Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          GpPO48KMSVdx3ui6/+JeHqb2t6enRUs8mHMEG+us9DA=
Subject key identifier:   8A:3A:F5:16:C3:08:D7:3C:C8:66:00:0B:42:15:22:E1:41:24:D1:BB
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6394D1D933DD281C127E5D323907B3B2B9E8615C
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa
Signing time:             Wed 08 Oct 2025 09:30:38 +0000
ROA not before:           Wed 08 Oct 2025 09:25:38 +0000
ROA not after:            Wed 07 Oct 2026 09:30:38 +0000
asID:                     62240
IP address blocks:        140.99.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:94:d1:d9:33:dd:28:1c:12:7e:5d:32:39:07:b3:b2:b9:e8:61:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct  8 09:25:38 2025 GMT
            Not After : Oct  7 09:30:38 2026 GMT
        Subject: CN=8A3AF516C308D73CC866000B421522E14124D1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:7f:3f:c4:7b:b1:02:f7:25:35:73:ba:67:
                    ae:e7:56:ae:ef:20:66:b3:34:60:58:4e:a1:4c:48:
                    9f:7c:fb:90:f0:95:71:63:f9:4c:02:ac:96:37:08:
                    0a:c6:68:ce:02:08:3c:8f:df:e1:d5:bc:0e:10:bf:
                    81:1f:7e:6c:fe:5f:2d:ee:1d:70:93:c5:a1:ae:93:
                    fb:c1:bc:90:9a:87:c7:7a:bf:ab:24:3e:36:03:53:
                    a3:b1:ac:e5:09:32:54:2c:c7:a8:64:4c:5a:60:c1:
                    4c:a2:2f:60:f3:9c:32:d2:f6:b8:41:54:e2:fb:72:
                    47:45:2d:36:92:fe:98:1f:31:50:25:96:eb:4f:0f:
                    c0:da:46:6e:d4:69:f8:f6:a0:71:a5:94:59:77:6d:
                    a8:74:02:84:0b:64:a0:ea:eb:49:be:ce:db:02:e5:
                    ca:b7:6b:d8:c2:ed:18:e4:fa:ea:30:0c:48:13:94:
                    1d:63:81:fd:6e:ce:49:63:5c:fb:4f:11:a0:3d:3a:
                    5a:d4:0e:1c:d1:77:58:a8:a1:e5:5b:e1:6a:cf:25:
                    2d:58:2d:c2:db:a8:58:0f:a0:ab:0b:11:8b:c2:6c:
                    cc:f7:39:f4:88:53:67:bf:31:5c:e0:f5:68:45:bf:
                    5a:e2:78:fc:c0:08:b2:06:45:6b:60:6d:60:24:f2:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3A:F5:16:C3:08:D7:3C:C8:66:00:0B:42:15:22:E1:41:24:D1:BB
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:fe:17:10:c2:47:49:e1:75:92:00:c8:93:cc:52:93:6f:47:
         62:2e:26:80:30:1a:5a:e2:87:1b:ca:38:c4:b8:18:75:50:0d:
         fe:ee:f7:15:08:1e:b8:bc:e3:7c:c9:cf:30:96:c0:2e:48:f5:
         c7:89:24:50:d7:5f:b9:df:57:63:34:c4:3f:a4:88:2d:0f:f7:
         ad:b1:2c:28:df:87:01:7c:37:dc:31:22:68:11:ad:9e:d7:86:
         da:b3:fd:55:d8:7b:7d:ef:9a:c4:b6:a8:4b:6f:6a:2f:c2:b0:
         05:83:15:5b:5f:23:c4:c9:e8:e9:22:be:cd:3e:86:79:cd:d5:
         87:be:a7:ac:7d:f3:d3:f7:74:3f:1d:b4:fb:99:27:a9:9f:f3:
         82:12:d8:d8:b5:8a:ef:80:cb:77:87:a7:a7:40:e2:94:8b:fd:
         7c:8e:3d:93:cc:92:66:ab:74:d1:2a:59:23:a1:79:f8:09:05:
         58:0e:ed:a2:96:64:ad:46:cd:5a:ea:70:76:b7:d0:fe:4b:a9:
         d5:76:0c:64:47:bc:e3:dc:d0:1e:ef:81:08:da:cb:fc:dd:51:
         78:a2:f1:ff:a0:06:86:c3:4c:7d:62:d4:b8:0a:29:e3:f5:3b:
         7c:a7:25:7a:f0:6f:65:5f:10:4c:a2:37:eb:5b:df:e5:6c:0e:
         32:d0:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:01 2025 by rpki-client