Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa
File:                     AS152868.roa (raw, json)
Hash identifier:          9tYOLsxv2Z4B+JUiiID4BfiqedxJLbtpI5AS71+N9mg=
Subject key identifier:   F7:70:4D:4F:CD:6F:F0:C5:FC:C2:CE:F2:D0:D0:A1:06:A6:EE:AB:74
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       02F5C5FD8E9AF3CD403F71FC5BA0A11F7DAC17B6
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa
Signing time:             Fri 25 Jul 2025 04:37:03 +0000
ROA not before:           Fri 25 Jul 2025 04:32:03 +0000
ROA not after:            Fri 24 Jul 2026 04:37:03 +0000
asID:                     152868
IP address blocks:        40.27.21.0/24 maxlen: 24
                          40.27.137.0/24 maxlen: 24
                          40.183.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 03:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f5:c5:fd:8e:9a:f3:cd:40:3f:71:fc:5b:a0:a1:1f:7d:ac:17:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 25 04:32:03 2025 GMT
            Not After : Jul 24 04:37:03 2026 GMT
        Subject: CN=F7704D4FCD6FF0C5FCC2CEF2D0D0A106A6EEAB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:ff:be:a7:80:34:a1:e5:1a:60:2c:8f:2a:
                    2c:67:44:c7:06:01:94:82:dc:2c:eb:08:53:4a:b2:
                    7a:65:6d:f5:90:d5:70:53:aa:41:f9:3c:8f:de:33:
                    62:30:20:5b:aa:65:52:f8:12:76:43:3d:82:7b:28:
                    7b:47:6f:f2:cd:4b:df:dc:d4:ea:24:f6:8b:38:6a:
                    b3:36:96:1d:29:d7:76:6c:2f:a4:05:20:9e:45:55:
                    59:01:4f:10:43:f1:03:96:df:69:8f:d2:d9:27:13:
                    1a:de:22:72:fb:af:be:8e:27:a1:ad:53:5b:5e:67:
                    ce:80:8d:b7:6f:96:73:9c:93:48:14:41:ca:29:8d:
                    7b:27:6d:6e:2b:57:bb:22:4d:aa:96:d3:b7:4d:d7:
                    0c:c4:78:70:4b:92:e4:2c:5c:a5:95:b6:c8:a3:79:
                    de:03:cc:9b:65:c4:68:6c:0f:e8:79:95:e9:cb:30:
                    5a:63:8f:70:ce:7b:c9:0a:2f:b8:06:e2:ec:87:b8:
                    40:f1:0f:f6:19:14:64:57:27:26:5c:81:fb:18:61:
                    a6:8d:42:3c:84:d8:76:7b:d8:49:46:fa:33:1e:6a:
                    ff:40:f0:0b:9d:53:90:82:6a:99:f8:1b:f9:64:c6:
                    8e:e6:96:30:66:c6:24:24:7a:8b:ed:f3:1e:a8:df:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:4D:4F:CD:6F:F0:C5:FC:C2:CE:F2:D0:D0:A1:06:A6:EE:AB:74
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.21.0/24
                  40.27.137.0/24
                  40.183.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:d4:e6:93:77:c8:4b:71:ed:45:79:df:29:f5:c7:27:1e:
         16:72:2a:cb:57:d9:bc:54:c5:a3:71:46:92:8a:8f:0e:8a:5e:
         39:7c:4f:f9:75:04:ee:33:09:2e:d1:2c:64:2c:ec:36:3d:57:
         36:2b:52:07:73:f6:0d:67:9c:05:4b:d4:b6:71:3b:c4:eb:a7:
         02:0e:f2:7d:b8:5a:d4:6a:da:2a:79:09:dc:1a:20:75:d2:0f:
         3e:75:f1:c4:ec:34:8b:bb:1b:9e:f2:79:2d:6e:87:96:d3:3c:
         46:dc:ce:a9:4d:f1:a9:fa:f9:d0:41:7d:69:2e:26:76:db:89:
         f0:ff:b2:61:29:31:d6:48:36:9f:37:29:c4:95:42:5e:3a:1e:
         1e:39:bf:1e:f0:ec:81:8a:d1:41:85:de:0b:de:6f:2f:a4:cb:
         e0:66:02:6a:7a:d3:5c:14:03:8d:21:91:03:4d:31:3b:91:cf:
         72:b3:dc:32:97:f2:4c:7f:a0:02:b1:31:19:53:d5:d4:05:ff:
         d3:52:53:b5:e9:07:12:3e:40:2d:3d:73:7e:05:49:a8:b4:7e:
         86:14:9f:23:db:e9:7c:43:fb:3a:ae:e7:53:cd:24:09:dc:14:
         94:a6:2d:7a:05:e3:23:32:ce:fb:6b:39:c3:35:3f:a2:89:9b:
         fa:37:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:05:53 2025 by rpki-client