Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199030.roa
File:                     AS199030.roa (raw, json)
Hash identifier:          m4mFzu0jfzXKpuHfXvTNYwnolyihICFQ65smzQwO8Gk=
Subject key identifier:   14:31:4B:9D:FC:6A:F8:92:C8:6F:7F:A1:67:20:DC:64:FB:97:2D:BB
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6DB417F1B85E8836DD03A9ACC35DBFAB82282354
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199030.roa
Signing time:             Thu 23 Apr 2026 07:20:04 +0000
ROA not before:           Thu 23 Apr 2026 07:15:04 +0000
ROA not after:            Thu 22 Apr 2027 07:20:04 +0000
asID:                     199030
IP address blocks:        40.27.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 15:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b4:17:f1:b8:5e:88:36:dd:03:a9:ac:c3:5d:bf:ab:82:28:23:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 23 07:15:04 2026 GMT
            Not After : Apr 22 07:20:04 2027 GMT
        Subject: CN=14314B9DFC6AF892C86F7FA16720DC64FB972DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:c8:9c:e0:01:8e:ac:75:73:de:75:88:41:
                    2e:d2:3c:7d:c7:e7:2b:52:fe:02:93:fc:3c:13:62:
                    86:25:2a:24:ec:0d:d2:2e:8e:7a:6f:43:58:85:86:
                    3f:ba:20:82:95:81:ca:0b:6a:db:92:2b:f5:72:b1:
                    94:d5:8f:a9:bc:ef:63:29:24:8b:e5:c9:8b:aa:03:
                    10:de:3e:b2:12:36:29:12:c3:68:78:78:88:50:6e:
                    6d:29:ad:63:01:5d:97:e7:23:bc:e2:3c:24:f3:a1:
                    8c:b0:52:25:7d:44:5b:eb:19:a9:88:ba:7c:32:2d:
                    61:e4:ea:ce:ca:1a:27:da:a4:10:69:16:77:ae:f5:
                    c4:c6:7a:ba:f4:b9:c5:c3:ab:88:42:9b:cc:9f:a0:
                    51:96:45:f7:37:d8:06:ea:62:dc:d2:a6:47:96:0c:
                    fd:9c:90:ff:b7:69:98:7e:7e:46:ac:47:40:b9:79:
                    71:1b:cf:b7:de:68:b1:d4:48:e4:c8:16:52:17:a6:
                    15:be:57:66:b7:6f:37:4a:ef:2b:a6:40:f8:c0:8e:
                    06:24:39:b4:53:50:d6:5c:8d:4e:58:69:68:c0:74:
                    3f:65:18:8f:04:fd:d1:48:45:d9:a3:37:fc:66:ba:
                    52:9e:1d:57:1c:f3:f8:fb:cf:8c:ca:54:24:fd:ab:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:31:4B:9D:FC:6A:F8:92:C8:6F:7F:A1:67:20:DC:64:FB:97:2D:BB
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b6:14:3a:7b:29:cb:a5:31:a1:5a:22:a0:4b:67:e2:46:8d:
         86:46:08:19:e7:f5:19:62:d2:69:6e:5a:75:da:3d:c5:91:b4:
         c9:b1:a6:35:7a:bc:cd:a2:1c:35:08:bc:95:a4:02:b2:f9:72:
         b2:54:10:1b:db:7c:76:d8:39:d7:e8:02:b7:49:b8:36:8c:1c:
         2c:cb:d0:5b:b2:c8:2c:60:8f:07:28:5a:76:c5:e2:1d:7d:0c:
         40:e9:5e:d5:c1:d2:b5:0f:e2:1b:c2:c4:99:f3:58:19:af:4e:
         86:2b:db:62:2b:60:dc:62:2e:ca:83:81:bd:eb:9d:b1:f3:e5:
         9d:26:23:7e:ea:74:a8:0b:4d:71:17:14:8a:b5:7c:c5:63:6f:
         93:4e:03:a5:e0:58:03:2e:3e:a8:7b:fb:eb:0a:e2:6b:fc:f8:
         ba:6c:33:c9:ca:eb:9c:63:45:cd:bd:57:50:02:ae:31:11:ff:
         30:16:fb:bb:12:ee:db:18:a9:2c:dc:92:79:09:10:3f:55:41:
         38:99:12:e4:a5:0f:5b:c6:df:a5:d5:c1:ab:ec:c7:3f:a4:c3:
         67:3a:be:67:ce:8b:98:76:81:56:da:11:27:5e:03:23:0b:3b:
         aa:ad:3d:83:c8:f4:08:be:e7:cf:51:4a:71:41:03:83:1e:2f:
         46:c8:a3:e5
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUbbQX8bheiDbdA6msw12/q4IoI1QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDIzMDcxNTA0WhcNMjcwNDIyMDcyMDA0
WjAzMTEwLwYDVQQDEygxNDMxNEI5REZDNkFGODkyQzg2RjdGQTE2NzIwREM2NEZC
OTcyREJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wrInOABjqx1
c951iEEu0jx9x+crUv4Ck/w8E2KGJSok7A3SLo56b0NYhYY/uiCClYHKC2rbkiv1
crGU1Y+pvO9jKSSL5cmLqgMQ3j6yEjYpEsNoeHiIUG5tKa1jAV2X5yO84jwk86GM
sFIlfURb6xmpiLp8Mi1h5OrOyhon2qQQaRZ3rvXExnq69LnFw6uIQpvMn6BRlkX3
N9gG6mLc0qZHlgz9nJD/t2mYfn5GrEdAuXlxG8+33mix1EjkyBZSF6YVvldmt283
Su8rpkD4wI4GJDm0U1DWXI1OWGlowHQ/ZRiPBP3RSEXZozf8ZrpSnh1XHPP4+8+M
ylQk/asrowIDAQABo4ICfzCCAnswHQYDVR0OBBYEFBQxS538aviSyG9/oWcg3GT7
ly27MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE5OTAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgbFjANBgkqhkiG9w0BAQsFAAOC
AQEAArYUOnspy6UxoVoioEtn4kaNhkYIGef1GWLSaW5addo9xZG0ybGmNXq8zaIc
NQi8laQCsvlyslQQG9t8dtg51+gCt0m4NowcLMvQW7LILGCPByhadsXiHX0MQOle
1cHStQ/iG8LEmfNYGa9OhivbYitg3GIuyoOBveudsfPlnSYjfup0qAtNcRcUirV8
xWNvk04DpeBYAy4+qHv76wria/z4umwzycrrnGNFzb1XUAKuMRH/MBb7uxLu2xip
LNySeQkQP1VBOJkS5KUPW8bfpdXBq+zHP6TDZzq+Z86LmHaBVtoRJ14DIws7qq09
g8j0CL7nz1FKcUEDgx4vRsij5Q==
-----END CERTIFICATE-----
Generated at Tue May 12 23:58:49 2026 by rpki-client