Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          tKWfaiDR0IkOfkfqrbX/GLY3oHE3pZ77udJjY0Jv2T8=
Subject key identifier:   6C:ED:DA:5D:8F:60:25:9A:AF:29:B1:4C:71:8C:5E:E2:F0:BE:AA:1F
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7BE84BDFACDE10A8BB5567D892D4F2BC4B4EEC11
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS40676.roa
Signing time:             Wed 24 Sep 2025 10:55:34 +0000
ROA not before:           Wed 24 Sep 2025 10:50:34 +0000
ROA not after:            Wed 23 Sep 2026 10:55:34 +0000
asID:                     40676
IP address blocks:        66.225.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e8:4b:df:ac:de:10:a8:bb:55:67:d8:92:d4:f2:bc:4b:4e:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 24 10:50:34 2025 GMT
            Not After : Sep 23 10:55:34 2026 GMT
        Subject: CN=6CEDDA5D8F60259AAF29B14C718C5EE2F0BEAA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:38:74:2a:11:f3:87:b5:0a:ed:e7:84:1e:
                    22:8e:e7:7e:bc:11:ce:07:2b:ee:10:e6:83:f6:29:
                    4d:c7:08:94:2f:33:13:8d:48:0a:0d:47:54:ed:58:
                    7f:2d:05:3c:8d:41:13:93:c3:39:63:c5:92:ac:62:
                    ec:4a:1b:2c:cd:a5:ae:2e:cc:73:63:9a:ef:e2:e1:
                    b0:11:8b:db:ac:3e:0b:98:0b:ca:55:f9:5c:47:9f:
                    54:a2:d2:65:18:fa:14:dc:05:e3:30:e2:c6:cb:31:
                    9d:bb:dd:44:3d:fc:a6:79:5c:8c:df:1b:3a:6c:f5:
                    b0:cd:d3:f9:a4:7a:b9:f9:db:a9:f4:00:e2:f1:ec:
                    fb:52:99:8e:fd:86:4c:28:a8:c0:9c:77:1b:b5:4c:
                    e8:9e:5f:cc:85:88:bb:5b:22:b3:27:54:99:29:cf:
                    3a:47:58:ee:18:72:81:c6:56:a9:33:e6:40:73:05:
                    8c:ca:6d:b6:41:b5:77:75:a3:6e:ab:70:e8:a5:23:
                    b9:74:32:eb:a9:ea:3c:ae:52:d9:9b:ee:fe:23:14:
                    7e:95:3c:1a:d8:ac:67:52:46:a4:d2:ba:51:a4:f6:
                    ab:61:61:82:d4:ec:38:0e:a1:72:a9:c8:d0:45:02:
                    00:a4:f9:df:e8:8c:2b:aa:f5:14:05:47:92:ad:ce:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:ED:DA:5D:8F:60:25:9A:AF:29:B1:4C:71:8C:5E:E2:F0:BE:AA:1F
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:d9:2a:5d:67:f5:94:25:7c:e7:b0:48:47:72:37:e0:b0:
         f7:47:2f:d1:23:29:bb:b2:b9:27:7e:ee:58:60:0c:12:60:2d:
         f1:7e:16:ac:14:5d:88:58:47:8f:fb:de:f6:b8:8d:cf:f0:e8:
         b3:d4:81:10:26:63:77:04:f6:27:8a:1b:c7:ed:14:f3:7b:c2:
         76:ca:9a:f8:e9:53:58:9d:dd:dc:ff:c4:74:6f:17:b1:be:e8:
         0f:f1:6e:a2:ff:da:a3:ab:34:4d:54:66:ae:bd:3e:79:3c:e1:
         70:95:6b:a9:bc:d7:d3:e4:5a:2e:bc:b4:94:70:94:9c:1e:56:
         a5:9e:66:70:bf:0f:a0:d7:e6:ce:1e:9a:19:47:0c:a0:3c:31:
         5f:67:8e:46:85:ca:16:1d:f6:31:22:1c:98:d5:d5:b3:e8:73:
         82:72:44:91:c1:8b:d8:94:02:4b:fa:21:b2:62:88:8d:3c:d4:
         83:57:ec:d2:b8:94:f8:ea:a9:09:98:b4:66:79:a2:f2:71:6e:
         03:e9:93:42:27:10:25:93:ff:44:19:30:b2:83:f5:20:d1:1d:
         69:86:b3:55:ab:77:73:9b:a9:3d:46:a5:e9:e2:39:02:00:00:
         97:96:cd:fe:72:eb:ba:7b:1a:dd:71:15:e7:34:49:d9:53:ab:
         e5:b9:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:26 2025 by rpki-client