Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa
File:                     AS25198.roa (raw, json)
Hash identifier:          vVZRbfaCIhoUbAKOdFxptrJW9r+Fv6IcYsdGZOyEkn4=
Subject key identifier:   DC:47:F1:68:50:B6:DD:FD:04:08:93:A8:1B:5E:F6:78:A5:66:F5:12
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       0A51EFC56B541991F738248DCBD3B4F12763ECCE
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa
Signing time:             Tue 23 Sep 2025 09:37:39 +0000
ROA not before:           Tue 23 Sep 2025 09:32:39 +0000
ROA not after:            Tue 22 Sep 2026 09:37:39 +0000
asID:                     25198
IP address blocks:        40.27.169.0/24 maxlen: 24
                          40.27.208.0/24 maxlen: 24
                          40.183.143.0/24 maxlen: 24
                          40.183.159.0/24 maxlen: 24
                          40.183.214.0/24 maxlen: 24
                          40.223.80.0/24 maxlen: 24
                          40.223.86.0/24 maxlen: 24
                          40.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:51:ef:c5:6b:54:19:91:f7:38:24:8d:cb:d3:b4:f1:27:63:ec:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 23 09:32:39 2025 GMT
            Not After : Sep 22 09:37:39 2026 GMT
        Subject: CN=DC47F16850B6DDFD040893A81B5EF678A566F512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:bf:6a:fd:4f:22:21:17:3f:82:7e:3e:47:
                    23:ef:1b:23:0d:b6:0d:9b:3f:5a:8e:e0:84:90:5c:
                    b2:16:3d:05:2b:80:64:be:04:f6:7d:b2:ba:3c:be:
                    df:fb:de:b8:e0:ab:7d:9e:8b:e4:9f:f0:c5:7f:bf:
                    cd:cb:01:21:e4:86:a4:b8:bd:17:d3:0e:fe:92:4e:
                    59:09:5b:c5:80:ed:dc:82:d5:26:1d:14:21:b4:6a:
                    9c:aa:e5:2b:75:2f:09:92:4a:f6:f3:8a:42:86:5e:
                    6c:e6:4d:40:43:a6:18:9b:c0:de:36:40:42:e8:c2:
                    a1:64:28:40:ab:b3:89:3c:99:bc:20:4f:07:3a:6b:
                    d7:1b:71:59:2f:1a:f6:b6:81:b1:45:64:e5:52:78:
                    b3:af:e3:a0:bd:48:c6:d0:16:71:f3:92:6e:dc:4d:
                    85:c0:a2:2f:9e:f6:bf:aa:d7:00:fb:e6:4a:ac:b6:
                    dd:34:2f:0a:41:43:57:24:0f:3d:8e:5d:69:6a:a9:
                    90:a4:d4:1c:93:20:0b:01:34:65:89:51:17:e4:cf:
                    8c:e4:7c:43:7c:d7:f6:71:a5:24:9f:68:89:54:cf:
                    23:de:1e:79:98:5b:01:ca:29:96:be:5f:4a:7c:9c:
                    49:5a:63:d9:3a:ff:69:84:05:b6:5e:85:02:6b:ff:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:47:F1:68:50:B6:DD:FD:04:08:93:A8:1B:5E:F6:78:A5:66:F5:12
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.169.0/24
                  40.27.208.0/24
                  40.183.143.0/24
                  40.183.159.0/24
                  40.183.214.0/24
                  40.223.80.0/24
                  40.223.86.0/24
                  40.223.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:56:47:fe:24:6c:66:ac:b7:8e:71:8c:73:50:d2:4c:52:
         17:12:c8:fc:02:b0:32:4c:1a:bf:ba:85:09:2a:7a:9e:d2:ba:
         8b:37:94:65:22:93:91:a0:9c:97:b8:a6:fa:42:85:28:95:5e:
         c6:34:cb:3a:a0:d3:a2:79:96:38:09:10:2a:98:c8:aa:4a:c0:
         f8:ee:e9:a4:5b:31:69:4a:a6:52:a6:57:cc:4f:4f:26:87:19:
         7a:52:48:e9:87:0e:dd:7a:6c:3d:22:f1:82:63:52:31:6f:ea:
         2c:37:69:29:7b:ad:a6:f2:a4:be:68:65:52:90:36:df:61:a9:
         74:87:e8:fd:4f:14:3e:aa:61:07:c6:2a:e4:1b:9f:24:c9:94:
         3d:0c:3a:f2:c2:5d:6d:02:c1:e1:08:fb:a4:da:fd:b8:77:13:
         f3:20:21:96:47:84:c6:1c:a5:99:79:db:0d:c1:74:74:d4:f2:
         32:5c:6a:2e:64:7f:5b:3b:0d:61:16:61:95:7d:fa:a9:6d:81:
         fb:83:8c:9d:dd:31:80:fe:bb:2e:95:cb:a8:a7:2d:b7:c4:db:
         c4:47:a7:8b:62:d5:00:70:01:7a:3f:d9:04:25:c7:db:09:66:
         fa:10:e6:06:aa:cc:b7:2d:ce:91:a3:27:49:d6:a1:f5:a3:df:
         62:7c:de:02
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIUClHvxWtUGZH3OCSNy9O08Sdj7M4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTIzMDkzMjM5WhcNMjYwOTIyMDkzNzM5
WjAzMTEwLwYDVQQDEyhEQzQ3RjE2ODUwQjZEREZEMDQwODkzQTgxQjVFRjY3OEE1
NjZGNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45S/av1PIiEX
P4J+Pkcj7xsjDbYNmz9ajuCEkFyyFj0FK4BkvgT2fbK6PL7f+9644Kt9novkn/DF
f7/NywEh5IakuL0X0w7+kk5ZCVvFgO3cgtUmHRQhtGqcquUrdS8Jkkr284pChl5s
5k1AQ6YYm8DeNkBC6MKhZChAq7OJPJm8IE8HOmvXG3FZLxr2toGxRWTlUnizr+Og
vUjG0BZx85Ju3E2FwKIvnva/qtcA++ZKrLbdNC8KQUNXJA89jl1paqmQpNQckyAL
ATRliVEX5M+M5HxDfNf2caUkn2iJVM8j3h55mFsByimWvl9KfJxJWmPZOv9phAW2
XoUCa/+5wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxH8WhQtt39BAiTqBte9nil
ZvUSMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG
CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAKBupAwQAKBvQAwQAKLePAwQAKLef
AwQAKLfWAwQAKN9QAwQAKN9WAwQAKN+8MA0GCSqGSIb3DQEBCwUAA4IBAQAnzFZH
/iRsZqy3jnGMc1DSTFIXEsj8ArAyTBq/uoUJKnqe0rqLN5RlIpORoJyXuKb6QoUo
lV7GNMs6oNOieZY4CRAqmMiqSsD47umkWzFpSqZSplfMT08mhxl6Ukjphw7demw9
IvGCY1Ixb+osN2kpe62m8qS+aGVSkDbfYal0h+j9TxQ+qmEHxirkG58kyZQ9DDry
wl1tAsHhCPuk2v24dxPzICGWR4TGHKWZedsNwXR01PIyXGouZH9bOw1hFmGVffqp
bYH7g4yd3TGA/rsulcuopy23xNvER6eLYtUAcAF6P9kEJcfbCWb6EOYGqsy3Lc6R
oydJ1qH1o99ifN4C
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:19:26 2025 by rpki-client