Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199529.roa
File:                     AS199529.roa (raw, json)
Hash identifier:          frask+mpDIql+MfqDh41709+79sOQWq0ReeZhVCgUG0=
Subject key identifier:   06:2A:CC:B0:4F:74:68:66:1F:D3:84:16:23:88:8E:FF:82:47:EE:C4
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6A33A14E7E95384834BEA249FC1640B96C4AED88
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199529.roa
Signing time:             Thu 10 Sep 2026 18:26:52 +0000
ROA not before:           Thu 10 Sep 2026 18:21:52 +0000
ROA not after:            Thu 09 Sep 2027 18:26:52 +0000
asID:                     199529
IP address blocks:        40.27.74.0/24 maxlen: 24
                          40.27.75.0/24 maxlen: 24
                          40.27.104.0/24 maxlen: 24
                          40.27.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 05:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:33:a1:4e:7e:95:38:48:34:be:a2:49:fc:16:40:b9:6c:4a:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 10 18:21:52 2026 GMT
            Not After : Sep  9 18:26:52 2027 GMT
        Subject: CN=062ACCB04F7468661FD3841623888EFF8247EEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:f2:f6:77:ec:40:1f:76:1f:31:07:7b:dd:
                    88:13:f5:95:7b:0e:de:13:bf:9c:ff:10:c2:34:9a:
                    6c:26:61:81:5a:ab:fa:dd:68:0b:11:63:b9:84:25:
                    0c:10:5f:95:e2:37:ac:5d:65:d8:52:85:78:38:8a:
                    98:b4:05:9e:2d:6b:63:db:51:98:66:87:dc:4c:86:
                    f8:9b:4d:ed:6e:c0:42:ea:49:96:9f:3b:b4:21:4b:
                    42:ae:56:20:af:7f:1d:ea:9d:33:00:1c:ad:d4:52:
                    a4:4c:38:58:05:52:d8:d1:a4:bc:6f:90:b5:b4:e1:
                    49:3c:10:7f:5f:22:94:67:13:1a:c2:01:8c:82:30:
                    3e:fc:a9:b0:7b:39:f1:c7:7d:70:78:12:d6:a4:ca:
                    d2:5f:2a:92:96:14:37:c4:72:24:37:5a:7a:bb:81:
                    fc:7e:d6:13:da:5c:02:4c:54:34:48:9c:6a:b8:cd:
                    29:e0:27:34:cd:c4:93:16:38:37:5d:d4:55:32:28:
                    5d:bd:5f:11:e2:e2:dc:3d:12:c2:e9:bb:89:26:25:
                    2e:70:f8:b4:eb:fb:30:06:cb:28:cd:90:3b:3a:e6:
                    65:9f:21:77:70:3a:98:fb:d5:48:56:f7:42:0a:42:
                    71:ae:e4:25:76:df:e8:58:ec:a6:0e:45:f5:4c:36:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:CC:B0:4F:74:68:66:1F:D3:84:16:23:88:8E:FF:82:47:EE:C4
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.74.0/23
                  40.27.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:a5:ac:6d:c3:0f:34:3e:13:aa:10:56:07:3d:f4:2a:64:
         a4:5e:0a:39:4b:58:e8:b8:c9:bf:75:b3:1b:16:55:f8:1d:21:
         64:d3:a9:70:80:7b:5c:91:f5:84:59:a5:b4:21:e2:48:77:09:
         bc:56:fa:5f:0a:73:63:b3:49:29:63:df:1e:a3:70:a2:fe:d1:
         18:02:a2:c2:1b:25:7f:e1:82:d2:ea:b1:b7:18:27:3f:46:22:
         3b:1e:3d:cb:45:55:5f:6d:d8:92:72:08:6e:80:b0:1d:6f:d5:
         68:58:5b:ed:e2:78:f7:2a:7a:fc:a5:99:3f:88:5b:d8:0c:dd:
         ed:02:44:af:48:90:a5:c2:b3:28:e2:65:e5:dd:ab:86:f9:78:
         11:eb:6a:c3:0c:cf:15:9f:90:bf:e0:b4:cc:61:3c:d9:12:7a:
         20:24:70:53:0c:48:4d:d6:c3:70:6a:ec:b4:91:a2:29:70:35:
         da:e5:f4:2c:97:a6:65:5c:4f:b3:1e:ad:da:b5:c9:f7:50:74:
         6b:97:e5:14:be:13:9b:35:2d:6a:47:28:28:b2:bf:06:89:e8:
         01:d8:79:69:f1:1b:97:0e:5b:0e:47:8c:55:5d:8f:35:16:e0:
         4b:e9:76:c2:5e:cb:6f:24:90:9c:d6:9f:9d:8f:9e:4b:98:de:
         7e:a1:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:46 2026 by rpki-client