Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS13213.roa
File:                     AS13213.roa (raw, json)
Hash identifier:          /wAjtUTAL++KHl8NUnAJRsFc5cQxHW9nZq1he76w4Y4=
Subject key identifier:   E9:94:72:78:3A:95:68:AC:90:1C:E3:6A:A9:85:FE:37:DD:4F:68:A1
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7BE3A3117BEDE27BB3940D109958F5670E2EDD7E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS13213.roa
Signing time:             Tue 13 May 2025 10:28:33 +0000
ROA not before:           Tue 13 May 2025 10:23:33 +0000
ROA not after:            Tue 12 May 2026 10:28:33 +0000
asID:                     13213
IP address blocks:        140.99.224.0/24 maxlen: 24
                          140.99.225.0/24 maxlen: 24
                          140.99.226.0/24 maxlen: 24
                          140.99.227.0/24 maxlen: 24
                          140.99.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 03:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e3:a3:11:7b:ed:e2:7b:b3:94:0d:10:99:58:f5:67:0e:2e:dd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May 13 10:23:33 2025 GMT
            Not After : May 12 10:28:33 2026 GMT
        Subject: CN=E99472783A9568AC901CE36AA985FE37DD4F68A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:09:02:83:8f:d6:32:f7:da:57:8a:19:da:
                    e6:1f:97:8c:ba:c7:62:02:f5:5b:f0:6f:6f:08:33:
                    3c:3d:c5:7b:9f:73:8b:9d:4b:08:ab:97:5e:7b:b7:
                    a1:ff:13:19:f0:16:f9:ad:52:7f:b7:2c:b3:6a:61:
                    d7:a9:2b:9c:7f:25:7d:82:b5:c2:28:5d:49:1f:79:
                    5f:9c:1b:aa:7a:d1:97:17:5d:94:2f:6f:8d:69:84:
                    8e:5c:db:66:7c:03:dd:9a:56:b2:69:ca:25:44:39:
                    f7:84:fc:96:9e:0e:7d:67:01:55:21:22:f1:bf:ed:
                    33:de:89:a5:14:02:f7:c0:92:d9:25:ae:74:c2:98:
                    a0:a6:31:d0:ce:5d:2b:ad:5f:93:ea:07:9b:01:c1:
                    41:12:17:7a:42:99:54:4e:5e:d4:2a:e3:13:92:68:
                    66:5c:8c:40:66:ba:dd:0c:0f:88:52:d5:c0:76:76:
                    00:25:19:d5:81:c6:b2:76:55:b5:c7:21:d5:70:99:
                    38:a4:62:93:17:2d:11:b6:02:83:4c:6c:79:32:aa:
                    ed:0a:9d:ad:12:88:75:8f:98:2b:73:8f:5d:cf:3b:
                    6f:8b:94:10:dc:37:32:b2:fc:ac:08:5e:c9:37:36:
                    bb:25:fe:9b:9b:0f:fc:e3:8f:2f:36:e1:d7:8c:98:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:94:72:78:3A:95:68:AC:90:1C:E3:6A:A9:85:FE:37:DD:4F:68:A1
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS13213.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.224.0/22
                  140.99.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:ab:60:3f:b3:f9:7f:fd:2f:7c:7b:5a:9e:2a:99:9b:47:
         7c:4e:fa:1e:2d:07:78:70:ca:2c:a8:a3:fe:a9:0b:2f:c4:10:
         8a:6d:c6:6a:60:a1:ef:35:f5:e5:14:63:3b:a1:ba:c9:49:82:
         22:e3:7f:06:0b:57:5f:6a:9c:84:35:4b:92:c4:28:2d:55:6b:
         56:71:4f:dc:ca:2b:6d:59:d3:34:24:a8:82:7b:a4:ac:71:7b:
         e2:71:20:1f:09:16:e6:13:e3:26:f4:1c:d4:69:f3:10:20:f0:
         72:91:01:2a:31:7a:8f:1e:a1:3a:e9:ae:6d:8c:3e:ee:a9:3a:
         69:a2:87:b6:ab:8b:fb:b4:fc:6d:c2:2a:49:5e:29:b6:09:1e:
         48:04:53:50:84:37:05:4d:91:0c:74:e9:8a:cc:09:10:9f:c8:
         f9:a0:8d:ef:f4:45:12:8a:c7:94:b0:d7:08:d9:1c:03:9e:04:
         71:79:0a:7b:d0:c8:5c:79:88:75:50:5e:c8:53:08:32:d8:80:
         27:cc:b6:30:49:b2:3b:c6:bf:83:51:97:fc:bd:e4:39:05:23:
         2b:c9:00:34:12:ef:47:42:fe:32:2d:75:c0:89:bd:a0:1b:87:
         64:61:8c:77:70:43:59:36:6f:e6:37:6d:e0:15:a6:4e:d8:f7:
         99:47:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:05 2025 by rpki-client