Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          Gy60Ahgh5SPHkz5edUYcSQsQ7OeU8qCsyj7+ApkKWDo=
Subject key identifier:   4F:E2:43:6F:0E:DE:13:1A:97:3A:4B:0B:7C:BA:F2:58:2B:FF:7A:12
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       591A32F45B79C7BE3A2901DB9027418E25AA82C2
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
Signing time:             Sun 27 Jul 2025 13:29:44 +0000
ROA not before:           Sun 27 Jul 2025 13:24:44 +0000
ROA not after:            Sun 26 Jul 2026 13:29:44 +0000
asID:                     212669
IP address blocks:        140.99.7.0/24 maxlen: 24
                          140.99.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 23:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1a:32:f4:5b:79:c7:be:3a:29:01:db:90:27:41:8e:25:aa:82:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul 27 13:24:44 2025 GMT
            Not After : Jul 26 13:29:44 2026 GMT
        Subject: CN=4FE2436F0EDE131A973A4B0B7CBAF2582BFF7A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:a1:de:59:22:8e:59:ee:63:50:a7:f8:af:
                    b0:2a:b9:8a:4b:57:aa:61:42:66:3f:97:80:0c:60:
                    4c:c3:68:02:6f:fc:c1:71:1b:24:82:d5:b7:3c:bd:
                    e2:d1:b2:e2:bc:81:f3:7e:11:eb:a0:9a:4d:8a:62:
                    96:9d:de:30:a3:6a:d6:47:60:35:88:7a:86:35:2e:
                    dc:dc:3c:d7:d0:87:a9:3e:b4:9d:da:17:8c:26:b4:
                    f3:19:82:81:19:1f:83:d6:54:5d:b1:f2:df:7f:91:
                    5d:97:f9:eb:fa:d6:d1:c3:9a:4e:02:ed:6a:e7:57:
                    50:32:ae:15:59:62:71:35:c1:70:30:f5:2b:ca:b5:
                    03:05:2f:4c:9d:de:60:01:38:ed:bc:da:41:bf:98:
                    78:59:15:43:ed:4c:be:fb:f2:4b:17:b0:a5:e7:5c:
                    46:6f:b4:d2:df:1f:e3:5a:61:a8:8c:14:aa:8a:38:
                    ad:89:67:35:82:12:36:f5:7d:64:89:3a:3d:ef:37:
                    3c:da:4f:49:98:e4:1e:4e:de:a3:84:d7:b7:0f:fa:
                    72:ba:4c:fc:f2:7a:42:21:76:3e:87:d9:b7:24:d4:
                    b4:ab:6d:83:5a:39:50:3d:11:c5:97:2c:2a:31:52:
                    65:90:8c:69:9b:40:99:55:21:29:40:48:5c:eb:10:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E2:43:6F:0E:DE:13:1A:97:3A:4B:0B:7C:BA:F2:58:2B:FF:7A:12
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.7.0/24
                  140.99.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:09:e2:03:09:22:ad:25:60:a6:44:7f:7c:10:62:19:b4:ee:
         d1:11:06:bf:7c:8c:e3:5e:24:37:98:ba:96:ad:a8:be:4c:d0:
         92:bd:29:5f:9f:e6:e0:ad:93:4c:8f:ec:02:34:9c:aa:f5:f9:
         cd:44:fb:37:78:d1:b0:f6:5b:31:27:8d:5d:aa:ae:d5:b5:bf:
         3c:54:27:ce:b5:54:08:90:8c:3b:36:49:a4:72:66:5e:8e:d0:
         42:62:9f:68:ca:39:45:f6:14:4e:29:e8:e1:6f:41:24:c4:bb:
         97:14:b6:c0:62:28:3a:c8:63:15:45:51:8e:65:da:ea:c1:e5:
         f0:4c:2c:e8:f1:d4:29:f2:a8:76:8b:2e:56:e9:21:47:09:ee:
         09:bb:63:97:67:c7:59:1d:f5:05:f8:9a:02:7a:9b:ba:f4:e9:
         ae:3f:cf:fd:06:81:c5:e7:d8:cb:5d:2b:15:db:e4:7f:42:bc:
         02:af:33:27:2b:91:ff:00:dd:6f:94:0c:ad:d3:e5:5d:51:fd:
         9f:93:65:7e:16:40:b9:cf:cb:c3:c6:00:98:09:91:00:9e:e5:
         d9:47:0c:08:ca:61:bf:40:dc:a7:6a:49:ec:fc:57:4c:a4:f2:
         42:1d:f6:60:0e:3f:77:8a:02:10:aa:93:a0:25:ce:94:cd:af:
         be:db:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:34:49 2025 by rpki-client