Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          +KMvLdaCaf9HyeWpu6kyyEGHbmxuNMF5Cq2wWYQcvUQ=
Subject key identifier:   F8:7D:66:CD:AF:F1:0E:D7:8D:C5:DB:24:6A:AA:5A:AD:B4:4C:2E:98
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       275BB182C81BAEB7961F86BC0CF9BA463F1780C4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262287.roa
Signing time:             Tue 02 Sep 2025 08:54:06 +0000
ROA not before:           Tue 02 Sep 2025 08:49:06 +0000
ROA not after:            Tue 01 Sep 2026 08:54:06 +0000
asID:                     262287
IP address blocks:        23.94.155.0/24 maxlen: 24
                          198.23.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5b:b1:82:c8:1b:ae:b7:96:1f:86:bc:0c:f9:ba:46:3f:17:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  2 08:49:06 2025 GMT
            Not After : Sep  1 08:54:06 2026 GMT
        Subject: CN=F87D66CDAFF10ED78DC5DB246AAA5AADB44C2E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:3b:bd:c9:6e:40:53:ac:4b:cf:69:fa:03:
                    94:b2:10:25:f9:f4:6a:bd:f7:d8:7b:94:ee:c6:dc:
                    c7:9b:16:fe:78:48:71:79:0c:e7:70:42:ca:56:83:
                    06:0b:de:22:e2:1e:29:7b:27:9e:bf:ca:60:89:d0:
                    d7:b2:bd:7c:2b:5e:cd:1b:a8:af:46:31:4f:ff:31:
                    f1:5f:9e:f5:b8:92:60:04:46:6e:05:08:2b:b3:8b:
                    d8:5c:b0:3e:38:88:22:32:d4:94:03:c4:30:4b:9a:
                    3d:ac:14:0a:bc:75:6d:1f:c6:a8:67:9e:46:d3:7a:
                    c2:6e:f3:59:83:91:d7:30:d9:57:7e:dd:7d:e3:61:
                    30:b4:5d:77:ef:c8:b9:c6:9e:c6:28:11:1f:d4:75:
                    3a:60:26:ca:fe:c2:b4:71:4b:3e:e9:75:73:b5:fb:
                    5f:ee:6e:9c:d6:ec:85:a7:96:ae:d3:26:53:e6:a2:
                    63:50:e9:28:e0:bd:7c:06:d0:36:15:86:e9:df:8c:
                    62:a1:2f:16:1c:c7:15:88:d7:e8:a1:76:de:31:91:
                    ad:5b:7c:a3:f0:d7:04:6e:d6:e4:35:1e:0a:25:f1:
                    ad:30:39:ef:45:b1:f3:c8:5a:04:84:e3:48:ba:1b:
                    ce:f0:04:8f:a9:a2:a4:eb:3f:67:7a:ff:a4:0b:93:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7D:66:CD:AF:F1:0E:D7:8D:C5:DB:24:6A:AA:5A:AD:B4:4C:2E:98
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.155.0/24
                  198.23.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:4e:b6:f6:07:4f:54:2d:9c:7a:e7:80:92:6f:86:6f:99:de:
         6a:da:2f:60:22:67:93:ca:78:1c:91:0c:47:e7:42:2c:48:a6:
         29:85:4c:39:e3:30:d4:49:fa:f4:7f:19:ad:34:73:0b:bf:5e:
         4b:c7:e7:df:27:c7:62:a1:30:a1:57:79:6b:e2:4b:d5:a6:9b:
         58:c3:cc:b2:f9:9e:a2:32:6d:58:06:34:85:b4:c6:4b:5f:72:
         eb:16:3e:1b:ab:2e:ba:b3:86:f9:7f:24:be:38:9f:5d:9e:a3:
         f1:62:df:f6:10:23:aa:ee:10:8a:dc:c3:12:d0:77:92:ab:88:
         01:54:97:0b:39:7c:fb:9b:02:7d:74:e4:16:10:04:11:bd:e7:
         fe:73:e9:60:bf:24:09:d9:d9:d7:fb:eb:47:6e:09:a9:5d:77:
         a4:81:e1:06:8f:bd:34:0d:b8:40:bc:d0:4c:8d:d9:a2:32:11:
         07:c6:5c:0e:ea:6c:9e:f4:bf:ae:47:5f:22:4a:13:58:a4:8f:
         d5:c6:ea:a1:55:c5:5f:04:e3:be:49:e7:10:ff:35:6e:72:43:
         4a:6e:3e:93:9a:7c:5b:7f:36:fa:cc:1a:89:2a:cb:5a:8c:99:
         2f:4f:ef:94:04:93:f5:3a:77:df:b9:78:e7:20:c5:9d:86:a7:
         8e:4a:41:c3
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUJ1uxgsgbrreWH4a8DPm6Rj8XgMQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTAyMDg0OTA2WhcNMjYwOTAxMDg1NDA2
WjAzMTEwLwYDVQQDEyhGODdENjZDREFGRjEwRUQ3OERDNURCMjQ2QUFBNUFBREI0
NEMyRTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe87vcluQFOs
S89p+gOUshAl+fRqvffYe5TuxtzHmxb+eEhxeQzncELKVoMGC94i4h4peyeev8pg
idDXsr18K17NG6ivRjFP/zHxX571uJJgBEZuBQgrs4vYXLA+OIgiMtSUA8QwS5o9
rBQKvHVtH8aoZ55G03rCbvNZg5HXMNlXft1942EwtF1378i5xp7GKBEf1HU6YCbK
/sK0cUs+6XVztftf7m6c1uyFp5au0yZT5qJjUOko4L18BtA2FYbp34xioS8WHMcV
iNfooXbeMZGtW3yj8NcEbtbkNR4KJfGtMDnvRbHzyFoEhONIuhvO8ASPqaKk6z9n
ev+kC5OK6wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFPh9Zs2v8Q7XjcXbJGqqWq20
TC6YMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzI2MjI4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEABdemwMEAMYXtjANBgkqhkiG9w0B
AQsFAAOCAQEAx0629gdPVC2ceueAkm+Gb5neatovYCJnk8p4HJEMR+dCLEimKYVM
OeMw1En69H8ZrTRzC79eS8fn3yfHYqEwoVd5a+JL1aabWMPMsvmeojJtWAY0hbTG
S19y6xY+G6suurOG+X8kvjifXZ6j8WLf9hAjqu4QitzDEtB3kquIAVSXCzl8+5sC
fXTkFhAEEb3n/nPpYL8kCdnZ1/vrR24JqV13pIHhBo+9NA24QLzQTI3ZojIRB8Zc
DupsnvS/rkdfIkoTWKSP1cbqoVXFXwTjvknnEP81bnJDSm4+k5p8W382+swaiSrL
WoyZL0/vlAST9Tp337l45yDFnYanjkpBww==
-----END CERTIFICATE-----
Generated at Tue Sep 16 03:45:50 2025 by rpki-client