Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
File:                     AS400810.roa (raw, json)
Hash identifier:          SW1ZFkqQTCISvvijDiVgmcZvbEVS7xRKxbmGc5gj1xM=
Subject key identifier:   D8:FC:4F:86:87:3A:CF:73:79:A8:6E:55:18:AB:13:4A:EC:D1:F4:F4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5AD8098BFDE76A764FB42DCA199DA7FB7304605C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
Signing time:             Mon 14 Apr 2025 15:07:09 +0000
ROA not before:           Mon 14 Apr 2025 15:02:09 +0000
ROA not after:            Mon 13 Apr 2026 15:07:09 +0000
asID:                     400810
IP address blocks:        98.142.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 20:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d8:09:8b:fd:e7:6a:76:4f:b4:2d:ca:19:9d:a7:fb:73:04:60:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 14 15:02:09 2025 GMT
            Not After : Apr 13 15:07:09 2026 GMT
        Subject: CN=D8FC4F86873ACF7379A86E5518AB134AECD1F4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:7b:e2:ab:5d:03:e4:e3:5f:09:58:01:80:
                    eb:ed:80:cd:ec:ab:f6:2f:53:71:e3:c8:2c:56:82:
                    71:ae:19:74:f9:2d:27:d9:b1:9f:41:bc:d6:c5:ae:
                    fd:6b:4e:4d:c4:19:43:e4:8f:8d:0b:b4:c0:cc:d9:
                    59:fc:3c:0a:75:f7:0b:8a:16:3e:20:bf:fd:41:44:
                    a1:2a:ea:c2:04:fe:c7:fa:5d:61:bc:4f:1c:84:c3:
                    35:18:44:d7:19:e7:34:df:1c:22:74:e8:11:ce:49:
                    11:12:d0:cb:23:e6:4e:5f:35:78:53:91:29:e4:9f:
                    01:98:aa:ce:eb:2a:2a:78:86:22:72:cb:f3:0f:e1:
                    bd:ce:4e:65:b1:07:ae:b0:13:3c:6c:f1:38:b0:c3:
                    c5:73:6f:fa:f2:09:34:31:22:11:a7:da:75:53:5c:
                    33:1c:cf:b3:43:e7:fe:32:b7:2b:9b:79:e8:63:53:
                    8f:1b:4f:05:0d:95:3a:e4:83:60:44:37:0b:55:fd:
                    04:c2:f9:98:96:e6:88:e3:50:85:d7:9c:be:71:fd:
                    e0:c1:11:9d:d9:69:83:fc:9b:3c:4f:9e:6d:55:b2:
                    8a:4e:9d:ba:a1:3a:f6:53:36:aa:f1:a5:b3:05:a0:
                    6a:30:a2:15:a2:f0:0e:7f:9b:83:f0:63:ea:cd:61:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:4F:86:87:3A:CF:73:79:A8:6E:55:18:AB:13:4A:EC:D1:F4:F4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:22:1c:a2:76:4d:7a:2a:10:ed:c0:33:a6:d7:e9:45:39:83:
         7d:54:72:4e:22:14:b4:50:ab:01:6a:54:5f:3a:35:0c:66:ba:
         2c:19:23:fa:ec:d6:8e:20:e0:ec:54:42:6c:4d:07:12:7b:02:
         6d:22:6b:b0:4c:75:9d:d9:27:3e:9e:61:1f:96:f3:b2:15:51:
         62:8a:d4:d3:37:d8:79:da:3b:82:02:f9:06:4f:c1:c4:72:bf:
         33:16:1a:8e:ad:e5:02:2a:17:a8:71:b9:33:f1:34:64:12:13:
         b5:3f:12:bb:76:13:0d:f3:30:21:79:48:42:2f:16:bd:cf:89:
         2c:69:e0:a0:2c:9d:ac:48:14:75:d5:73:79:46:02:82:bf:28:
         d9:88:78:21:15:9f:53:9d:a7:7c:43:04:6a:f6:a3:fb:c6:4b:
         93:45:64:1e:6b:89:d1:cf:f0:df:32:2b:25:39:7b:49:a3:12:
         88:77:2b:9a:e7:50:bc:f6:e1:19:78:37:ae:f4:b2:22:81:c2:
         4e:9b:45:25:65:fb:33:c1:1a:b7:a4:db:06:65:1e:c7:6e:37:
         27:c0:33:3f:20:ab:62:15:08:1c:80:70:73:78:84:f4:0a:7a:
         6e:ae:eb:51:9b:6c:5f:72:08:53:83:6c:5d:c6:4d:7b:8e:aa:
         c2:03:95:de
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWtgJi/3nanZPtC3KGZ2n+3MEYFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDE0MTUwMjA5WhcNMjYwNDEzMTUwNzA5
WjAzMTEwLwYDVQQDEyhEOEZDNEY4Njg3M0FDRjczNzlBODZFNTUxOEFCMTM0QUVD
RDFGNEY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkB74qtdA+Tj
XwlYAYDr7YDN7Kv2L1Nx48gsVoJxrhl0+S0n2bGfQbzWxa79a05NxBlD5I+NC7TA
zNlZ/DwKdfcLihY+IL/9QUShKurCBP7H+l1hvE8chMM1GETXGec03xwidOgRzkkR
EtDLI+ZOXzV4U5Ep5J8BmKrO6yoqeIYicsvzD+G9zk5lsQeusBM8bPE4sMPFc2/6
8gk0MSIRp9p1U1wzHM+zQ+f+Mrcrm3noY1OPG08FDZU65INgRDcLVf0EwvmYluaI
41CF15y+cf3gwRGd2WmD/Js8T55tVbKKTp26oTr2Uzaq8aWzBaBqMKIVovAOf5uD
8GPqzWELkwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNj8T4aHOs9zeahuVRirE0rs
0fT0MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQwMDgxMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGKO9jANBgkqhkiG9w0BAQsFAAOC
AQEAByIconZNeioQ7cAzptfpRTmDfVRyTiIUtFCrAWpUXzo1DGa6LBkj+uzWjiDg
7FRCbE0HEnsCbSJrsEx1ndknPp5hH5bzshVRYorU0zfYedo7ggL5Bk/BxHK/MxYa
jq3lAioXqHG5M/E0ZBITtT8Su3YTDfMwIXlIQi8Wvc+JLGngoCydrEgUddVzeUYC
gr8o2Yh4IRWfU52nfEMEavaj+8ZLk0VkHmuJ0c/w3zIrJTl7SaMSiHcrmudQvPbh
GXg3rvSyIoHCTptFJWX7M8Eat6TbBmUex243J8AzPyCrYhUIHIBwc3iE9Ap6bq7r
UZtsX3IIU4NsXcZNe46qwgOV3g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:54:32 2025 by rpki-client