5:d0:a9:7d:3c:07:78:a8:2b:
         7c:29:d1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:49:21 2025 by rpki-client