Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          oE8cgwaBwVERmaMXecl+jy7NCPBJ2oDI3gLC4lzr3Tg=
Subject key identifier:   5D:D8:E6:17:BC:43:E8:9F:54:48:24:5D:9A:AD:FA:98:C6:AA:4C:12
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       14256D497F5455C4D56A47B72E31C58B6CB73DE7
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS64267.roa
Signing time:             Fri 10 Oct 2025 12:26:29 +0000
ROA not before:           Fri 10 Oct 2025 12:21:29 +0000
ROA not after:            Fri 09 Oct 2026 12:26:29 +0000
asID:                     64267
IP address blocks:        40.27.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:25:6d:49:7f:54:55:c4:d5:6a:47:b7:2e:31:c5:8b:6c:b7:3d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 10 12:21:29 2025 GMT
            Not After : Oct  9 12:26:29 2026 GMT
        Subject: CN=5DD8E617BC43E89F5448245D9AADFA98C6AA4C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:05:ba:9a:13:58:6a:35:26:0d:59:c5:a4:
                    fa:02:35:3b:3d:b8:be:0b:3a:ad:d2:01:57:b9:56:
                    3c:78:d3:c6:81:2d:e8:fb:8d:30:4e:31:9b:c8:fd:
                    7d:eb:b0:90:5e:2e:39:2c:4a:bc:7f:93:f5:3a:08:
                    56:97:a4:b1:ab:96:f0:af:44:da:05:45:06:bc:0e:
                    d4:3b:e4:99:8c:84:68:81:f6:26:d5:40:16:79:ef:
                    11:a8:8c:24:65:eb:25:81:a3:e8:8f:81:08:5f:2b:
                    cd:e6:e5:4b:58:62:43:65:03:8a:6f:4e:15:d5:60:
                    fb:e5:6c:aa:80:5d:be:f9:ad:a2:2a:dd:d0:ed:7e:
                    69:ba:23:32:3e:15:c7:07:5c:60:f4:14:a5:eb:c7:
                    57:0c:7b:5e:b3:b3:af:2d:f8:45:15:74:c3:57:ad:
                    ff:48:6f:ce:5d:78:b5:9d:b0:9e:2a:db:63:5e:73:
                    fb:23:e4:b8:37:8b:b3:ba:72:a4:d6:d4:65:88:fa:
                    91:45:1b:4a:18:fc:93:f9:8c:49:d5:d7:b9:61:6e:
                    7d:6f:46:e7:81:ef:ee:dd:f4:32:40:fb:ff:dc:92:
                    6d:67:d2:67:e9:8b:fa:0b:1c:6e:f0:49:4e:00:54:
                    39:cb:e1:e7:37:31:85:e4:20:74:62:1b:6b:b3:59:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:E6:17:BC:43:E8:9F:54:48:24:5D:9A:AD:FA:98:C6:AA:4C:12
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5c:6d:3f:00:85:b8:1c:7c:b6:19:de:7b:37:45:88:b0:e2:
         f6:6a:2d:db:a6:ae:4f:02:a3:c0:1f:7c:a4:b3:02:ad:19:41:
         22:03:64:2e:90:cf:a3:af:2d:c6:7d:65:01:31:29:b9:7c:ff:
         79:b8:cc:7b:f5:49:8f:80:8d:4e:8e:1a:c5:b2:c3:9c:16:e7:
         85:61:b4:11:7e:22:39:27:ad:5b:9f:11:a0:ce:7a:a1:e9:ab:
         31:09:d6:47:6a:7d:88:d4:c1:6e:7f:50:6d:bc:bd:fa:33:23:
         05:6e:c3:f3:36:e6:2e:42:15:2f:89:30:eb:cf:52:09:f0:de:
         71:36:2d:50:6b:42:0b:89:8d:a9:7b:0b:97:74:fc:88:66:c4:
         1c:8f:c0:2b:3e:a0:fc:92:a2:bf:c2:40:97:f5:75:87:48:04:
         3c:b9:58:70:f6:6f:72:ae:2d:09:12:db:cf:36:f6:00:9a:15:
         f7:e4:dc:1d:3c:76:cf:8e:3b:70:40:cf:68:92:42:e9:a8:3a:
         1e:f1:71:f1:ac:05:6d:7e:4d:b7:32:f1:e6:96:8d:ae:c4:85:
         32:74:34:41:2f:40:14:8c:c5:96:72:25:91:b6:bf:ca:32:71:
         b5:e0:53:63:d2:f3:3f:02:1c:ea:8a:06:c1:3a:17:72:83:9a:
         da:aa:f5:33
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUFCVtSX9UVcTVake3LjHFi2y3PecwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDEwMTIyMTI5WhcNMjYxMDA5MTIyNjI5
WjAzMTEwLwYDVQQDEyg1REQ4RTYxN0JDNDNFODlGNTQ0ODI0NUQ5QUFERkE5OEM2
QUE0QzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq4FupoTWGo1
Jg1ZxaT6AjU7Pbi+Czqt0gFXuVY8eNPGgS3o+40wTjGbyP1967CQXi45LEq8f5P1
OghWl6Sxq5bwr0TaBUUGvA7UO+SZjIRogfYm1UAWee8RqIwkZeslgaPoj4EIXyvN
5uVLWGJDZQOKb04V1WD75WyqgF2++a2iKt3Q7X5puiMyPhXHB1xg9BSl68dXDHte
s7OvLfhFFXTDV63/SG/OXXi1nbCeKttjXnP7I+S4N4uzunKk1tRliPqRRRtKGPyT
+YxJ1de5YW59b0bnge/u3fQyQPv/3JJtZ9Jn6Yv6Cxxu8ElOAFQ5y+HnNzGF5CB0
Yhtrs1ngMQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFF3Y5he8Q+ifVEgkXZqt+pjG
qkwSMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzY0MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKBvlMA0GCSqGSIb3DQEBCwUAA4IB
AQAkXG0/AIW4HHy2Gd57N0WIsOL2ai3bpq5PAqPAH3ykswKtGUEiA2QukM+jry3G
fWUBMSm5fP95uMx79UmPgI1OjhrFssOcFueFYbQRfiI5J61bnxGgznqh6asxCdZH
an2I1MFuf1BtvL36MyMFbsPzNuYuQhUviTDrz1IJ8N5xNi1Qa0ILiY2pewuXdPyI
ZsQcj8ArPqD8kqK/wkCX9XWHSAQ8uVhw9m9yri0JEtvPNvYAmhX35NwdPHbPjjtw
QM9okkLpqDoe8XHxrAVtfk23MvHmlo2uxIUydDRBL0AUjMWWciWRtr/KMnG14FNj
0vM/AhzqigbBOhdyg5raqvUz
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:37 2025 by rpki-client