Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          AoSLJkf8aSORdeJMel9v2npAdPULmIeHDJ0zKs+aKkE=
Subject key identifier:   2B:27:EE:F4:DB:15:D6:0D:0C:A4:55:91:1F:2C:05:D0:5A:5A:61:5C
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       470730A34B16CAF177ADC53B8F43CDD0F42DDA89
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa
Signing time:             Tue 02 Sep 2025 08:50:14 +0000
ROA not before:           Tue 02 Sep 2025 08:45:14 +0000
ROA not after:            Tue 01 Sep 2026 08:50:14 +0000
asID:                     262287
IP address blocks:        140.99.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 17:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:07:30:a3:4b:16:ca:f1:77:ad:c5:3b:8f:43:cd:d0:f4:2d:da:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep  2 08:45:14 2025 GMT
            Not After : Sep  1 08:50:14 2026 GMT
        Subject: CN=2B27EEF4DB15D60D0CA455911F2C05D05A5A615C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:18:bd:1f:88:09:aa:51:fb:6f:7b:bf:8a:
                    ed:fb:78:4f:3b:f5:fd:8f:89:ae:7c:ef:3b:7c:7a:
                    1c:a2:71:57:45:69:8e:97:a1:cd:3b:b0:91:51:aa:
                    b7:3b:39:d2:f0:01:fe:8f:f4:fd:a3:f7:c6:ce:e1:
                    19:88:dd:85:06:1c:24:b5:e3:de:0e:18:a3:4b:be:
                    9c:f6:f2:5b:60:00:62:9c:ef:27:c6:04:3f:43:f8:
                    d1:fd:2c:a0:ee:fc:44:a9:db:ba:cf:ee:ad:f1:59:
                    15:6d:bd:55:9c:ba:6b:33:ad:55:7e:55:b9:52:ea:
                    60:64:ec:99:66:ad:42:9e:ca:85:2d:84:cc:1f:90:
                    21:f0:cf:00:01:f9:89:42:9e:01:b0:c4:d9:0f:77:
                    ce:63:f6:59:6f:25:35:fd:8c:64:71:10:d6:86:24:
                    3a:8f:19:b2:30:70:8c:30:bb:9d:93:b5:86:c9:a1:
                    9b:2d:aa:e9:59:da:5a:8b:a9:38:0b:37:36:7c:21:
                    b5:89:8d:91:5c:9b:68:c9:d4:33:7d:19:16:93:48:
                    9f:91:4b:de:f9:e0:e3:bb:bf:0f:b1:a3:52:4b:bc:
                    4d:e4:e7:21:58:1d:95:4f:b4:02:ec:c6:47:80:0c:
                    53:0c:5b:f2:1d:f8:f0:b2:3a:3f:b4:d5:81:95:63:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:27:EE:F4:DB:15:D6:0D:0C:A4:55:91:1F:2C:05:D0:5A:5A:61:5C
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:88:f7:7e:b2:63:b3:ca:39:f4:aa:b0:3a:c4:73:ae:7f:
         ac:1e:03:6b:9e:0f:2e:22:15:e4:91:69:24:73:dc:63:85:fc:
         ea:e4:40:69:af:20:bd:b8:04:ac:8a:39:37:56:1c:0e:14:78:
         9e:dc:7b:2d:05:d0:2f:a7:54:6a:09:56:84:79:5d:73:24:76:
         38:34:37:11:bf:e4:0f:2d:f8:f2:c1:fb:19:92:e2:ea:a3:fd:
         b3:c6:e0:f1:1f:f1:52:e0:6a:bc:34:bb:64:fd:37:54:d8:46:
         ac:bf:17:22:17:76:14:ae:07:85:0d:e1:d2:6f:f9:91:5c:6a:
         e2:56:b6:59:cc:e7:f3:5e:0c:00:74:f5:47:52:8a:c1:d2:3b:
         f2:0d:37:05:e6:0a:4b:e1:12:52:87:59:48:f0:1f:1e:40:35:
         04:36:0f:48:c3:11:bd:d7:13:d5:aa:2d:7d:d2:53:3b:df:dd:
         1c:ce:6a:02:43:d1:24:cb:df:0f:c4:e7:56:bb:87:c2:cf:c4:
         39:dc:69:76:d2:0f:da:5f:7e:9a:07:02:0d:28:f4:53:e2:f9:
         10:3d:2a:52:ac:36:9a:a3:0b:02:35:41:8b:7a:46:19:e6:d9:
         da:7c:0c:4e:e3:c0:88:56:17:12:eb:bb:89:08:62:ec:6d:d9:
         88:1a:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:18:01 2025 by rpki-client