Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS271932.roa
File:                     AS271932.roa (raw, json)
Hash identifier:          mAe3SpcClxmcIDDKdNpUs7MRRYRe2vzQpsj+gkWFLDg=
Subject key identifier:   8C:27:F5:A3:BE:27:68:AF:B3:B4:24:B1:4F:71:C4:63:0C:8D:89:E5
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       48B2501FB498D60824CCC7D8903CD8363847AFBD
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS271932.roa
Signing time:             Tue 01 Jul 2025 21:29:44 +0000
ROA not before:           Tue 01 Jul 2025 21:24:44 +0000
ROA not after:            Tue 30 Jun 2026 21:29:44 +0000
asID:                     271932
IP address blocks:        140.99.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 05:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b2:50:1f:b4:98:d6:08:24:cc:c7:d8:90:3c:d8:36:38:47:af:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul  1 21:24:44 2025 GMT
            Not After : Jun 30 21:29:44 2026 GMT
        Subject: CN=8C27F5A3BE2768AFB3B424B14F71C4630C8D89E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:31:f0:ef:f5:15:86:ff:7b:7f:ba:61:a2:
                    6b:ee:48:f1:5e:90:fe:85:56:70:7d:62:93:5d:aa:
                    59:78:b2:26:5a:7e:69:e3:87:94:27:33:da:28:a4:
                    d2:5f:ac:17:50:32:b8:16:27:65:b0:46:bb:45:41:
                    38:70:f0:b9:33:c1:da:c2:38:dc:ba:c5:7e:33:b6:
                    09:a3:86:0e:34:43:2b:6b:6e:fe:77:49:bb:f4:85:
                    e5:3f:24:7b:67:88:cc:df:52:62:7b:58:81:dd:29:
                    58:83:9f:4f:e3:b5:b7:41:54:e7:84:0f:54:86:ec:
                    68:c2:56:76:67:a0:f2:4d:93:e8:2e:f7:27:3f:d7:
                    ea:30:f6:b9:ad:31:fc:7b:83:09:17:23:71:d9:9f:
                    1d:57:d7:1d:e6:aa:4f:04:17:b1:54:7f:07:98:1d:
                    54:b9:1d:6a:e7:26:d4:5d:4b:71:79:c7:41:de:16:
                    78:29:24:38:36:a3:2a:60:4c:68:67:55:d7:be:97:
                    04:49:21:20:c3:cf:3e:86:b6:51:ee:ba:c5:e8:5a:
                    51:41:a1:39:68:cc:76:49:2c:02:0b:15:ae:31:18:
                    a6:59:a5:a6:1e:e4:09:08:3e:15:16:4b:58:de:37:
                    18:9f:73:03:6c:ee:be:97:fa:dc:01:cf:ae:e2:d0:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:F5:A3:BE:27:68:AF:B3:B4:24:B1:4F:71:C4:63:0C:8D:89:E5
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS271932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:85:92:96:4a:33:ea:be:05:a1:c5:bb:f6:ab:e7:47:29:04:
         a8:e3:25:dd:71:32:ac:2c:f7:a4:62:aa:d4:64:0c:63:fc:6c:
         5c:31:3b:5b:d3:78:c3:f4:2c:97:9a:d1:d2:59:ec:10:e4:17:
         83:ee:18:32:71:f4:36:d2:14:e5:47:21:26:fc:27:2b:2e:ea:
         3e:f2:07:e6:5c:23:0e:6c:8b:dc:5e:c9:97:16:62:51:ee:f2:
         6b:e1:f0:aa:11:e0:2b:e0:e4:63:5a:b6:f7:6b:81:dc:c8:1e:
         0c:4a:2c:b3:26:ae:54:10:96:20:2b:22:d5:b1:89:7d:55:5e:
         12:f7:f6:15:a6:89:99:f8:89:a3:8f:a8:2f:a2:c1:70:0b:6b:
         97:ae:ff:1d:c7:38:03:7e:af:35:ff:89:88:97:1e:91:97:e7:
         94:9d:03:d8:35:c2:db:83:9f:70:ed:06:70:e2:b9:96:b9:f1:
         3a:66:9c:46:b3:31:99:14:06:6a:05:ab:92:8c:dc:88:62:96:
         d7:72:80:e9:21:55:66:c3:b3:d5:00:a9:d0:9f:89:75:92:14:
         b0:42:4d:1d:c3:dd:29:f8:d2:f0:7a:90:28:79:49:c2:5c:da:
         99:26:84:b3:d5:f7:cf:94:18:0d:ef:ec:b7:36:a1:26:6e:93:
         d5:2f:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:05:55 2025 by rpki-client