Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          76svMxZh4INTCk56SyRBf1Jf1+IZmu+HDSu6B4CRqGk=
Subject key identifier:   1D:30:00:52:EB:04:83:0A:B6:CF:76:42:AF:57:C0:75:59:0B:24:BE
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2774BF7DF80B0711C369649A16810AB113E3551F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
Signing time:             Wed 02 Sep 2026 00:36:20 +0000
ROA not before:           Wed 02 Sep 2026 00:31:20 +0000
ROA not after:            Wed 01 Sep 2027 00:36:20 +0000
asID:                     212669
IP address blocks:        140.99.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:74:bf:7d:f8:0b:07:11:c3:69:64:9a:16:81:0a:b1:13:e3:55:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep  2 00:31:20 2026 GMT
            Not After : Sep  1 00:36:20 2027 GMT
        Subject: CN=1D300052EB04830AB6CF7642AF57C075590B24BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:b5:6b:49:0f:08:a6:94:e3:18:dc:84:62:
                    80:ce:b1:47:1a:5e:ba:21:30:b5:d6:7f:ce:8d:52:
                    18:87:43:9c:82:f5:2d:ee:38:20:dd:50:57:75:d9:
                    5d:3a:46:8c:d5:1d:65:3d:1a:f4:96:c3:63:a0:e4:
                    0a:e2:c0:fe:c7:d2:7f:e6:b3:2d:ff:43:c9:58:ba:
                    28:71:23:67:82:77:9a:49:21:df:02:94:68:05:3e:
                    c8:f3:5d:bb:da:12:55:16:36:45:c3:7b:4d:11:df:
                    62:3c:ea:4a:c6:2a:12:e1:ae:ff:22:d1:c3:9c:9d:
                    ee:51:ac:c9:f6:75:35:b6:33:2d:9b:ed:8e:1e:10:
                    6d:f8:62:e7:05:71:e0:9a:92:8f:e8:e7:49:6c:3b:
                    26:0b:a0:dd:08:c9:0e:bc:82:88:ff:3e:22:69:33:
                    2e:0f:3c:19:c4:af:df:45:cf:c4:dc:55:51:d6:83:
                    a4:72:93:d9:31:3a:0d:2b:d3:41:95:73:98:1c:55:
                    3c:eb:fc:93:91:f8:4f:e0:48:e9:9e:4c:4e:be:71:
                    3b:1e:94:73:53:67:ab:17:a6:f8:8d:1f:3d:a3:48:
                    5e:14:3c:0a:f5:d7:f2:7d:47:2d:e3:2f:c5:d0:18:
                    e4:4c:58:7e:ce:99:b1:ed:13:d8:b9:02:fa:1f:5a:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:30:00:52:EB:04:83:0A:B6:CF:76:42:AF:57:C0:75:59:0B:24:BE
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f5:ad:95:74:f9:fb:33:dd:9a:21:c5:8d:f2:63:a8:0b:b0:
         2d:83:96:96:87:f4:a9:3d:91:e4:e8:eb:fa:04:14:06:2c:7c:
         83:96:17:89:ce:65:05:d5:a8:8c:2a:03:ca:d4:02:86:7f:51:
         8e:6b:60:30:32:eb:10:a1:f6:11:6b:9d:5b:67:94:27:55:d5:
         cf:ea:52:a9:9b:98:d7:bd:3f:c0:68:fd:42:68:63:21:87:ab:
         fb:68:6d:25:39:7a:b0:f2:74:55:57:bf:7a:d5:ea:e7:2b:4d:
         2c:b5:22:bf:8f:1e:1d:88:13:f4:cc:e4:62:4e:bf:05:03:19:
         21:66:06:1f:89:08:c5:8f:2f:cc:70:f5:5c:f2:22:4e:3d:59:
         c3:8f:c8:c0:5c:16:b0:51:b1:d7:4c:ae:cc:06:11:96:43:3b:
         df:18:38:e8:93:93:78:65:dd:05:7c:57:12:e6:bc:00:98:fa:
         8c:41:4b:2c:42:de:25:8a:8c:29:56:26:1d:4d:38:b8:2b:f7:
         c4:a0:4d:56:0e:be:73:4b:6e:3e:25:c4:52:d7:77:7f:d4:a2:
         7b:ff:07:c1:56:86:22:45:75:05:4a:56:c4:e9:e9:53:fa:e9:
         54:d1:0b:97:a8:79:a8:71:38:28:2e:a0:78:4c:cb:b0:ba:59:
         57:ee:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:13:43 2026 by rpki-client