Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS984.roa
File:                     AS984.roa (raw, json)
Hash identifier:          4XWamYlc+By8UZ3lC/VNIMIa1PWvON0+GDyaZbeUdc8=
Subject key identifier:   F5:6A:43:5D:E1:C8:69:DC:99:C0:F8:1A:19:66:26:57:90:28:25:9D
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2B9175D8FE672F2ADF4E9445131EEE6E6B9103C4
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS984.roa
Signing time:             Thu 09 Oct 2025 09:38:11 +0000
ROA not before:           Thu 09 Oct 2025 09:33:11 +0000
ROA not after:            Thu 08 Oct 2026 09:38:11 +0000
asID:                     984
IP address blocks:        40.183.123.0/24 maxlen: 24
                          40.183.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:91:75:d8:fe:67:2f:2a:df:4e:94:45:13:1e:ee:6e:6b:91:03:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct  9 09:33:11 2025 GMT
            Not After : Oct  8 09:38:11 2026 GMT
        Subject: CN=F56A435DE1C869DC99C0F81A196626579028259D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:98:7d:63:64:5d:a0:d5:30:4e:84:e3:e9:
                    fe:fe:01:13:f6:ff:3a:8c:93:78:e1:2f:7d:9d:29:
                    3e:bf:72:89:01:fa:02:20:ee:a3:f8:d8:1a:34:07:
                    7b:d2:48:ab:a7:84:b4:ff:6f:a1:8f:fc:91:50:d8:
                    fe:ca:f0:df:dd:08:0f:2a:be:5b:9f:d4:5d:8f:37:
                    26:c6:05:12:1b:fc:15:c4:39:ab:2e:50:b6:a2:7b:
                    25:b6:8c:a1:e6:b4:02:60:b7:0a:c5:16:f9:61:1c:
                    4b:37:34:23:4c:98:cd:13:ed:31:91:db:ab:f6:cc:
                    8a:86:1f:c0:bd:ab:f8:81:48:2e:01:38:54:71:ff:
                    2c:3c:c3:53:7d:09:7b:76:09:6b:e4:19:d9:89:31:
                    6f:7c:99:2b:92:94:8f:a7:7e:97:be:f9:37:76:8c:
                    1a:59:f0:e8:cf:80:a5:51:37:87:cd:72:4d:e9:c7:
                    04:e0:c8:7e:7c:62:dc:b7:47:06:ff:a4:e1:d3:00:
                    7e:16:9a:41:11:85:02:65:01:96:05:10:5d:5d:7e:
                    7a:83:39:bf:d3:53:fe:8a:a8:dc:11:bf:f8:c9:e4:
                    52:2b:6f:14:a1:80:16:f0:22:69:4c:2c:b2:87:6b:
                    51:e4:c1:6b:85:84:fa:71:16:97:a0:49:be:e4:24:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:43:5D:E1:C8:69:DC:99:C0:F8:1A:19:66:26:57:90:28:25:9D
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS984.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.123.0/24
                  40.183.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:5f:f8:96:bf:66:1f:33:81:64:f3:04:48:d2:22:a4:bb:
         bc:18:9e:89:dd:51:4f:f7:9b:e9:b5:3d:96:19:38:ea:9a:46:
         19:99:3b:c5:1c:97:ca:f5:57:a9:71:c0:eb:b0:0f:54:ca:58:
         f4:44:0c:4d:d4:f5:bb:cd:a1:4e:5d:f3:37:1b:f1:a0:c8:ff:
         58:fd:c3:fb:e4:30:f7:68:7b:94:53:92:d2:12:f0:b3:fa:f8:
         2e:49:aa:1e:04:4b:8e:0c:7e:2c:d9:d3:69:75:8a:0a:8d:32:
         02:ad:1a:65:7a:69:a1:b3:9e:43:3a:70:ad:16:50:e3:58:a4:
         99:5c:0c:0d:0c:ad:d8:e4:c5:8e:a9:1e:be:91:58:ac:67:db:
         ed:00:56:46:b6:1a:e1:d1:4d:e2:b8:5b:8b:0e:13:d6:da:53:
         16:9d:ef:1b:77:18:8e:9d:0d:2d:62:80:ec:d3:d5:fa:c4:04:
         7f:f5:28:96:8d:2b:62:85:d6:33:3f:0b:b6:1d:fd:da:7c:78:
         d9:7e:72:cf:ed:da:75:dd:1a:b2:c6:5a:fb:8a:29:c8:ba:5f:
         86:63:38:81:7c:14:32:0e:1f:67:de:f1:46:79:9d:b5:cc:50:
         60:01:18:48:e7:c0:6a:79:e0:05:2b:f4:91:c8:91:ac:a3:c1:
         71:38:20:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:02 2025 by rpki-client