Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          wGOQqEDZLY6iujqVy7hhuMVd75GjYCuaFWLsVLzy/HI=
Subject key identifier:   B2:41:75:F1:18:4F:0B:1E:96:60:B0:84:BC:77:DC:3C:E8:45:69:A7
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6C1062A2CF4A922B8A336398C8B34AA4753671CF
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa
Signing time:             Wed 26 Aug 2026 21:36:20 +0000
ROA not before:           Wed 26 Aug 2026 21:31:20 +0000
ROA not after:            Wed 25 Aug 2027 21:36:20 +0000
asID:                     262287
IP address blocks:        140.99.104.0/24 maxlen: 24
                          140.99.226.0/24 maxlen: 24
                          140.99.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:10:62:a2:cf:4a:92:2b:8a:33:63:98:c8:b3:4a:a4:75:36:71:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 26 21:31:20 2026 GMT
            Not After : Aug 25 21:36:20 2027 GMT
        Subject: CN=B24175F1184F0B1E9660B084BC77DC3CE84569A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:0b:84:c3:de:04:b0:ea:48:6a:96:9d:6b:
                    0d:69:a0:0e:6f:f5:ad:ca:5b:39:c9:27:67:af:3a:
                    14:62:22:ac:ad:1f:19:6b:17:2b:ce:25:06:8e:69:
                    ba:e9:a9:d0:19:05:3a:ae:cb:94:b6:77:8a:4a:52:
                    1b:45:f9:dc:7f:3b:4f:31:65:22:9e:76:03:0d:30:
                    23:ea:a1:7c:14:b2:a4:82:32:4f:c8:39:1a:39:0e:
                    8c:00:94:32:fd:b9:ec:3c:5e:d8:ec:f0:e4:09:26:
                    d5:c8:64:73:de:fa:26:84:5d:fa:b7:4f:68:a6:a7:
                    2f:1c:7b:0b:00:fb:88:02:07:09:dc:93:20:95:e6:
                    09:18:1f:62:4b:b9:87:77:09:87:7c:c2:43:44:e1:
                    e0:8f:58:50:61:7f:d2:20:0e:70:69:cf:69:54:20:
                    e8:9a:13:9e:0f:9b:ec:01:c2:7c:db:76:36:ae:a1:
                    0b:73:70:dc:36:ca:c3:76:db:48:81:d3:ac:9d:c1:
                    42:2a:71:ac:f7:92:83:e5:f3:bd:c4:97:1a:06:3e:
                    38:a4:e4:fe:b3:96:a2:54:46:7a:72:c8:f7:83:8c:
                    b9:69:d0:d8:99:de:c2:43:7e:8d:61:28:b2:a2:10:
                    27:cb:5c:fb:8b:4e:85:43:a6:26:3b:e4:6b:d6:37:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:75:F1:18:4F:0B:1E:96:60:B0:84:BC:77:DC:3C:E8:45:69:A7
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.104.0/24
                  140.99.226.0/24
                  140.99.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:03:3e:4a:35:eb:a1:06:17:35:a0:a6:92:a0:ad:73:30:
         55:49:e0:c8:83:a9:b4:6b:7f:53:16:f1:dd:7d:9a:4e:e5:3e:
         e6:26:04:1e:66:18:d9:f5:69:7d:66:21:d0:fc:62:e0:ff:73:
         22:a2:e2:02:e6:b7:4a:9d:f3:77:79:f0:8e:66:33:5f:a5:ec:
         1b:8d:1a:e2:30:4b:d7:6e:71:08:b3:01:ed:2c:43:bc:b8:04:
         42:64:74:4a:67:90:39:35:0b:f3:c2:6a:1a:ea:18:f3:34:a4:
         52:13:22:54:87:72:14:df:b3:ac:e0:33:f5:b5:b5:a7:bb:54:
         3e:d0:a3:2f:d1:4a:ab:9a:f5:7a:e0:2d:05:7b:6f:e5:ad:74:
         63:bf:92:ae:19:ac:e2:97:a3:33:92:69:55:5e:61:88:8f:d8:
         f4:9d:d4:77:d0:0e:91:b5:4e:af:3c:09:2e:64:e1:54:5e:40:
         49:86:2f:4d:7a:95:5b:1f:d0:2b:9b:ec:6b:df:fa:b8:7f:dc:
         36:2d:87:f2:58:2a:17:37:e1:16:53:9d:71:7e:48:c2:aa:2f:
         43:d5:72:ac:74:80:24:8f:1a:85:8a:e6:15:b8:25:8f:84:b8:
         1f:3a:e0:ad:32:0d:e3:b3:e7:4b:40:e5:82:60:e6:a8:fc:62:
         ad:35:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:13:42 2026 by rpki-client