Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS400897.roa
File:                     AS400897.roa (raw, json)
Hash identifier:          UMSPO3dHV5HcHGqHDUUcKF66w+oAQqJZKxlCaTVR0JA=
Subject key identifier:   6D:12:19:D6:20:44:F3:7A:B5:C9:26:4D:39:97:EE:54:E5:32:9E:81
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       39FBE9818FA7DDFEAD183A3513F3673128263A18
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS400897.roa
Signing time:             Thu 14 Aug 2025 14:27:38 +0000
ROA not before:           Thu 14 Aug 2025 14:22:38 +0000
ROA not after:            Thu 13 Aug 2026 14:27:38 +0000
asID:                     400897
IP address blocks:        40.27.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fb:e9:81:8f:a7:dd:fe:ad:18:3a:35:13:f3:67:31:28:26:3a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 14 14:22:38 2025 GMT
            Not After : Aug 13 14:27:38 2026 GMT
        Subject: CN=6D1219D62044F37AB5C9264D3997EE54E5329E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:01:69:95:6a:87:93:7d:5e:55:20:a8:b3:
                    fd:8e:e7:9b:6f:3c:4d:0f:ef:b2:40:b2:47:1c:93:
                    49:2f:5d:7d:09:41:c4:88:f1:4e:ba:49:e0:eb:ae:
                    cc:2f:c1:6d:93:0a:7d:29:e2:8e:06:e0:9d:ab:91:
                    9d:02:76:03:0e:f9:ed:29:d0:91:53:c1:76:80:16:
                    8c:3d:96:d9:61:1b:32:64:58:d3:df:77:7b:b5:ec:
                    ff:d6:68:56:d3:b4:09:c6:d9:10:2d:ef:63:28:79:
                    77:20:48:9a:3e:72:ab:5b:0c:bc:15:c9:d9:30:22:
                    bc:b9:f4:91:57:58:41:57:47:0e:c3:39:ee:fd:df:
                    00:2a:cd:0a:0e:67:17:c6:7b:41:76:e2:57:a6:c2:
                    65:0e:7f:d6:d0:21:1b:70:7c:e1:58:d2:0d:09:98:
                    ee:ef:51:e5:56:5d:a1:b4:07:7a:00:fa:0a:6b:d1:
                    be:00:da:97:2a:53:b7:9a:50:1b:15:88:36:a8:4d:
                    f6:62:0c:f1:a5:0f:9a:af:8a:b3:bc:f3:32:46:01:
                    6b:46:73:9e:dd:8f:08:05:4f:54:67:2d:bc:22:a7:
                    09:3b:c7:06:ee:8c:f3:44:09:11:51:b3:3a:76:4e:
                    47:ff:c2:ac:9f:2d:b0:97:33:75:4e:35:01:95:43:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:19:D6:20:44:F3:7A:B5:C9:26:4D:39:97:EE:54:E5:32:9E:81
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS400897.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:35:8f:09:75:90:8b:3e:e1:23:04:85:52:1c:e8:88:aa:ed:
         75:38:04:97:fe:31:07:97:39:76:74:28:68:c8:eb:ca:4a:4d:
         e3:a6:98:73:91:ea:29:68:36:db:be:d3:51:bf:8e:0b:59:56:
         e3:b8:6a:75:e5:4e:fa:0b:f7:4f:d7:0a:09:d7:43:4c:5a:76:
         1f:ce:5d:1a:13:0e:93:73:e3:4f:78:e0:70:9f:37:2f:4b:fd:
         e9:73:d9:04:97:c1:70:08:3c:f9:52:ce:ea:ad:db:24:3c:bb:
         2b:2f:64:a0:0e:09:23:26:83:05:a1:35:10:cb:58:81:34:81:
         d1:dd:46:31:ea:62:ed:87:ac:4a:56:5b:53:2f:d2:72:42:b3:
         85:f1:57:5b:a6:0d:37:04:bf:6e:d1:a2:87:f9:b0:87:7a:0a:
         43:0e:9b:2b:0e:8b:8b:82:c2:b2:66:24:78:77:e5:b9:33:4c:
         98:64:cb:0c:86:cd:ca:21:db:b3:95:1d:89:ae:85:9a:93:f5:
         1e:47:66:94:50:54:5c:33:b1:b7:9b:e0:a5:19:64:6f:cd:06:
         1f:60:70:49:c1:36:15:bc:6a:6e:30:31:5d:c6:23:c5:22:ea:
         b3:2f:78:0e:22:ec:9e:05:25:70:6e:7d:10:f8:67:13:7a:8b:
         dd:d0:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:12 2025 by rpki-client