Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa
File:                     AS7922.roa (raw, json)
Hash identifier:          2D5XQ0IWCmn2WVNpn9u9sM6mH18N1yBxi/cKaA95G3s=
Subject key identifier:   92:84:6B:40:91:7D:98:94:95:9E:33:23:80:E4:D6:44:81:04:DB:FF
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       621627CB6B73D8C0C1E6FE9E07DCC52F7A56E42A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa
Signing time:             Tue 29 Sep 2026 11:36:20 +0000
ROA not before:           Tue 29 Sep 2026 11:31:20 +0000
ROA not after:            Tue 28 Sep 2027 11:36:20 +0000
asID:                     7922
IP address blocks:        140.99.49.0/24 maxlen: 24
                          140.99.77.0/24 maxlen: 24
                          140.99.79.0/24 maxlen: 24
                          140.99.127.0/24 maxlen: 24
                          140.99.132.0/22 maxlen: 24
                          140.99.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 22:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:16:27:cb:6b:73:d8:c0:c1:e6:fe:9e:07:dc:c5:2f:7a:56:e4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 29 11:31:20 2026 GMT
            Not After : Sep 28 11:36:20 2027 GMT
        Subject: CN=92846B40917D9894959E332380E4D6448104DBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c1:0d:06:8e:c0:c4:f8:78:7c:a3:25:de:19:
                    f1:4c:b9:e0:a6:fd:08:35:44:67:92:97:9b:4d:c4:
                    c9:cf:ac:ba:5f:f0:72:35:58:d5:80:86:4e:f8:5a:
                    fb:34:44:78:92:a1:a5:cf:84:b9:ec:91:5f:c3:3c:
                    f9:4d:f2:6b:b1:3e:83:37:a7:50:26:9b:46:e3:db:
                    2f:8f:49:e6:c7:8d:06:0b:ee:df:a6:6c:45:8d:d8:
                    6c:94:f4:2e:0f:88:6b:7f:aa:be:45:67:65:66:c2:
                    b7:7c:88:56:a7:51:34:45:5c:09:66:ec:ea:33:93:
                    67:4b:19:76:11:29:0e:68:6c:52:61:fe:1b:12:71:
                    79:48:c4:93:e6:44:0a:8e:d8:78:b0:01:72:6f:62:
                    21:13:fa:f9:0d:de:2d:c0:3d:f8:4b:5f:a4:99:a4:
                    26:75:a0:f9:f0:89:90:54:c4:05:d4:43:68:34:a5:
                    44:35:5b:ad:1f:c3:8d:b0:d1:15:72:a3:b0:37:57:
                    8b:fc:a9:1f:9a:0a:1d:b2:4c:e1:bf:d4:7d:70:e5:
                    cd:d3:ef:ef:17:d0:95:57:a4:43:f3:09:97:d2:25:
                    01:97:ab:9e:0e:50:0e:f7:2a:76:24:8d:0c:bc:be:
                    5b:87:f2:1e:c1:a9:a9:d1:ac:bc:2d:bc:6e:d0:aa:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:84:6B:40:91:7D:98:94:95:9E:33:23:80:E4:D6:44:81:04:DB:FF
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.49.0/24
                  140.99.77.0/24
                  140.99.79.0/24
                  140.99.127.0/24
                  140.99.132.0/22
                  140.99.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:ad:4c:b6:5d:f0:2c:ff:44:2e:35:a4:a3:c9:62:71:2b:
         a1:26:05:ce:ee:0f:00:a6:bd:a2:0a:ea:44:2d:51:30:48:be:
         dc:a7:be:9d:43:f0:b0:9e:c0:5a:d0:a1:f7:d2:4e:da:1f:d0:
         53:60:60:0e:45:b8:18:76:e1:7f:4a:b6:78:20:fc:e8:b8:56:
         d0:74:2c:8c:57:e6:96:9e:46:b7:d8:58:2e:ac:c0:2a:2e:a5:
         b0:43:6d:dd:b0:85:21:61:97:73:b9:d6:a6:1a:b2:70:ae:a2:
         9f:9a:5a:26:ed:f5:88:00:e9:3e:9b:e7:73:c6:df:d3:f0:d7:
         79:14:30:e7:3c:93:cc:ce:c3:95:a1:12:e4:ba:89:9d:0c:d3:
         f6:da:e7:78:f9:cc:f7:9d:26:07:b1:9d:fa:8f:b3:2b:9b:f5:
         42:c5:fc:2e:82:e2:e8:da:3a:1e:1b:ea:dc:18:60:22:0a:cd:
         05:48:d0:d8:11:f6:ac:ea:58:3e:07:ef:db:a7:ac:d3:fd:a4:
         8b:f9:c1:c2:d6:2c:3e:9e:d2:24:2e:2f:c4:4b:4b:d2:ca:a3:
         dc:4f:05:41:07:29:de:f9:ff:dd:2e:fe:7f:4b:63:ed:95:a1:
         88:3e:8c:73:f7:4e:23:1a:0d:1b:20:9d:21:a5:25:ac:80:59:
         b1:f1:65:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:07:16 2026 by rpki-client