Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa
File:                     AS205886.roa (raw, json)
Hash identifier:          XYm2xx3dgyvuGRJB7/t5JMzkQ9smL5TOvR7Z1YWp40I=
Subject key identifier:   32:A5:54:EF:D9:66:21:BB:02:45:A9:A2:31:DD:E1:FD:45:B5:E9:33
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4F8099B3ADDB8D739C479C5E2E46415D7B639AC6
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa
Signing time:             Wed 27 Aug 2025 08:07:06 +0000
ROA not before:           Wed 27 Aug 2025 08:02:06 +0000
ROA not after:            Wed 26 Aug 2026 08:07:06 +0000
asID:                     205886
IP address blocks:        40.27.174.0/24 maxlen: 24
                          40.223.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:80:99:b3:ad:db:8d:73:9c:47:9c:5e:2e:46:41:5d:7b:63:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 27 08:02:06 2025 GMT
            Not After : Aug 26 08:07:06 2026 GMT
        Subject: CN=32A554EFD96621BB0245A9A231DDE1FD45B5E933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:6b:75:4f:46:11:2a:66:0f:30:2b:99:07:
                    da:a0:2e:0a:16:7e:17:6a:d2:86:d2:9a:19:18:b2:
                    70:65:17:76:bc:a7:20:5d:e7:db:d7:4a:fa:48:21:
                    9e:3b:36:82:7c:ba:13:31:0c:01:9f:1c:59:1f:c6:
                    55:f2:21:29:8f:d6:94:7d:f2:ac:10:aa:e7:6c:b9:
                    5b:4d:59:d6:ef:f2:7d:49:5b:9f:d1:5b:50:59:09:
                    cd:e2:19:6a:77:6e:15:98:a1:36:99:52:42:98:79:
                    81:5c:9a:dd:0d:5b:b4:67:37:65:94:82:02:48:7b:
                    a9:92:67:b5:b1:4d:18:a2:07:d4:72:94:d2:e2:54:
                    fa:57:8e:74:7f:f7:c9:7a:43:d0:71:2b:f4:91:99:
                    b2:c8:d0:f8:91:0a:11:ef:d0:dd:53:bb:32:0f:d1:
                    4b:b5:79:26:3c:bc:63:fe:3b:5c:17:9a:0e:ff:f7:
                    e5:4a:58:38:c2:89:69:a4:e7:af:bb:a6:11:dc:8f:
                    23:a8:a6:ba:73:e7:1b:6d:16:c8:23:74:86:e1:6a:
                    aa:a5:0d:2b:5c:56:7c:7c:9b:7a:57:8a:e4:79:b3:
                    d0:b3:af:67:2a:01:dd:63:91:df:79:10:cb:a9:ae:
                    32:08:fe:83:b3:b7:73:96:ee:3d:ca:72:76:80:eb:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A5:54:EF:D9:66:21:BB:02:45:A9:A2:31:DD:E1:FD:45:B5:E9:33
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.174.0/24
                  40.223.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:90:37:8d:15:f4:30:0f:10:66:18:6e:87:70:ad:ae:f4:85:
         78:46:20:a9:1d:81:27:27:0c:fe:9f:9b:7c:55:3c:e8:90:a7:
         28:7f:2c:c3:3d:c1:a5:34:9d:ae:a5:32:75:76:ef:ad:28:b7:
         95:80:9c:8a:cd:ec:a0:fd:4f:f0:83:57:ba:32:c1:c4:4f:27:
         22:09:a2:04:d8:d6:34:bc:8a:7c:c4:58:81:bf:e7:d0:3b:6f:
         ee:0d:8f:44:56:71:e6:88:ea:a5:89:21:c4:ea:96:77:63:59:
         09:88:58:bc:1d:52:33:24:cb:8a:e2:01:8a:95:42:09:86:c3:
         ae:dd:c6:93:d9:fc:5d:ab:13:8a:d9:55:53:ff:c2:3c:b6:65:
         ce:4d:e3:3a:2e:55:33:c6:34:b8:7a:9e:0a:4d:42:30:be:cc:
         19:9a:8a:83:fe:e4:17:0d:b8:3e:1d:00:e6:08:37:38:e3:5a:
         14:c4:45:79:45:43:4d:01:96:d2:6b:12:be:65:f6:70:2a:de:
         44:1a:c3:73:3f:4a:e1:a4:3c:ce:ae:9f:4d:c3:3d:a1:3c:f6:
         ef:09:04:e0:fe:39:10:d4:fe:13:6a:65:7f:4d:90:b7:15:53:
         92:60:3e:f9:9b:fc:4b:8f:45:81:33:11:d4:ed:d4:44:56:5a:
         85:5a:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:14:09 2025 by rpki-client