Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
File:                     AS397630.roa (raw, json)
Hash identifier:          AysFIfJvvtZscgeb8I6fbFnAIKT9u+egLPv5VWweXFQ=
Subject key identifier:   DD:96:7D:07:15:BC:43:60:E5:B2:0C:C5:2C:C3:80:7A:92:3C:51:63
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2F88264C8763C194C6594ADE2FFBFA1C7067872B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
Signing time:             Fri 17 Oct 2025 00:30:38 +0000
ROA not before:           Fri 17 Oct 2025 00:25:38 +0000
ROA not after:            Fri 16 Oct 2026 00:30:38 +0000
asID:                     397630
IP address blocks:        140.99.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:26:4c:87:63:c1:94:c6:59:4a:de:2f:fb:fa:1c:70:67:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct 17 00:25:38 2025 GMT
            Not After : Oct 16 00:30:38 2026 GMT
        Subject: CN=DD967D0715BC4360E5B20CC52CC3807A923C5163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:d3:52:4d:10:d5:7e:af:bf:0a:e0:a3:c3:
                    d6:cb:e9:10:cd:21:4f:62:8d:cf:9b:b2:43:19:0d:
                    30:58:1b:3a:1a:2f:66:77:de:c3:d7:14:5e:ac:aa:
                    6f:94:bf:d2:e5:31:29:92:62:b4:80:40:3e:ef:94:
                    9a:ce:16:73:4c:2c:eb:8e:8e:f5:d6:43:3e:5a:08:
                    70:6d:a9:e8:30:05:79:a3:95:93:d2:92:24:fb:ac:
                    65:33:9c:38:e5:74:40:f2:5a:92:6c:84:04:e8:0b:
                    0f:04:85:93:b4:64:d6:77:ca:b1:df:be:b1:0e:61:
                    93:d6:03:c2:57:78:a8:09:6d:3b:d9:89:33:e8:85:
                    ff:f5:7a:37:d2:e2:9b:cf:6f:9b:32:63:9f:de:f7:
                    02:0e:1f:6d:e5:07:20:54:c2:7a:92:30:d9:cd:94:
                    57:35:5c:30:17:5f:45:b3:81:7b:47:94:be:a7:6b:
                    7e:2e:b8:ad:fa:41:df:4f:a1:63:8a:70:81:4b:b9:
                    37:43:66:db:dc:7c:e5:1f:97:90:32:50:ce:c6:42:
                    60:4a:c5:6c:09:22:69:aa:8f:ef:85:d5:0a:7b:5e:
                    f7:3c:80:a2:9c:b8:6d:b0:9c:46:ed:00:0d:a7:8e:
                    db:f6:2a:11:f5:f7:5d:1c:9f:2b:d6:68:53:40:0c:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:7D:07:15:BC:43:60:E5:B2:0C:C5:2C:C3:80:7A:92:3C:51:63
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:8d:18:c9:92:3d:78:27:b7:f1:fe:b6:f4:d4:cd:40:54:59:
         06:76:1f:44:b7:c5:8c:db:35:ee:b2:eb:6e:cf:83:a9:23:b9:
         5a:9c:a0:e6:d4:5f:25:14:1b:09:cf:b8:6b:ff:bf:9d:6e:e4:
         e6:b1:f5:02:bf:95:68:1a:aa:d6:e9:d6:6b:f4:c5:06:9f:80:
         b0:a6:ca:10:4e:cc:a0:0b:1c:e4:12:bb:ca:77:1f:fc:98:20:
         20:74:fc:52:d0:47:a1:32:d7:4a:34:bf:af:ba:e5:d1:90:56:
         8a:f7:cb:e3:17:ba:4e:a5:f5:f0:e9:f0:06:89:dd:fb:d6:a5:
         08:d9:cc:84:7f:71:b6:b5:ae:2f:07:c0:6b:43:b8:d1:f7:14:
         4c:22:b8:1f:01:0a:c9:56:5e:8a:4a:2d:d4:3a:d1:92:73:89:
         fd:fc:24:cc:04:15:ad:02:3e:f7:17:6f:e2:3b:4c:bb:2e:6b:
         60:a6:51:d6:ff:e3:57:dc:01:cb:c9:18:ef:87:bc:41:3a:d3:
         38:19:04:54:22:bd:f8:60:05:1e:81:1d:68:98:cd:d6:88:cc:
         30:88:ad:4a:f8:96:f7:a2:4a:08:8f:ed:2a:28:c9:b6:0e:1e:
         01:61:08:6a:e1:77:01:ae:38:d3:f8:56:2d:2c:9c:1c:0c:55:
         33:58:8c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:17 2025 by rpki-client