Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          ZDCVYU5jYFmlG7yQOFI6vWkb+ON43S+frh+/5qkgCgE=
Subject key identifier:   AE:86:BA:0D:AE:B7:E8:29:49:4B:47:A3:DD:A8:AD:6C:18:40:EE:45
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       7F0A0C5C69B9AEA9E73B6A87D72C35B917D9FD55
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS54252.roa
Signing time:             Fri 10 Oct 2025 12:26:29 +0000
ROA not before:           Fri 10 Oct 2025 12:21:29 +0000
ROA not after:            Fri 09 Oct 2026 12:26:29 +0000
asID:                     54252
IP address blocks:        40.27.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0a:0c:5c:69:b9:ae:a9:e7:3b:6a:87:d7:2c:35:b9:17:d9:fd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 10 12:21:29 2025 GMT
            Not After : Oct  9 12:26:29 2026 GMT
        Subject: CN=AE86BA0DAEB7E829494B47A3DDA8AD6C1840EE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:4d:8f:f9:66:1c:37:a9:21:ee:de:57:01:
                    dc:cf:3a:b8:19:af:b8:4e:0d:32:b2:4a:ea:23:af:
                    1d:0b:c6:3c:94:4b:3b:fe:10:41:51:e4:69:75:86:
                    73:36:64:3e:bd:be:e0:8d:45:6e:7f:3a:78:3d:9b:
                    38:95:78:f3:1b:7d:ca:80:75:0b:13:3c:71:cd:81:
                    28:35:4a:db:9f:8b:14:fe:0d:9d:86:c2:f8:9d:cd:
                    93:44:d7:3e:7a:82:04:74:59:85:a5:1b:ab:c4:e3:
                    0d:70:b9:07:62:ea:aa:dc:ed:6f:c8:ce:b1:58:e3:
                    b6:0c:8f:b1:3c:bd:92:e9:b5:90:01:09:93:ef:29:
                    a2:f0:5f:a9:1e:a9:e4:80:80:2c:32:37:be:a7:84:
                    01:60:51:f6:69:0d:00:18:e5:23:42:70:38:1a:f4:
                    f7:f5:04:44:ba:34:c3:d4:7b:8a:f8:21:e8:48:bc:
                    c0:09:b9:c4:80:70:de:1f:25:87:16:1a:3a:6e:56:
                    a7:45:bb:d1:68:04:30:57:e3:af:aa:71:0a:c2:16:
                    1a:52:28:55:af:93:77:f1:97:cf:6c:95:a6:40:37:
                    73:2b:b0:be:7f:c4:50:66:61:69:44:52:68:28:21:
                    e5:56:5f:a5:8c:31:9f:4f:c5:b6:84:be:8b:86:38:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:86:BA:0D:AE:B7:E8:29:49:4B:47:A3:DD:A8:AD:6C:18:40:EE:45
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:0e:a0:bc:00:a0:5b:d3:44:e4:de:48:d3:34:35:74:46:95:
         fe:a2:3e:ee:bb:f5:6f:a4:93:df:c7:61:bf:82:6f:be:08:88:
         e1:96:3a:d7:88:04:7f:40:1f:67:52:d5:11:22:a1:34:da:8f:
         aa:d1:ff:c8:8e:d1:ed:59:16:8a:bb:4e:98:ef:6c:09:ab:80:
         9c:3f:f0:19:23:84:e0:9f:cf:0e:e2:7b:ff:ef:50:c9:ba:42:
         f0:2d:61:10:12:94:db:7d:0c:5c:28:52:13:29:13:c8:e9:ba:
         de:80:1a:8c:ed:76:25:dd:c8:e4:29:99:db:92:0c:da:4c:b1:
         21:fe:c6:07:f1:ba:56:bc:95:f7:3a:3a:7b:9f:bb:b9:a9:73:
         ff:32:f4:08:ee:3c:49:44:f6:3b:c6:e0:9d:98:42:ab:57:e4:
         b4:c9:9c:90:28:57:57:5e:8a:3c:02:17:ff:3a:68:61:16:3c:
         a1:93:98:0e:93:99:93:1b:99:dd:78:5a:8d:d2:bc:4a:f1:2f:
         80:c8:82:9b:a1:10:a5:2c:bf:01:7f:72:d1:94:2d:02:5d:97:
         c3:dc:14:6c:4a:0f:89:23:4d:ad:51:47:fe:11:f8:dd:97:6f:
         78:3a:50:fb:4b:b5:5f:1c:8e:9b:67:59:e5:3c:34:10:60:a3:
         31:91:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:49 2025 by rpki-client