Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa
File:                     AS20115.roa (raw, json)
Hash identifier:          XHY46V05pJ3Cq4qHkvkTBMyDsEhphq9lg6XfcXdsiYI=
Subject key identifier:   9F:88:41:15:F5:9F:6B:3F:48:EE:9D:13:73:4D:FE:B2:78:84:C3:43
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       7E2C1AC4EF5B7F1482CC7BEFED270DB7993EA18C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa
Signing time:             Fri 26 Sep 2025 00:07:00 +0000
ROA not before:           Fri 26 Sep 2025 00:02:00 +0000
ROA not after:            Fri 25 Sep 2026 00:07:00 +0000
asID:                     20115
IP address blocks:        40.27.0.0/21 maxlen: 24
                          40.27.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:1a:c4:ef:5b:7f:14:82:cc:7b:ef:ed:27:0d:b7:99:3e:a1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 26 00:02:00 2025 GMT
            Not After : Sep 25 00:07:00 2026 GMT
        Subject: CN=9F884115F59F6B3F48EE9D13734DFEB27884C343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:82:7f:0b:84:f6:f1:3f:14:17:8d:38:58:
                    02:83:d9:ce:7c:d0:ae:c2:2a:4a:f9:b3:2b:98:fa:
                    31:30:06:f7:95:6b:f1:86:ab:aa:c1:83:09:78:1c:
                    91:46:ee:08:bc:6d:f1:c2:06:f2:44:e0:36:6e:7b:
                    8b:e9:65:dc:61:53:b9:61:77:f7:b4:89:94:50:b8:
                    aa:e8:f7:60:e3:48:91:80:39:b8:c2:c1:82:6b:2b:
                    99:69:c1:e0:a5:2c:d2:3a:b9:41:32:bc:65:fe:51:
                    15:a5:40:c7:d2:c8:66:46:bb:eb:d3:bf:f7:18:e6:
                    41:90:e4:6f:81:00:5b:bb:3b:62:91:39:28:22:bf:
                    b2:a5:1d:0c:23:22:0c:1b:12:b7:44:ba:aa:ed:03:
                    16:c7:19:b6:92:c1:df:06:02:d9:68:35:b8:7c:9b:
                    6b:c0:4f:0e:8d:9c:ec:f6:22:57:3f:e6:21:4e:31:
                    fd:12:62:29:1b:b8:d6:fd:f9:e3:b7:4f:f4:95:60:
                    bf:92:af:e1:48:82:ce:6f:92:4f:eb:27:1c:81:e2:
                    16:a3:a8:96:23:40:13:43:0c:11:96:f0:87:ea:d5:
                    94:43:32:18:db:1e:e1:fe:de:66:39:a7:1a:1a:f1:
                    c6:84:74:4e:2c:57:10:9d:64:f4:6c:16:ee:03:07:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:88:41:15:F5:9F:6B:3F:48:EE:9D:13:73:4D:FE:B2:78:84:C3:43
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20115.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.0.0/21
                  40.27.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:04:fc:ea:69:c0:5d:e5:d8:0e:ad:d5:d6:7b:21:09:65:c9:
         3f:4d:a6:97:9d:76:8e:02:11:10:60:7c:4a:c0:c9:4d:d9:b7:
         02:5a:10:cb:c2:a2:2f:86:81:31:28:3d:0f:6d:53:e3:be:c4:
         a9:76:3c:51:89:81:6b:41:9c:68:61:3b:08:5b:cb:63:b2:f0:
         4f:12:24:29:d0:b6:ab:45:4e:15:8a:34:dc:43:10:74:f1:74:
         7e:91:af:f1:47:3a:d0:e7:12:a2:4e:ef:55:c7:67:b3:f2:29:
         af:fb:32:04:69:07:eb:22:8d:f3:bf:1b:36:8b:9a:76:01:8d:
         b3:1c:b9:04:e4:b3:fb:f6:cf:b7:1b:68:3b:f2:c6:58:e5:05:
         60:cc:39:20:2c:a7:05:29:f7:d6:fb:f0:ca:d9:c7:cb:b1:8d:
         b0:5c:fe:57:e3:98:fd:41:88:e8:99:c1:07:60:5d:89:26:7f:
         fc:b0:5b:a8:32:9c:6a:f3:f9:47:86:12:14:40:36:a5:a4:22:
         e1:9a:b2:b5:7b:54:7a:58:fc:63:56:aa:ff:08:33:b7:34:70:
         b0:fd:c9:62:9e:32:21:f7:a6:a3:f6:73:75:37:5f:a9:4d:ab:
         3b:fa:df:26:74:bc:e3:9e:56:31:0f:a2:2c:b2:a6:d4:34:ee:
         b2:0f:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:56 2025 by rpki-client