Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400956.roa
File:                     AS400956.roa (raw, json)
Hash identifier:          28U6r8nTQ/uE2LKzfLD2DgvppBYtzH1P+QOSdMKNbV4=
Subject key identifier:   12:F5:F2:3C:9D:E9:3C:F3:B8:D5:15:D9:39:63:B8:0B:03:18:0C:80
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3944D4F4ED1D8F102562F7EEDF22F82E0934FC29
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400956.roa
Signing time:             Sun 15 Jun 2025 00:34:52 +0000
ROA not before:           Sun 15 Jun 2025 00:29:52 +0000
ROA not after:            Sun 14 Jun 2026 00:34:52 +0000
asID:                     400956
IP address blocks:        140.99.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:44:d4:f4:ed:1d:8f:10:25:62:f7:ee:df:22:f8:2e:09:34:fc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun 15 00:29:52 2025 GMT
            Not After : Jun 14 00:34:52 2026 GMT
        Subject: CN=12F5F23C9DE93CF3B8D515D93963B80B03180C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:95:c7:45:7b:cb:a8:02:72:f7:e3:5b:0c:
                    29:64:f3:3e:84:ce:2f:63:8a:f7:41:70:22:04:c3:
                    49:1b:57:d9:c6:d4:04:67:01:e3:9a:11:d5:2e:46:
                    e3:e1:1c:1c:6d:37:11:3e:a8:07:7f:15:16:43:be:
                    10:a0:bb:aa:18:34:7b:d4:09:c2:88:d9:e2:5c:62:
                    94:c8:ec:15:23:ba:c4:c3:aa:be:74:6c:48:74:e9:
                    59:12:ce:83:47:39:ed:11:4b:46:b5:f4:07:7c:2e:
                    40:ba:2a:b7:6a:62:e4:e0:1e:2b:51:71:8a:9f:90:
                    6c:1b:95:79:b2:64:b5:d4:70:a3:f3:b1:14:f4:31:
                    19:b1:85:e8:7c:9a:6f:d5:19:56:2b:d6:f5:69:e8:
                    6c:39:d2:db:64:4b:3a:47:60:33:0a:07:1c:0d:1d:
                    14:0d:78:e7:a4:3b:72:52:e8:b0:a7:9b:e6:51:0a:
                    34:98:41:df:2a:60:3e:d4:5a:e0:46:66:28:74:0c:
                    42:74:ec:55:ef:65:ad:92:90:2a:d3:90:8f:4b:c7:
                    b9:03:58:97:8a:86:be:40:33:69:e1:53:f3:8e:00:
                    a6:8f:8a:5d:ae:7a:23:6b:77:be:fb:f5:a5:4d:0f:
                    f8:fb:26:5e:6d:bd:5f:fd:a5:34:6d:a1:dc:04:a8:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F5:F2:3C:9D:E9:3C:F3:B8:D5:15:D9:39:63:B8:0B:03:18:0C:80
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:90:e0:db:30:dc:fb:a1:79:67:08:ce:97:db:39:4a:a5:e9:
         73:33:6a:a5:f7:d0:0a:49:5f:ea:6e:aa:b8:d3:37:66:6c:3a:
         e8:75:c6:e4:ac:6f:46:11:8f:6c:6a:02:8e:bc:f6:10:c2:b6:
         79:2c:58:04:c4:3a:b8:d4:13:16:c5:b5:58:3b:50:65:85:c4:
         a1:6d:de:f2:6a:7f:5b:43:01:2c:07:76:8a:86:ca:10:f4:46:
         99:62:e4:4c:cf:81:de:ab:b1:9d:fe:28:b2:64:95:ba:8d:18:
         bb:3c:c8:c1:b9:c5:14:69:62:56:86:08:fc:9b:98:63:49:8c:
         b1:3d:ed:0a:1c:3c:32:db:05:ee:30:7b:65:dc:e7:1b:b7:0d:
         3d:70:01:2f:dd:af:40:2c:79:b9:43:a7:f1:eb:0c:b8:50:30:
         b2:79:e8:e5:f4:d9:36:5b:bc:96:0e:70:19:38:1d:88:ae:2e:
         50:50:68:5f:83:7c:d1:1c:1c:0e:3b:b7:38:f9:5f:93:08:d1:
         11:bd:7d:0d:82:53:e8:70:a9:e4:02:ca:9d:f1:bc:ea:e0:10:
         e4:78:ad:4f:99:4a:87:f3:80:fa:d5:6d:58:bf:57:18:4e:97:
         02:b5:dd:0a:c7:4b:06:31:c4:69:bb:8f:e3:ec:8b:0a:91:6a:
         f7:18:84:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:23 2025 by rpki-client