Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          UwIu8NZMV8zuO/YRuONcLaxLnzKmfupJqPSrgozuZWE=
Subject key identifier:   3F:FE:4D:FF:97:01:B3:98:D1:8F:BB:C6:37:C3:1A:4E:7A:D2:1A:F1
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6CC3BA36A142504DAE7F8F5A09077A8F653A8C1A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa
Signing time:             Mon 04 May 2026 00:36:00 +0000
ROA not before:           Mon 04 May 2026 00:31:00 +0000
ROA not after:            Mon 03 May 2027 00:36:00 +0000
asID:                     61317
IP address blocks:        140.99.58.0/24 maxlen: 24
                          140.99.168.0/23 maxlen: 24
                          140.99.248.0/23 maxlen: 24
                          140.99.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 22:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:ba:36:a1:42:50:4d:ae:7f:8f:5a:09:07:7a:8f:65:3a:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May  4 00:31:00 2026 GMT
            Not After : May  3 00:36:00 2027 GMT
        Subject: CN=3FFE4DFF9701B398D18FBBC637C31A4E7AD21AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:cf:7e:fb:a0:07:7d:a2:1e:62:20:20:aa:
                    c7:99:a8:55:a1:15:d2:e7:e6:0e:b9:05:68:77:c0:
                    ac:6d:53:e5:8b:25:d1:55:73:7f:f3:91:df:2c:2f:
                    a5:9c:ef:90:e6:9a:b7:23:2f:e2:d6:30:ef:f2:3b:
                    57:28:f5:6d:7a:ad:3f:9d:d5:16:d6:f8:c3:0e:b6:
                    64:91:ae:57:b8:72:85:38:cf:d7:67:d3:d4:08:be:
                    ad:66:92:d0:48:ae:98:88:6b:27:14:f7:ce:ce:ac:
                    20:1b:fe:6e:03:00:7d:3d:50:fe:e0:7c:9f:f6:32:
                    9f:c0:e4:50:7e:d3:ab:98:22:58:22:f7:3c:a0:b4:
                    73:6d:d3:e0:0c:79:7e:7d:67:3a:c2:78:ab:d7:3f:
                    52:2b:d4:bc:3e:a6:ae:4e:81:e7:3a:2b:08:10:a7:
                    9e:a6:c2:21:e9:e4:69:a4:a3:c2:0f:b9:a2:dd:e6:
                    c8:21:4c:80:04:47:8e:cf:dd:be:9c:f7:14:7e:e8:
                    cd:0c:68:3a:d7:33:63:50:fa:3e:ba:2f:82:9a:8e:
                    d2:13:c0:b8:5b:f5:37:b6:b1:6c:c6:88:f6:3c:d4:
                    a8:04:b6:67:7f:b0:e9:19:01:dc:34:56:05:b5:40:
                    b3:cc:c3:0e:b6:14:d1:80:e2:ca:c2:8b:20:97:15:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FE:4D:FF:97:01:B3:98:D1:8F:BB:C6:37:C3:1A:4E:7A:D2:1A:F1
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.58.0/24
                  140.99.168.0/23
                  140.99.248.0-140.99.250.255

    Signature Algorithm: sha256WithRSAEncryption
         c1:dd:f7:8a:8e:2a:d0:ae:5c:6e:26:33:43:70:00:9b:c8:38:
         74:02:fb:72:d8:8e:d5:ed:93:28:e8:e5:cc:e6:6a:5f:92:49:
         60:87:64:82:c7:33:e8:91:c7:63:7d:85:89:33:eb:f4:6c:3a:
         0d:79:ef:80:0d:02:19:1c:fc:1b:45:2d:bf:78:4e:b0:97:fd:
         38:6d:7c:14:9c:bc:d2:52:1b:9a:80:c6:24:71:63:82:f9:e2:
         7c:3c:af:6c:ff:a6:84:17:27:05:d3:23:6f:75:f6:ff:28:79:
         b3:8d:f7:e6:ae:65:a6:bc:bb:5d:dc:ff:4f:93:56:f4:5d:05:
         39:1e:97:12:b2:ee:b9:83:ca:49:c8:2a:dc:74:c7:f8:c7:95:
         a0:d9:56:61:f3:20:5e:eb:7a:9a:44:ca:68:af:d0:61:c7:21:
         92:72:93:90:f1:e3:65:74:1a:e6:be:2d:da:12:c1:88:f2:66:
         de:67:39:c8:aa:80:36:a7:d5:80:74:10:7b:8c:10:f3:7f:75:
         7b:53:3f:72:4a:6f:e0:b6:c8:4c:96:04:7c:7a:68:5f:32:f8:
         2c:72:5c:e3:6a:2d:f1:3a:b6:4b:6a:74:4c:ce:86:8f:22:74:
         e4:8c:f3:2f:78:a7:8f:c2:bc:74:72:94:8b:65:5f:4c:b8:e2:
         d5:a7:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:47 2026 by rpki-client