Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
File:                     AS397630.roa (raw, json)
Hash identifier:          GG5VGQ2RDnWnhsW/RT0/wqrneEVcyEqzXIlYfMI7dyw=
Subject key identifier:   DD:30:4E:E9:35:AB:82:EC:07:38:A7:89:AE:E7:9F:65:A0:CB:9C:57
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3199B5F8243A631D29D80D63D866A0692494D7E5
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
Signing time:             Fri 18 Sep 2026 00:36:20 +0000
ROA not before:           Fri 18 Sep 2026 00:31:20 +0000
ROA not after:            Fri 17 Sep 2027 00:36:20 +0000
asID:                     397630
IP address blocks:        140.99.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 06:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:99:b5:f8:24:3a:63:1d:29:d8:0d:63:d8:66:a0:69:24:94:d7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 18 00:31:20 2026 GMT
            Not After : Sep 17 00:36:20 2027 GMT
        Subject: CN=DD304EE935AB82EC0738A789AEE79F65A0CB9C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:b2:8a:46:83:f2:18:82:ad:c5:c8:3c:c3:
                    e8:d5:e9:7f:5d:36:d6:66:85:2c:aa:ad:e9:ea:17:
                    f3:5e:fa:db:c3:80:ac:46:fe:45:7f:91:72:98:53:
                    88:1f:12:10:da:99:ab:66:28:e4:c3:6e:4d:29:fa:
                    49:04:aa:e1:ac:83:5d:ab:28:9a:1a:a9:7c:fe:65:
                    07:7a:77:ef:6b:d0:3b:55:c7:c9:7d:5d:1f:8d:8e:
                    aa:57:4c:f6:a4:0b:0e:e3:08:79:47:62:d9:d8:31:
                    b1:53:35:2e:7d:4c:ac:27:0e:19:d2:62:50:c3:22:
                    5a:ca:93:44:0c:dc:15:1c:b7:d2:a8:3b:48:89:34:
                    36:a6:a2:91:c5:ab:e6:5e:ae:10:88:2d:06:a5:39:
                    b4:41:b2:de:75:97:28:79:8b:af:6d:4d:74:a1:b2:
                    fb:44:cc:90:03:3f:13:04:d8:35:28:f2:67:b4:71:
                    79:71:f1:80:d4:bb:ba:dc:87:23:95:f0:22:30:f4:
                    7a:a4:9d:a8:f2:78:97:80:97:9f:72:d2:60:77:67:
                    db:6c:a1:73:b7:ed:b6:34:fc:a5:dd:0d:18:da:d2:
                    ac:e3:c8:f6:c1:2a:74:70:d4:f5:7a:ee:36:56:03:
                    db:d5:f8:5a:82:bf:4c:de:a0:6d:cd:3e:3d:f5:be:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:30:4E:E9:35:AB:82:EC:07:38:A7:89:AE:E7:9F:65:A0:CB:9C:57
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:c1:9f:f7:99:47:71:4a:7f:26:c0:d2:a6:40:f1:6c:02:
         ae:0a:f5:8a:c1:77:3b:55:8f:0e:23:2c:c2:50:ed:10:78:b3:
         07:fe:e9:ef:39:0c:09:81:32:98:cb:a0:30:bb:84:43:60:80:
         ac:a1:c4:83:e1:63:20:9a:83:ef:85:d4:06:bc:76:b7:f6:57:
         08:14:6d:6c:00:42:5a:9c:2d:bf:90:e6:d0:00:53:b2:c6:71:
         e0:f1:a8:1d:a1:ca:28:09:df:a2:12:6c:03:f9:65:47:df:0d:
         70:68:93:c9:f1:86:f4:58:0b:e2:1f:9c:86:ef:18:80:f9:e5:
         5f:ef:2d:cf:47:49:71:f5:2b:48:f2:85:53:3b:8a:53:3c:e7:
         e1:85:c3:6e:91:03:32:48:c9:c8:f3:b6:e6:5a:8c:aa:5b:56:
         f1:e9:f8:73:9e:28:76:5d:8f:8e:7f:8b:9d:b2:c7:ed:b4:6e:
         af:d1:57:db:67:15:02:8e:fe:3e:a3:34:1f:b3:21:9b:0d:c2:
         b7:f2:0b:13:ef:44:c4:07:38:e2:f6:a8:a0:21:55:88:58:bd:
         2c:87:b7:32:33:35:a9:e1:cc:aa:ae:f7:6b:6c:29:57:dc:c3:
         30:aa:fa:60:d4:21:10:0e:c3:97:07:37:7f:d9:0e:ca:69:61:
         99:74:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:38 2026 by rpki-client