Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS24940.roa
File:                     AS24940.roa (raw, json)
Hash identifier:          1bgk/5CM8Qp8Ypy+MHqHiQKpgQ9sBnGfFRyyfmz4/Ak=
Subject key identifier:   6E:19:2A:0D:62:CB:8E:5D:A8:01:F5:DA:C7:A0:4F:0B:2F:4D:4C:2F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3E99A1DDA7840266F2EE7E942A1E03A6917F0C0E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS24940.roa
Signing time:             Thu 31 Jul 2025 12:34:33 +0000
ROA not before:           Thu 31 Jul 2025 12:29:33 +0000
ROA not after:            Thu 30 Jul 2026 12:34:33 +0000
asID:                     24940
IP address blocks:        40.27.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:99:a1:dd:a7:84:02:66:f2:ee:7e:94:2a:1e:03:a6:91:7f:0c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 31 12:29:33 2025 GMT
            Not After : Jul 30 12:34:33 2026 GMT
        Subject: CN=6E192A0D62CB8E5DA801F5DAC7A04F0B2F4D4C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:2c:a7:4d:30:f8:07:48:ac:3a:1f:8e:ae:
                    63:b8:ec:f5:2e:90:60:f5:5b:a0:c9:36:db:2c:8a:
                    e6:1f:b8:cd:e7:b3:fb:a5:28:43:3f:f0:ee:24:de:
                    80:f8:7e:b3:f2:00:fb:c4:e9:f2:c4:3a:3b:bc:c4:
                    ef:ee:a0:cd:8b:79:78:50:06:88:1a:55:59:07:a9:
                    e3:e4:6e:f8:03:2d:80:1b:e6:af:67:5d:77:4c:3f:
                    2f:b8:74:bb:84:fe:2e:28:67:34:8c:76:72:0e:0c:
                    0a:ba:9f:7d:0a:47:4c:72:d0:21:0e:e6:be:43:97:
                    13:37:e2:0c:8a:87:b5:d0:9a:c0:56:68:4d:05:39:
                    c6:1d:0d:e4:b0:69:19:92:2b:d8:06:50:29:72:3a:
                    78:37:40:26:5b:77:db:0e:87:01:44:c2:7b:e1:89:
                    9e:b3:e2:c8:4f:0f:89:6f:bd:c1:59:df:ba:9c:05:
                    0b:8a:33:f0:e8:84:65:44:fc:0c:58:ba:17:be:74:
                    ed:6c:5d:ab:9c:5e:e0:17:a9:c5:3d:91:1a:ab:cc:
                    3f:6d:e6:d0:d7:0c:5c:58:a7:bf:14:c8:b7:6c:49:
                    16:dc:31:10:60:db:22:d3:a9:8a:4e:58:e2:e5:44:
                    78:b7:fb:b5:d9:fd:b1:a5:08:b5:7b:3c:0f:7e:a3:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:2A:0D:62:CB:8E:5D:A8:01:F5:DA:C7:A0:4F:0B:2F:4D:4C:2F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS24940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:5c:44:b5:13:ee:5a:2f:81:5e:fd:51:07:fc:4a:1a:c3:
         e5:ca:cf:c4:1c:e9:dc:d8:f9:81:0f:9c:67:32:60:95:e9:63:
         a5:a1:37:12:ef:ea:3b:c9:04:10:25:e8:f1:7e:d4:8f:f0:0f:
         9a:15:a8:60:6a:16:43:dd:5c:8a:3c:bd:38:ea:c3:c4:ed:96:
         59:01:bd:79:d6:cc:d9:80:0c:2f:92:46:a0:e3:c6:92:ab:6f:
         dc:fc:8c:48:68:8f:65:a5:b2:c6:03:e8:cb:f4:0b:82:c8:2e:
         6d:3e:f0:92:b4:14:0f:79:5e:f2:e4:8e:3c:20:20:d2:0d:49:
         37:6c:c2:b0:af:8a:7c:e1:ec:9d:39:fd:46:24:35:9b:2d:71:
         1e:6e:16:ba:41:01:36:34:74:08:44:50:d7:77:e8:ba:04:6c:
         71:c4:c3:47:ee:24:a0:1e:53:17:03:6c:7e:3a:80:53:17:52:
         08:f8:59:d6:4f:21:19:20:f1:77:05:78:fe:90:85:b2:7d:e2:
         ce:0b:9b:cd:36:59:aa:c1:7a:45:b5:69:db:03:dd:4a:89:e7:
         fc:dd:7c:e9:62:59:bb:59:07:1c:9f:00:5c:90:79:36:35:89:
         3f:a9:4e:55:dd:49:29:f7:14:06:10:b9:76:db:14:e6:0a:48:
         4b:85:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:59 2025 by rpki-client