Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21840.roa
File:                     AS21840.roa (raw, json)
Hash identifier:          EHzMZ34IYbKXdeBVRAq4OSnLTgHg5odyFf1a9gafdOU=
Subject key identifier:   91:8D:AF:5C:02:A6:83:E6:14:14:84:33:72:CC:DC:BB:7A:AC:84:DA
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       014630E060B238ACA0AFAF74A0F2B9FA3E564BC4
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21840.roa
Signing time:             Fri 17 Oct 2025 19:30:38 +0000
ROA not before:           Fri 17 Oct 2025 19:25:38 +0000
ROA not after:            Fri 16 Oct 2026 19:30:38 +0000
asID:                     21840
IP address blocks:        50.31.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:46:30:e0:60:b2:38:ac:a0:af:af:74:a0:f2:b9:fa:3e:56:4b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 17 19:25:38 2025 GMT
            Not After : Oct 16 19:30:38 2026 GMT
        Subject: CN=918DAF5C02A683E61414843372CCDCBB7AAC84DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:ba:d2:f4:17:4e:f9:70:90:10:bb:f3:2e:
                    7d:37:92:b4:40:37:ca:b7:05:9f:8e:a5:70:1a:94:
                    74:6e:c9:d9:d6:a3:9c:64:4d:88:96:d7:25:1b:48:
                    f3:30:b8:6b:47:12:97:81:32:f9:4b:21:35:67:bb:
                    17:68:11:91:9a:59:d2:54:79:6f:9a:d2:d9:dd:33:
                    7e:5d:40:31:24:da:a3:25:a2:84:38:1f:1b:6e:4b:
                    1f:ad:64:06:7f:82:7e:83:9c:34:e5:8f:9a:6f:c5:
                    d9:bc:4b:66:1c:cc:a0:2e:37:97:82:99:2f:ed:18:
                    f9:67:cb:a9:e4:b4:80:4c:cc:eb:4d:48:33:6f:f0:
                    d0:89:49:4f:bb:ee:5f:1c:70:ff:ee:05:de:5b:f0:
                    0a:ca:a0:7f:d9:27:0a:84:62:88:a7:00:9a:eb:60:
                    f0:8b:5c:f8:08:91:41:cf:66:72:e6:cd:39:86:bb:
                    62:2d:55:8b:e4:8b:a1:a7:e3:b2:79:fe:f9:a6:e3:
                    fc:7e:20:2c:c8:16:b5:f8:75:54:7c:fa:88:82:fd:
                    cb:84:ef:44:6e:17:d7:78:8c:fc:a2:7d:4f:65:5c:
                    92:e8:9a:40:29:59:05:ca:8f:e2:b3:5a:a3:94:f3:
                    44:0c:e5:2e:83:20:38:c8:de:68:f8:f8:e2:86:28:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:AF:5C:02:A6:83:E6:14:14:84:33:72:CC:DC:BB:7A:AC:84:DA
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21840.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:da:9c:c9:0e:bf:2c:cf:ff:43:fb:d5:14:52:dd:96:59:
         cc:41:55:29:a0:76:7e:90:b2:41:e6:e8:03:d5:6e:bf:ea:50:
         e0:1d:8c:db:c8:2e:2a:7d:bb:d9:30:8d:c4:ac:87:de:2f:fa:
         1d:96:e9:94:c3:dc:e0:ea:d4:b1:82:d2:71:85:59:9f:84:ad:
         fa:49:b4:3b:84:99:8b:23:46:cb:6e:58:10:60:9b:0e:2d:a1:
         68:64:a4:00:d2:ed:8a:a7:d3:0c:03:b6:e3:96:f7:3f:da:53:
         0f:81:f5:b6:1c:57:90:54:7b:c0:bd:f0:93:ee:13:b6:fc:0e:
         2c:19:37:0e:6a:32:11:c4:1a:98:80:4a:96:6d:84:17:3f:b3:
         87:18:9b:eb:b0:92:f1:d0:ce:61:9d:4b:e9:39:e8:d6:18:b2:
         1f:01:7d:de:e3:1f:a5:12:00:b3:80:43:86:4b:98:7f:e9:f8:
         fe:98:05:ca:03:a3:3d:1a:e2:e1:f0:15:ee:05:54:bc:cb:03:
         75:a9:6a:b0:67:f3:e0:9a:8b:4d:12:9f:d0:95:3c:a3:6f:95:
         67:09:c8:5a:db:0a:04:e1:d3:d9:cb:ff:30:92:d9:1e:6f:cf:
         ad:93:92:20:30:03:9f:77:b8:cc:2e:8c:8d:d4:6e:af:88:90:
         ea:3a:4f:a7
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUAUYw4GCyOKygr690oPK5+j5WS8QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUxMDE3MTkyNTM4WhcNMjYxMDE2MTkzMDM4
WjAzMTEwLwYDVQQDEyg5MThEQUY1QzAyQTY4M0U2MTQxNDg0MzM3MkNDRENCQjdB
QUM4NERBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqW60vQXTvlw
kBC78y59N5K0QDfKtwWfjqVwGpR0bsnZ1qOcZE2IltclG0jzMLhrRxKXgTL5SyE1
Z7sXaBGRmlnSVHlvmtLZ3TN+XUAxJNqjJaKEOB8bbksfrWQGf4J+g5w05Y+ab8XZ
vEtmHMygLjeXgpkv7Rj5Z8up5LSATMzrTUgzb/DQiUlPu+5fHHD/7gXeW/AKyqB/
2ScKhGKIpwCa62Dwi1z4CJFBz2Zy5s05hrtiLVWL5Iuhp+Oyef75puP8fiAsyBa1
+HVUfPqIgv3LhO9EbhfXeIz8on1PZVyS6JpAKVkFyo/is1qjlPNEDOUugyA4yN5o
+PjihijkhQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJGNr1wCpoPmFBSEM3LM3Lt6
rITaMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzIxODQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMh+7MA0GCSqGSIb3DQEBCwUAA4IB
AQBjtdqcyQ6/LM//Q/vVFFLdllnMQVUpoHZ+kLJB5ugD1W6/6lDgHYzbyC4qfbvZ
MI3ErIfeL/odlumUw9zg6tSxgtJxhVmfhK36SbQ7hJmLI0bLblgQYJsOLaFoZKQA
0u2Kp9MMA7bjlvc/2lMPgfW2HFeQVHvAvfCT7hO2/A4sGTcOajIRxBqYgEqWbYQX
P7OHGJvrsJLx0M5hnUvpOejWGLIfAX3e4x+lEgCzgEOGS5h/6fj+mAXKA6M9GuLh
8BXuBVS8ywN1qWqwZ/PgmotNEp/QlTyjb5VnCcha2woE4dPZy/8wktkeb8+tk5Ig
MAOfd7jMLoyN1G6viJDqOk+n
-----END CERTIFICATE-----
Generated at Sun Oct 19 05:04:33 2025 by rpki-client