Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS812.roa
File:                     AS812.roa (raw, json)
Hash identifier:          tk1z2Ju2lj2skeRmBai4KR/mMXIZJ2NJKjaM/pPp/XY=
Subject key identifier:   99:6D:3D:D3:8D:9B:96:41:A1:8D:5F:96:B1:28:68:22:78:BA:A2:36
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6CA175FE782DBD773AD96BDDD102F577D312F127
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS812.roa
Signing time:             Fri 26 Sep 2025 00:07:00 +0000
ROA not before:           Fri 26 Sep 2025 00:02:00 +0000
ROA not after:            Fri 25 Sep 2026 00:07:00 +0000
asID:                     812
IP address blocks:        40.27.0.0/21 maxlen: 24
                          40.27.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a1:75:fe:78:2d:bd:77:3a:d9:6b:dd:d1:02:f5:77:d3:12:f1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 26 00:02:00 2025 GMT
            Not After : Sep 25 00:07:00 2026 GMT
        Subject: CN=996D3DD38D9B9641A18D5F96B128682278BAA236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:ba:0a:d0:6f:58:61:00:d2:6a:c8:3f:5b:
                    b1:ad:80:20:f8:a3:90:48:a9:5b:05:c1:fa:88:24:
                    67:40:8d:35:e8:2e:16:a2:a6:c3:55:c8:37:f0:8a:
                    ea:e7:09:c0:98:39:84:37:b2:7a:87:0e:28:b3:30:
                    15:70:dd:6f:03:e6:45:46:fc:7a:e1:a7:fa:3e:49:
                    49:d5:bd:18:e2:bb:2d:cb:2e:bd:7c:2d:75:dd:a4:
                    1a:50:4e:7d:a5:c2:ba:a8:40:d5:e9:09:56:9a:e5:
                    3d:13:5e:3b:3a:8b:37:66:d2:f8:bd:53:77:ae:48:
                    ce:2b:4f:78:d1:8b:d8:67:9c:d0:c7:47:95:8b:8a:
                    b2:e8:34:88:6d:75:f4:01:7d:64:af:bb:ce:59:07:
                    22:f2:03:31:94:86:b6:ec:59:8e:c1:ad:c0:c7:56:
                    2e:a9:cc:8f:e8:62:dc:81:98:61:eb:f6:db:95:27:
                    76:e5:d5:b1:9f:07:e0:eb:22:3a:76:9b:5c:b3:09:
                    47:55:fc:5d:fc:93:03:e5:6a:83:a3:30:02:e9:5f:
                    29:3e:76:3f:ac:6e:69:ce:99:e2:ed:a0:56:76:3b:
                    e2:36:00:51:0a:e8:8c:c7:06:37:e2:dc:58:90:b2:
                    26:42:a1:b9:f9:9d:f7:61:bb:e5:df:84:0e:8b:fc:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6D:3D:D3:8D:9B:96:41:A1:8D:5F:96:B1:28:68:22:78:BA:A2:36
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.0.0/21
                  40.27.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:0b:19:e0:aa:08:81:e0:04:c8:87:46:96:b7:8f:2b:10:
         74:20:49:a9:ef:e1:4c:ba:52:bb:df:74:2e:fe:77:b0:8e:f5:
         49:6b:0d:a7:0b:64:d7:85:15:f2:9f:9f:a5:c5:ef:e1:c4:d1:
         62:d7:72:4d:72:63:93:9f:84:ad:64:b5:f5:e5:a2:0f:85:02:
         20:c7:e6:f3:7c:be:4a:18:ed:63:da:f7:75:c3:a9:12:18:86:
         66:df:59:80:8b:db:5c:f8:dc:5d:6a:7d:47:d7:09:97:50:a9:
         2d:db:cf:8a:c4:1d:ab:c2:5e:e6:6f:5b:6a:d4:97:25:db:e6:
         c8:eb:2d:03:c0:0a:ec:8d:8b:8e:8b:77:31:b6:f0:df:a6:fe:
         38:6e:6a:79:9b:86:ea:e6:ee:17:01:d1:29:45:ca:f8:ad:d3:
         61:6e:a8:c6:b1:4b:9d:ee:ae:bc:fc:6b:46:b1:1c:6a:e8:39:
         5f:20:b2:f7:32:81:ec:27:49:d4:1a:f6:ce:df:ee:1d:7b:4e:
         21:37:f5:ee:ea:66:50:7c:de:91:00:c5:23:81:8b:39:0c:d7:
         b5:4b:5c:16:bd:fc:07:c7:b0:90:d6:ff:f8:e2:3a:0a:dc:35:
         d0:68:7e:d1:85:a2:c1:8a:df:d5:1b:77:37:ed:ce:5d:b1:59:
         53:02:44:c4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIUbKF1/ngtvXc62Wvd0QL1d9MS8ScwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTI2MDAwMjAwWhcNMjYwOTI1MDAwNzAw
WjAzMTEwLwYDVQQDEyg5OTZEM0REMzhEOUI5NjQxQTE4RDVGOTZCMTI4NjgyMjc4
QkFBMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzue6CtBvWGEA
0mrIP1uxrYAg+KOQSKlbBcH6iCRnQI016C4WoqbDVcg38Irq5wnAmDmEN7J6hw4o
szAVcN1vA+ZFRvx64af6PklJ1b0Y4rstyy69fC113aQaUE59pcK6qEDV6QlWmuU9
E147Oos3ZtL4vVN3rkjOK0940YvYZ5zQx0eVi4qy6DSIbXX0AX1kr7vOWQci8gMx
lIa27FmOwa3Ax1YuqcyP6GLcgZhh6/bblSd25dWxnwfg6yI6dptcswlHVfxd/JMD
5WqDozAC6V8pPnY/rG5pzpni7aBWdjviNgBRCuiMxwY34txYkLImQqG5+Z33Ybvl
34QOi/ykfwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFJltPdONm5ZBoY1flrEoaCJ4
uqI2MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzgxMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggr
BgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAygbAAMEAygbKDANBgkqhkiG9w0BAQsF
AAOCAQEAVE0LGeCqCIHgBMiHRpa3jysQdCBJqe/hTLpSu990Lv53sI71SWsNpwtk
14UV8p+fpcXv4cTRYtdyTXJjk5+ErWS19eWiD4UCIMfm83y+ShjtY9r3dcOpEhiG
Zt9ZgIvbXPjcXWp9R9cJl1CpLdvPisQdq8Je5m9batSXJdvmyOstA8AK7I2Ljot3
Mbbw36b+OG5qeZuG6ubuFwHRKUXK+K3TYW6oxrFLne6uvPxrRrEcaug5XyCy9zKB
7CdJ1Br2zt/uHXtOITf17upmUHzekQDFI4GLOQzXtUtcFr38B8ewkNb/+OI6Ctw1
0Gh+0YWiwYrf1Rt3N+3OXbFZUwJExA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:23 2025 by rpki-client