Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS13347.roa
File:                     AS13347.roa (raw, json)
Hash identifier:          AzMVx82e3QZCpuSm0QQtxjzessRhdjQrHbQvUiKNnG0=
Subject key identifier:   56:05:DE:5B:1C:E4:B3:65:90:C0:90:CB:4B:30:0D:AC:E2:6E:D5:B9
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       389EA3D8CE1266A5D6971B0F4ABC2A7A6E9BDEC7
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS13347.roa
Signing time:             Sat 28 Jun 2025 10:45:05 +0000
ROA not before:           Sat 28 Jun 2025 10:40:05 +0000
ROA not after:            Sat 27 Jun 2026 10:45:05 +0000
asID:                     13347
IP address blocks:        40.27.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9e:a3:d8:ce:12:66:a5:d6:97:1b:0f:4a:bc:2a:7a:6e:9b:de:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 28 10:40:05 2025 GMT
            Not After : Jun 27 10:45:05 2026 GMT
        Subject: CN=5605DE5B1CE4B36590C090CB4B300DACE26ED5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:95:81:94:9d:f1:0f:90:02:d6:de:1b:b9:
                    86:31:6c:71:5e:ea:1f:82:57:2d:36:a3:1e:b3:c0:
                    96:5e:46:3a:5e:1c:08:e8:17:aa:19:21:1d:5f:e8:
                    9f:f0:3a:25:af:6b:78:38:07:b7:5d:c3:91:c3:fa:
                    a8:34:0e:51:23:65:0a:6d:51:e6:7f:74:0a:31:4e:
                    ce:0b:59:be:c3:d4:4d:5b:63:e3:cf:9f:f3:25:ce:
                    d0:94:b7:0b:e2:b7:f2:ed:70:75:28:1b:98:69:80:
                    38:11:27:c5:95:a3:33:5c:fb:26:38:1a:cd:1e:ff:
                    d3:45:ce:0f:79:8d:fc:35:ee:ad:c0:5d:57:01:78:
                    5a:41:fd:1e:48:ae:21:92:16:72:03:e0:3a:c7:8d:
                    05:46:75:88:97:a4:98:db:ae:7c:69:6d:6c:08:aa:
                    ec:35:c1:e9:28:34:59:fa:05:35:e0:f6:27:60:a0:
                    c4:50:d8:29:da:de:64:e7:f2:e8:86:43:82:ff:2f:
                    d3:3a:1f:a5:33:8b:fd:e7:e4:9d:10:cb:e4:e0:38:
                    ac:01:ff:81:7d:94:1a:aa:57:2a:6b:c8:6f:a0:dd:
                    c7:9e:47:4b:aa:aa:21:bb:d2:db:6a:a1:da:a4:c7:
                    17:78:d4:46:1e:a4:5b:be:8f:cb:14:b8:55:c5:51:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:DE:5B:1C:E4:B3:65:90:C0:90:CB:4B:30:0D:AC:E2:6E:D5:B9
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS13347.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:e3:83:71:bd:38:18:5c:64:5d:d3:69:49:90:68:1e:e1:
         34:68:11:e7:32:14:7b:5b:90:b9:04:d7:a0:c9:dd:a9:94:05:
         e8:b5:35:6d:6b:c6:29:7d:c3:3d:c7:8d:7f:4f:5d:ca:b4:ef:
         be:5a:d7:79:81:65:ed:64:92:88:d6:76:65:22:ed:e4:57:b2:
         af:9b:ef:29:21:46:fc:9e:38:1a:11:63:08:4e:af:b2:a3:b9:
         8a:ee:4e:c2:3b:53:96:8c:89:5f:fb:15:76:d2:36:7e:58:06:
         61:02:00:8b:86:79:d3:44:ba:69:a7:00:c1:75:10:fa:07:33:
         df:0b:05:55:44:3f:1d:23:e7:8c:61:82:47:7d:85:cf:26:c7:
         c3:e9:8a:99:aa:20:4a:c3:37:d7:43:b6:04:d4:5f:5c:71:1e:
         3d:91:19:ee:3c:16:87:3b:87:ba:65:97:c3:5f:d9:bc:a2:40:
         dd:9a:82:57:60:0c:bd:67:70:8d:cf:20:04:af:20:47:58:43:
         ac:0c:9a:9c:dd:f2:09:d3:7d:86:3c:21:f0:91:58:bf:2b:19:
         02:ef:ed:17:0b:e8:18:49:3e:56:0b:c1:aa:77:73:73:e4:a4:
         e1:1b:35:d6:dc:de:64:6e:77:fb:2b:b1:1d:f8:0f:5d:df:d8:
         bb:81:27:1d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUOJ6j2M4SZqXWlxsPSrwqem6b3scwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjI4MTA0MDA1WhcNMjYwNjI3MTA0NTA1
WjAzMTEwLwYDVQQDEyg1NjA1REU1QjFDRTRCMzY1OTBDMDkwQ0I0QjMwMERBQ0Uy
NkVENUI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/OVgZSd8Q+Q
AtbeG7mGMWxxXuofglctNqMes8CWXkY6XhwI6BeqGSEdX+if8Dolr2t4OAe3XcOR
w/qoNA5RI2UKbVHmf3QKMU7OC1m+w9RNW2Pjz5/zJc7QlLcL4rfy7XB1KBuYaYA4
ESfFlaMzXPsmOBrNHv/TRc4PeY38Ne6twF1XAXhaQf0eSK4hkhZyA+A6x40FRnWI
l6SY2658aW1sCKrsNcHpKDRZ+gU14PYnYKDEUNgp2t5k5/LohkOC/y/TOh+lM4v9
5+SdEMvk4DisAf+BfZQaqlcqa8hvoN3HnkdLqqohu9LbaqHapMcXeNRGHqRbvo/L
FLhVxVE5oQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFYF3lsc5LNlkMCQy0swDazi
btW5MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzEzMzQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKBuMMA0GCSqGSIb3DQEBCwUAA4IB
AQBbSuODcb04GFxkXdNpSZBoHuE0aBHnMhR7W5C5BNegyd2plAXotTVta8YpfcM9
x41/T13KtO++Wtd5gWXtZJKI1nZlIu3kV7Kvm+8pIUb8njgaEWMITq+yo7mK7k7C
O1OWjIlf+xV20jZ+WAZhAgCLhnnTRLpppwDBdRD6BzPfCwVVRD8dI+eMYYJHfYXP
JsfD6YqZqiBKwzfXQ7YE1F9ccR49kRnuPBaHO4e6ZZfDX9m8okDdmoJXYAy9Z3CN
zyAEryBHWEOsDJqc3fIJ032GPCHwkVi/KxkC7+0XC+gYST5WC8Gqd3Nz5KThGzXW
3N5kbnf7K7Ed+A9d39i7gScd
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:19:44 2025 by rpki-client