Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS137235.roa
File:                     AS137235.roa (raw, json)
Hash identifier:          oJZNIahylf9SCY53Ub1oHzjUDHBlgn+RhP/c69zdz1A=
Subject key identifier:   0B:26:6F:48:7E:C8:51:2F:FC:0E:D6:72:FA:78:51:FF:43:C5:53:1F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       61A12DBD9A8AAB9BABDD6D56D541335F72C07DBA
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS137235.roa
Signing time:             Tue 09 Sep 2025 06:39:53 +0000
ROA not before:           Tue 09 Sep 2025 06:34:53 +0000
ROA not after:            Tue 08 Sep 2026 06:39:53 +0000
asID:                     137235
IP address blocks:        40.183.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a1:2d:bd:9a:8a:ab:9b:ab:dd:6d:56:d5:41:33:5f:72:c0:7d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep  9 06:34:53 2025 GMT
            Not After : Sep  8 06:39:53 2026 GMT
        Subject: CN=0B266F487EC8512FFC0ED672FA7851FF43C5531F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:67:75:6e:65:14:85:3c:fe:66:af:af:a4:97:
                    04:50:60:92:93:09:83:2f:db:12:04:12:a9:7c:4f:
                    c2:4a:3c:67:36:6d:4a:c1:0e:96:96:77:75:02:9a:
                    42:90:2b:6f:b0:08:34:6d:1a:bb:df:da:94:e5:28:
                    8b:1a:dc:2f:65:4a:77:90:a7:45:1a:97:2f:fc:a3:
                    9f:ca:91:fd:63:2d:83:eb:67:fb:d7:19:d4:9a:2d:
                    06:9a:de:0b:d8:5a:2d:62:78:0b:d7:7b:c6:61:d2:
                    40:03:35:28:94:d3:ce:bf:54:8b:16:95:77:7d:7e:
                    50:40:b0:c6:d3:98:b3:5f:4c:88:c6:53:4a:4d:9d:
                    a2:35:50:cb:52:b6:0e:88:39:09:df:34:33:b9:23:
                    c0:78:e9:fc:db:51:2c:ce:86:c4:b3:22:c9:42:84:
                    8d:c1:1e:5f:d0:ce:e9:2d:66:4b:cc:b7:3d:0d:7c:
                    85:0d:7e:58:75:0f:01:d5:1c:01:76:91:8d:45:5b:
                    6d:74:d9:84:72:55:2b:11:57:75:5f:ed:7c:d6:58:
                    e8:71:ae:c0:a3:f7:ea:23:60:f5:58:b4:35:11:e5:
                    05:30:a7:09:ab:50:3d:70:22:a8:3e:30:25:06:3a:
                    9b:49:c8:97:8d:09:e3:98:85:f3:c4:87:87:db:2a:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:26:6F:48:7E:C8:51:2F:FC:0E:D6:72:FA:78:51:FF:43:C5:53:1F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS137235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:2f:d3:b4:3c:64:ec:ff:5a:40:7e:91:34:d6:0b:47:91:
         68:06:b0:9d:1a:25:87:7d:8f:80:bd:8c:e1:1b:9f:74:9e:f8:
         fb:74:59:d8:92:a8:93:4e:31:11:34:8f:48:30:0c:6f:61:60:
         5e:ef:52:57:e2:5f:93:4c:17:08:71:8f:23:4a:f8:1f:e8:05:
         54:92:01:38:bc:23:14:9f:31:95:14:15:53:17:32:32:2c:78:
         6c:73:b6:36:42:d5:e1:ec:2a:a0:6b:63:1c:13:74:8e:45:e9:
         96:40:38:a0:6b:13:6a:13:26:b5:18:cc:27:2a:72:6f:df:d5:
         39:ef:4d:c4:86:76:b4:08:00:88:a2:aa:c7:26:91:0f:26:a7:
         8d:99:61:22:47:ea:4b:62:69:59:f6:22:98:03:37:bb:89:1f:
         6e:59:af:b5:a2:e3:58:de:67:cd:41:fd:80:e2:06:32:cf:96:
         8f:4a:b1:a4:74:a7:2a:07:02:47:85:9c:82:f1:42:34:f3:de:
         73:ce:dc:11:72:0b:65:db:45:93:58:32:3f:01:71:e3:63:a0:
         38:0a:85:7e:bd:a0:11:3d:13:76:c7:16:23:6e:d9:14:f7:34:
         e4:8e:09:b3:80:70:3b:11:b5:47:d9:a5:82:e5:f6:22:d6:11:
         06:64:12:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:31 2025 by rpki-client