Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          NCcXPy1IxSAw5sjo4T1+OLkvL4J7ZB+xLuA8ZocyBiA=
Subject key identifier:   57:BA:7A:42:01:40:D7:49:16:08:62:A5:3D:96:32:41:A2:DF:1F:08
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3606561D14783390DDBEF4602A87863503D81BA8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS8075.roa
Signing time:             Tue 29 Jul 2025 22:44:12 +0000
ROA not before:           Tue 29 Jul 2025 22:39:12 +0000
ROA not after:            Tue 28 Jul 2026 22:44:12 +0000
asID:                     8075
IP address blocks:        40.183.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 22:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:06:56:1d:14:78:33:90:dd:be:f4:60:2a:87:86:35:03:d8:1b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 29 22:39:12 2025 GMT
            Not After : Jul 28 22:44:12 2026 GMT
        Subject: CN=57BA7A420140D749160862A53D963241A2DF1F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:c8:cf:9f:9e:03:e2:0b:e0:0c:02:2c:0a:
                    b0:71:d0:92:dc:24:d1:6e:23:12:d8:b6:5c:d2:1d:
                    d7:3f:f3:64:d2:a1:2f:9f:ca:18:64:46:22:d3:3f:
                    f9:3e:be:7d:70:1a:3e:57:b6:13:52:31:e0:de:e4:
                    e0:11:2f:b3:cd:07:3b:f5:32:43:be:4e:25:4b:3c:
                    0e:12:fa:ea:92:7a:d1:46:b6:c4:34:6d:fc:21:b4:
                    2b:00:56:52:27:1f:db:58:cc:49:7c:54:11:47:ee:
                    0d:dc:20:e5:de:31:43:ac:b2:bb:29:d9:e7:65:3e:
                    09:1b:a6:7b:1b:ff:39:63:8c:b3:45:91:56:de:d3:
                    bf:09:3f:47:15:06:79:1c:df:77:16:d3:b0:c9:e0:
                    81:77:11:63:47:b5:f3:58:98:77:11:13:68:e1:46:
                    5a:04:97:9f:ac:5d:68:3c:70:89:50:ee:f0:20:f4:
                    6e:7d:c4:4f:59:e4:79:06:3e:69:6c:7c:ca:57:02:
                    25:7e:b9:95:f3:1b:2c:02:1c:ca:22:e9:4f:be:fc:
                    0c:c8:b1:65:c8:ca:3b:15:c6:58:2f:2d:54:5a:f1:
                    92:a5:75:c3:c2:6d:64:3d:64:7a:69:d5:fc:72:ae:
                    e4:43:31:1a:b0:a9:4b:38:2b:00:9b:ed:cd:c4:33:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BA:7A:42:01:40:D7:49:16:08:62:A5:3D:96:32:41:A2:DF:1F:08
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:6a:05:a9:4c:1d:45:a7:e8:ab:74:38:45:01:7b:40:f8:
         0e:6a:b8:4f:cb:04:0a:ba:22:79:ec:8b:b5:a8:c6:85:e5:19:
         17:d8:af:5f:9f:1a:cf:7b:62:54:f4:af:6a:3d:f3:54:25:6b:
         69:4f:df:86:66:31:bb:81:fe:ea:9c:4b:6f:90:aa:f7:53:44:
         5f:1e:8b:f6:e0:e0:5c:59:d4:32:2b:7d:ad:3f:30:5a:3e:af:
         f6:49:b9:26:98:5e:0f:79:a4:ba:06:57:c2:99:91:36:ad:8f:
         29:7a:5c:c0:4a:81:ac:91:c3:6a:80:ed:be:16:36:9f:53:f0:
         a4:c1:35:4b:4c:60:22:e7:95:eb:9f:08:b0:77:e1:ea:5d:10:
         8a:bf:10:5e:24:98:c0:80:44:81:5f:57:42:dc:2e:2a:69:b6:
         97:65:80:4a:d2:9d:1d:46:1e:65:b8:1e:4b:35:6e:13:0f:4d:
         f7:e7:99:9f:50:d4:af:41:c7:07:23:aa:b5:33:a6:cf:d2:1c:
         0d:26:57:42:33:8e:3d:b5:a0:4a:b6:29:0e:cc:cd:d8:26:9d:
         fc:4f:f7:5c:64:08:ae:57:0f:52:ac:fb:f9:d6:7c:98:73:00:
         33:21:54:a4:95:fd:0e:a8:b6:11:f4:6e:a5:8b:dc:3d:f1:c6:
         54:cf:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:17 2025 by rpki-client